AZL-87498 CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-88200 CVE-2026-25680 affecting package packer for versions less than 1.9.5-15

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87888 CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87813 CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87570 CVE-2026-25680 affecting package cri-tools for versions less than 1.32.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-88293 CVE-2026-25680 affecting package sriov-network-device-plugin for versions less than 3.7.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87513 CVE-2026-25680 affecting package cni-plugins for versions less than 1.4.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87561 CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87654 CVE-2026-25680 affecting package docker-buildx for versions less than 0.14.0-15

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-88344 CVE-2026-25680 affecting package telegraf for versions less than 1.31.0-23

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87858 CVE-2026-25680 affecting package keda for versions less than 2.14.1-14

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-88230 CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-88098 CVE-2026-25680 affecting package multus for versions less than 4.0.2-9

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87537 CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87366 CVE-2026-25680 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-5

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CVE-2026-25680

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

EUVD-2026-31447

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87305 CVE-2026-39829 affecting package podman 5.6.1-9

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

AZL-87957 CVE-2026-39829 affecting package kubevirt for versions less than 1.7.1-7

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

AZL-87396 CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-9

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...