GO-2025-4233 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, coredns-fips, traefik, buf, k3s, spegel, syncthing, kubo, dkron, eks-distro, k8sgateway, dkron-fips, spegel-fips, kargo, seaweedfs, ipfs-cluster, syncthing-fips, q, kubernetes-dns-node-cache-fips, coredns, ipfs-cluster-fips, teleport, kubo-fips, cadd...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: dataplaneapi-fips, rke2-runtime-fips, buf, wireguard-go, atlantis, http-echo, terraform-fips, net-kourier, vault, snyk-cli, container-object-storage-interface, delve, loki-fips, tekton-pipelines-fips, tigera-operator, crossplane-function-environment-configs-fips,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: cerbos-fips, pulumi-kubernetes-operator, prometheus-alertmanager, loki-fips, tekton-pipelines-fips, scorecard, sftpgo-plugin-pubsub, terraform-provider-grafana-fips, spicedb-operator, kubernetes-dns-node-cache-fips, jaeger-operator-fips, kube-vip-cloud-provider,...

GO-2026-4868 vulnerabilities

Vulnerabilities for packages: dataplaneapi-fips, rke2-runtime-fips, buf, wireguard-go, atlantis, http-echo, terraform-fips, net-kourier, vault, snyk-cli, container-object-storage-interface, delve, loki-fips, tekton-pipelines-fips, tigera-operator, crossplane-function-environment-configs-fips,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, terraform-provider-random, kyverno-policy-reporter-ui, crossplane-provider-aws-s3, apache-exporter,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, rke2-runtime-fips, cilium-envoy-fips, terraform-fips, net-kourier, vault, snyk-cli, tigera-operator, libnvidia-container-fips, tekton-pipelines-fips, flux-source-watcher-fips, external-secrets-operator-fips, aws-flb-firehose,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, crossplane-provider-aws-cloudtrail, cerbos-fips, crossplane-provider-aws-redshiftserverless-fips, ko-fips, loki-fips, tekton-pipelines-fips, scorecard, splunk-otel-collector, undock, go-slim, external-secrets-operator-fips, timestamp-authority...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, crossplane-provider-aws-cloudtrail, amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, crossplane-provider-aws-redshiftserverless-fips,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, crossplane-provider-aws-cloudtrail, amazon-cloudwatch-agent-operator-fips, cerbos-fips, cert-manager-google-cas-issuer-fips, crossplane-provider-aws-redshiftserverless-fips, ko-fips, loki-fips, tekton-pipelines-fips, scorecard,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: cerbos-fips, ingress-nginx-controller-fips, minio, cilium-envoy-fips, terraform-fips, kube-logging-logging-operator, vault, flux-kustomize-controller, logstash, helm-set-status, kubo, tigera-operator, scorecard, flux-source-watcher-fips, external-secrets-operator-fip...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, ucd, kubelet-csr-approver, kyverno-policy-reporter-ui, crossplane-provider-aws-s3, apache-exporter, crossplane-aws-provider, ghaudit, stakater-reloader-fips, consul-k8s, loki-fips,...

PT-2026-73234

Name of the Vulnerable Software and Affected Versions pfSense Plus versions prior to 26.07 Description The wg4 driver fails to verify if the MAC verification step succeeded after receiving a decryption result from OCF. This allows the driver to silently accept packets containing an invalid Poly13...

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

Photon OS 5.0: Coredns PHSA-2026-5.0-90-0869

An update of the coredns package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0869. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLEANSTART-2026-CX88441 Security fixes in coredns 1.14.1-r1

Package coredns version 1.14.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-25679, CVE-2026-27139, CVE-2026-27138, CVE-2026-27137...

CLEANSTART-2026-IW59751 Security fixes in coredns 1.14.1-r0

Package coredns version 1.14.1-r0 fixes 2 vulnerabilities: CVE-2025-61732, CVE-2025-68121...

CLEANSTART-2026-ML98617 Security fixes in coredns 1.14.2-r1

Package coredns version 1.14.2-r1 fixes 13 vulnerabilities: CVE-2026-32282, CVE-2026-32289, CVE-2026-33810, CVE-2026-27144, CVE-2026-27143...

CLEANSTART-2026-CF63541 Security fixes in eks-distro-coredns-fips 1.35.7-r0

Package eks-distro-coredns-fips version 1.35.7-r0 fixes 6 vulnerabilities: ghsa-cfpf-hrx2-8rv6, ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, CVE-2025-68156, CVE-2026-24051...

OESA-2026-3184 coredns security update

CoreDNS is a fast and flexible DNS server. The key word here is flexible: with CoreDNS you are able to do what you want with your DNS data by utilizing plugins. Security Fixes: CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a denial of service vulnerability exists in...