GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: upwind-agent, external-dns, flux-image-automation-controller-fips, flux-source-controller-fips, keda-fips, trivy-operator, drone-fips, rancher-agent, kube-conformance, kubevela-fips, snyk-cli, zarf-fips, seaweedfs-rocksdb, cilium, kine, tigera-operator,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: upwind-agent, external-dns, flux-image-automation-controller-fips, terraform-fips, chezmoi, flux-source-controller-fips, keda-fips, dagger, gomplate-fips, terragrunt, chainctl-fips, trivy-operator, wolfictl, docker-cli-buildx, rancher-agent, kube-conformance,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: upwind-agent, external-dns, keda-fips, docker-cli-buildx, rancher-agent, kube-conformance, snyk-cli, cilium, kine, tigera-operator, prometheus-elasticsearch-exporter, argo-workflows-fips, rancher, tekton-pipelines-fips, vault, containerd, backup-restore-operator,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: upwind-agent, datadog-agent-fips, external-dns, flux-image-automation-controller-fips, terraform-fips, chezmoi, flux-source-controller-fips, keda-fips, dagger, gomplate-fips, docker-fips, chainctl-fips, terragrunt, trivy-operator, wolfictl, drone-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-events, chisel, zarf, dagger, terragrunt, cilium-cli, buildkitd, nerdctl, mattermost, terraform-provider-azurerm, kubernetes-dashboard, loki, step, sops, crossplane-provider-azure-sql, flux-notification-controller, glab, terraform-provider-tls,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: zarf, chisel, trivy, kaf, kubernetes, cilium-cli, external-secrets-operator, nerdctl, prometheus, mattermost, opentelemetry-collector, kubernetes-dashboard, cert-manager, minio, rancher-agent, loki, kots, cloud-provider-aws, argocd-image-updater, prometheus-operator,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kaf, kubernetes, cilium-cli, external-secrets-operator, nerdctl, prometheus, mattermost, opentelemetry-collector, kubernetes-dashboard, buildah, cert-manager, minio, rancher-agent, loki, kots, cloud-provider-aws, prometheus-operator, k3s, external-dns, spire-server,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zarf, chisel, trivy, kaf, kubernetes, cilium-cli, external-secrets-operator, nerdctl, prometheus, mattermost, opentelemetry-collector, kubernetes-dashboard, cert-manager, minio, rancher-agent, loki, kots, cloud-provider-aws, argocd-image-updater, prometheus-operator,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: argo-events, zarf, pulumi-language-java, splunk-otel-collector, trivy, dagger, kaf, terragrunt, guac, grype, nfpm, kubernetes, cilium-cli, external-secrets-operator, nerdctl, prometheus, mattermost, opentofu, opentelemetry-collector, kubernetes-dashboard, minio, loki...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: argo-events, zarf, dagger, terragrunt, cilium-cli, nerdctl, mattermost, kubernetes-dashboard, loki, step, argo-cd, helm, cilium, osv-scanner, istio, kine, rancher, snyk-cli, aactl, trivy, nfpm, openbao, external-secrets-operator, opentelemetry-collector, buildah,...

OPENSUSE-SU-2026:21072-1 Security update for trivy

This update for trivy fixes the following issues Update to version 0.71.2: - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption bsc1267268. - CVE-2026-46680:...

Security update for containerd

This update for containerd fixes the following issues CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260296. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZ...

ROS-20260626-73-0016

The vulnerability in containerd is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Ubuntu 25.10 / 26.04 LTS : containerd-stable vulnerabilities (USN-8473-1)

The remote Ubuntu 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8473-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could possibly use this issue to cause containerd...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:2639-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2639-1 advisory. This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization...

SUSE SLES12 Security Update : containerd (SUSE-SU-2026:2640-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2640-1 advisory. This update for containerd fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : containerd vulnerabilities (USN-8472-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8472-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could possibl...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : containerd vulnerabilities (USN-8471-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8471-1 advisory. It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attack...

GO-2026-5758 containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

containerd CRI — image-config LABEL flows to restart-monitor binary:// logger: host-root command execution from an image pull in github.com/containerd/containerd...

GO-2026-5622 Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd...