GO-2025-4233 vulnerabilities

Vulnerabilities for packages: traefik, kubernetes-dns-node-cache, dkron, k8sgateway-fips, coredns, seaweedfs, syncthing-fips, ipfs-cluster, buf, dkron-fips, rke2-runtime, caddy, kubernetes-dns-node-cache-fips, frp, kubo, kubo-fips, spegel, eks-distro, eks-distro-fips, seaweedfs-fips, teleport,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: loki-fips, blobfuse2, terraform-fips, delve, tetragon, aws-flb-firehose-fips, prometheus-operator-fips, commercial-grafana, terraform, gitlab-workhorse-ce, gitaly-fips, kubernetes, http-echo, buf, cadvisor, rke2-runtime, datadog-agent, flux,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, spicedb-fips, blob-csi, secrets-store-csi-driver-provider-gcp, kong-ingress-controller, kubernetes-csi-external-health-monitor, prometheus-alertmanager, falcosidekick, cass-operator-fips-no-pvc-delete, temporal, pulumi-kubernetes-operator,...

GO-2026-4868 vulnerabilities

Vulnerabilities for packages: loki-fips, blobfuse2, terraform-fips, delve, tetragon, aws-flb-firehose-fips, prometheus-operator-fips, commercial-grafana, terraform, gitlab-workhorse-ce, gitaly-fips, kubernetes, http-echo, buf, cadvisor, rke2-runtime, datadog-agent, flux,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: lvm-driver, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, mcp-grafana, cloud-provider-gcp-cloud-controller-manager-fips, terraform-provider-random-fips, rancher-fleet-fips, blob-csi, prometheus-node-exporter-fips, crossplane-provider-aws-sns,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: hubble, terraform-fips, aws-flb-firehose-fips, commercial-grafana, terraform, newrelic-fluent-bit-output-fips, gitlab-workhorse-ce, gitaly-fips, kubernetes, etcd, rke2-runtime, cilium-envoy-fips, datadog-agent, flux, cluster-autoscaler, azurefile-csi, net-kourier,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, crossplane-provider-aws-networkmanager-fips, crossplane-provider-azure-synapse, crossplane-provider-azure-signalrservice, omni-fips, nats, cloud-provider-gcp-cloud-controller-manager-fips,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, lvm-driver, crossplane-provider-aws-networkmanager-fips, crossplane-provider-azure-synapse, harbor-registry-fips, apko-fips, crossplane-provider-azure-signalrservice, omni-fips, spicedb-fips, nats,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, amazon-k8s-cni, lvm-driver, crossplane-provider-aws-networkmanager-fips, crossplane-provider-azure-synapse, harbor-registry-fips, apko-fips, crossplane-provider-azure-signalrservice, omni-fips, spicedb-fips, tenv-fips, nats,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: hubble, terraform-fips, headlamp-fips, timoni, terraform, newrelic-fluent-bit-output-fips, gitlab-workhorse-ce, terraform-provider-pagerduty-fips, bom, etcd, thanos-operator, rke2-runtime, helm-operator-fips, cilium-envoy-fips, flux, rancher-helm, gatekeeper, logstas...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: lvm-driver, node-feature-discovery, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, cloud-provider-gcp-cloud-controller-manager-fips, blob-csi, prometheus-node-exporter-fips, docker-machine-driver-linode, crossplane-provider-aws-sns, kapp,...

PT-2026-73234

Name of the Vulnerable Software and Affected Versions pfSense Plus versions prior to 26.07 Description The wg4 driver fails to verify if the MAC verification step succeeded after receiving a decryption result from OCF. This allows the driver to silently accept packets containing an invalid Poly13...

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

Photon OS 5.0: Coredns PHSA-2026-5.0-90-0869

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0869. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-CX88441 Security fixes in coredns 1.14.1-r1

Package coredns version 1.14.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-25679, CVE-2026-27139, CVE-2026-27138, CVE-2026-27137...

CLEANSTART-2026-ML98617 Security fixes in coredns 1.14.2-r1

Package coredns version 1.14.2-r1 fixes 13 vulnerabilities: CVE-2026-32282, CVE-2026-32289, CVE-2026-33810, CVE-2026-27144, CVE-2026-27143...

CLEANSTART-2026-IW59751 Security fixes in coredns 1.14.1-r0

Package coredns version 1.14.1-r0 fixes 2 vulnerabilities: CVE-2025-61732, CVE-2025-68121...

CLEANSTART-2026-CF63541 Security fixes in eks-distro-coredns-fips 1.35.7-r0

Package eks-distro-coredns-fips version 1.35.7-r0 fixes 6 vulnerabilities: ghsa-cfpf-hrx2-8rv6, ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, CVE-2025-68156, CVE-2026-24051...

OESA-2026-3184 coredns security update

CoreDNS is a fast and flexible DNS server. The key word here is flexible: with CoreDNS you are able to do what you want with your DNS data by utilizing plugins. Security Fixes: CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in...