GO-2026-6238 vulnerabilities

Vulnerabilities for packages: gitaly, splunk-otel-collector, k3s, kubescape-operator-fips, witness, docker, nerdctl-fips, cilium, cilium-fips, containerd-fips, elastic-agent, opentelemetry-ebpf-instrumentation, cosmo-router-fips, gitaly-fips, envoy-gateway-fips, kubescape-server-fips, nerdctl,...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: gitaly, splunk-otel-collector, k3s, kubescape-operator-fips, witness, docker, nerdctl-fips, cilium, cilium-fips, containerd-fips, elastic-agent, opentelemetry-ebpf-instrumentation, cosmo-router-fips, gitaly-fips, envoy-gateway-fips, kubescape-server-fips, nerdctl,...

GO-2025-3748 vulnerabilities

Vulnerabilities for packages: k3s, ipfs-cluster-fips...

GO-2026-5527 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines, argo-workflows-fips, argo-workflows...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: k3s, prometheus-adapter, rancher-webhook, temporal, kubernetes, kine, temporal-server-fips, kube-oidc-proxy, volume-modifier-for-k8s, rancher-webhook-fips, kubevela, metrics-server-fips, kubernetes-csi-external-resizer, metrics-server, temporal-server, cri-tools,...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: teleport, tempo, goreleaser, terraform-mcp-server, minio, k8sgpt, k3s, weaviate, datadog-agent, eksctl, lazygit, redpanda, dgraph, mcp-grafana, terragrunt, prometheus, gitlab-runner, cri-tools, kubevela, grafana-alloy, grafana, maru, ollama, rclone, nuclei, vcluster,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: spark-operator, kubernetes-csi-driver-hostpath, argocd-image-updater, cri-tools, k8s-device-plugin, kubeflow-pipelines, aws-efs-csi-driver, local-static-provisioner, nodetaint, kubernetes-dns-node-cache, ip-masq-agent...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: docker, helm-push, docker-compose, buf, dagger, grype, melange, cri-tools, syft, neuvector-scanner, k3d, kaniko, harbor-scanner-trivy, policy-controller, wolfictl...

SUSE CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

Fedora 43 : cri-o1.34 (2026-7e85920dc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e85920dc5 advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

EUVD-2026-57615

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

CVE-2026-13622

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.19.42 security update

Red Hat build of MicroShift release 4.19.42 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7

CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7. A patched version of the package is available...

Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Servi...

CVE-2026-15809

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

CVE-2026-15809 Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...