CLEANSTART-2026-NB75490 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Security vulnerability affects the cri-tools package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

AZL-103146 CVE-2026-81870 affecting package cri-tools 1.32.0-8

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: temporal-server-fips, kubernetes-csi-external-resizer, buildkitd, kubernetes, kube-oidc-proxy, cri-tools, kubescape, volume-modifier-for-k8s, temporal-server, docker-compose, rancher-webhook, kine, prometheus-adapter-fips, temporal-fips, rancher-webhook-fips,...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: terragrunt, malcontent, minio, ollama, rclone, tempo, prometheus, kubevela, dagger, datadog-agent, maru, terraform-mcp-server, goreleaser, mcp-grafana, k8sgpt, loki, nuclei, nfpm, weaviate, gitlab-runner, witness, k3s, teleport, redpanda, lazygit,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, argocd-image-updater, spark-operator, kubernetes-csi-driver-hostpath, cri-tools, kubernetes-dns-node-cache, aws-efs-csi-driver, k8s-device-plugin, local-static-provisioner, nodetaint, kubeflow-pipelines...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: policy-controller, docker-compose, helm-push, grype, cri-tools, harbor-scanner-trivy, wolfictl, k3d, neuvector-scanner, dagger, kaniko, syft, melange, buf...

OESA-2026-3397 cri-tools security update

CLI and validation tools for Container Runtime Interface Security Fixes: Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.CVE-2023-3978 A denial-of-service vulnerability exists in...

CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7

CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7. A patched version of the package is available...

AZL-93159 CVE-2026-56852 affecting package cri-tools for versions less than 1.32.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

Amazon Linux 2 : cri-tools, --advisory ALAS2-2026-3385 (ALAS-2026-3385)

The version of cri-tools installed on the remote host is prior to 1.32.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3385 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Tenable has extract...

Important: cri-tools

Issue Overview: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Affected Packages: cri-tools Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

CVE-2026-25681 affecting package cri-tools for versions less than 1.32.0-6

CVE-2026-25681 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package cri-tools for versions less than 1.32.0-6

CVE-2026-42502 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package cri-tools for versions less than 1.32.0-6

CVE-2026-25680 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...

CVE-2026-42506 affecting package cri-tools for versions less than 1.32.0-6

CVE-2026-42506 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package cri-tools for versions less than 1.32.0-6

CVE-2026-39821 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package cri-tools for versions less than 1.32.0-6

CVE-2026-27136 affecting package cri-tools for versions less than 1.32.0-6. A patched version of the package is available...

Amazon Linux 2 : cri-tools, --advisory ALAS2-2026-3310 (ALAS-2026-3310)

The version of cri-tools installed on the remote host is prior to 1.32.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3310 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta...

Important: cri-tools

Issue Overview: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escapi...

AZL-87573 CVE-2026-39821 affecting package cri-tools for versions less than 1.32.0-6

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...