Important: containerd

Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and thi...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, k3s, rke2-runtime...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, k3s...

GO-2025-3391 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2024-2771 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, zot, frankenphp-8.4, mattermost, loki, vault, grafana-fips, elastic-agent-fips, consul, rke2-runtime, fuse-overlayfs-snapshotter, datadog-agent, k3s, datadog-agent-fips, beats, elastic-agent, rke2-runtime-fips, commercial-expanso-edge, frankenphp-8.2,...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows...

GO-2025-4240 vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath, rancher-support-bundle-kit, longhorn-manager-fips, aws-efs-csi-driver-fips, nodetaint, volcano, calico, blob-csi, rancher-system-agent, blob-csi-fips, longhorn-share-manager-fips, node-feature-discovery,...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: zot, minio, snyk-cli, terraform, omnictl-multiarch-fips, falco-no-driver, cert-manager, loki, telegraf, kyverno, flux, aactl, elastic-agent-fips, spire-server, backup-restore-operator, nerdctl, cilium, k3s, k3d, prometheus-mongodb-exporter, prometheus-operator,...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: deck-fips, deck, gitlab-runner-fips, pulumi-language-yaml, nrdot-collector-fips, mediamtx-fips, cluster-autoscaler, opentelemetry-operator-fips, fleet-server-fips, rancher-agent, beats, grype, terragrunt-fips, kustomize, sftpgo-plugin-auth,...

GO-2026-4894 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: containerd, zot, loki, kine, fuse-overlayfs-snapshotter, k3s...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: tw, buildkitd, containerd, zot, skaffold, helm-set-status, rancher-fleet, kubevela, chartmuseum, cilium-cli, docker-compose, gogatekeeper, melange, opa, trivy, fuse-overlayfs-snapshotter, helm-mapkubeapis, kots, k8ssandra-client, xeol, flux-helm-controller, kubescape...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: buildkitd, containerd, nerdctl, docker, azure-ipam, kuma, buildah, multus-cni, calico, podman, flannel, datadog-agent, istio, rootlesskit, k3s...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: containerd, argo-events, external-secrets-operator, gitsign, opentofu, falco-no-driver, istio, telegraf, terragrunt, argo-cd, guac, helm, prometheus, mattermost, argocd-image-updater, k3s, kyverno...

GO-2026-5942 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, melange, seaweedfs, sqlexporter, istio, terraform-provider-azapi, infinispan-operator, kubernetes, flux-kustomize-controller, argo-cd, golangci-lint, aactl, hubble, cerbos, elvish, kine, kubernetes-dashboard, k8s-device-plugin, pgpool2exporter,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: containerd, zot, kubo, dask-gateway, kubevela, cilium-cli, telegraf, minio, go, knative-serving, kube-fluentd-operator, trino, datadog-agent, istio, kots, kaf, kyverno, mattermost, kubernetes, fluent-bit-plugin-loki, argo-cd, aactl, prometheus, zarf, karma, hubble,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: containerd, external-secrets-operator, zot, loki, cilium-cli, telegraf, minio, rancher-agent, spire-server, cilium, istio, kots, kaf, kyverno, mattermost, external-dns, kubernetes, opentelemetry-collector, rancher, gitlab-kas, aactl, prometheus, snyk-cli,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: containerd, external-secrets-operator, skaffold, zot, loki, docker-machine-driver-harvester, cilium-cli, telegraf, minio, rancher-agent, spire-server, trivy, cilium, istio, kots, kaf, kyverno, mattermost, gitea, external-dns, kubernetes, kubescape,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: tw, cluster-proportional-autoscaler, gomplate, crossplane-provider-aws-sqs, docker-compose, kubeflow-pipelines, ghaudit, kubernetes-csi-external-attacher, restic, sqlexporter, harbor-registry, openbao, crossplane-provider-azure-authorization, addon-resizer,...