GO-2026-5164 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache-fips, eks-distro, kubernetes-dns-node-cache, eks-distro-fips, k8sgateway, juicefs, k8sgateway-fips...

GO-2026-4289 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, cloudflared, eks-distro-fips, eks-distro...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache-fips, eks-distro, kubernetes-dns-node-cache, eks-distro-fips, k8sgateway, juicefs, k8sgateway-fips, cloudflared-fips...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: vitess, traefik, kubernetes-dns-node-cache-fips, traefik-fips, eks-distro, buildkite-agent-fips, eks-distro-fips, buildkite-agent, kubernetes-dns-node-cache, datadog-agent-fips, coder, coder-fips, datadog-agent...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: k3s, cloudflared, traefik, kubernetes-dns-node-cache-fips, caddy, eks-distro, kubernetes-dns-node-cache, eks-distro-fips, spegel, traefik-fips, caddy-fips, buf, frp, q...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: syft, neuvector-fips, eks-distro, eks-distro-fips, cluster-autoscaler, opentelemetry-collector-contrib-fips, grype, buildah, k8s-device-plugin, ctop, cadvisor, podman, kubernetes-fips, opentelemetry-collector-contrib, runc, neuvector-scanner, gosu,...

GO-2025-3547 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, argo-cd-fips, longhorn-manager, azurefile-csi, azurefile-csi-fips, eks-distro, harvester-fips, longhorn-share-manager-fips, rke2-runtime-fips, cluster-autoscaler-fips, longhorn-share-manager, harvester, azuredisk-csi,...

Linux Distros Unpatched Vulnerability : CVE-2026-63299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify...

Linux Distros Unpatched Vulnerability : CVE-2026-68334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: fix iothread race in rxrpcwakeupiothread rxrpcwakeupiothread checks local-iothread before waking it, but then reloads the pointer for wakeupprocess...

Linux Distros Unpatched Vulnerability : CVE-2026-68343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: validate DFS referral PathConsumed parsedfsreferrals validates that the response contains the fixed referral entry array and, on for-next, the...

CLEANSTART-2026-OG65548 Security fixes in eks-distro-kube-scheduler 1.35.2-r0

Package eks-distro-kube-scheduler version 1.35.2-r0 fixes 7 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39821, CVE-2026-33814, CVE-2026-33186...

CLEANSTART-2026-BZ74464 Security fixes in eks-distro-kube-apiserver-fips 1.34.2-r0

Package eks-distro-kube-apiserver-fips version 1.34.2-r0 fixes 32 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914...

CLEANSTART-2026-CN04720 Security fixes in eks-distro-kube-proxy-fips 1.35.7-r0

Package eks-distro-kube-proxy-fips version 1.35.7-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-JN50813 Security fixes in eks-distro-kube-apiserver 1.34.2-r0

Package eks-distro-kube-apiserver version 1.34.2-r0 fixes 21 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914...

CLEANSTART-2026-HR76710 Security fixes in eks-distro-kube-scheduler-fips 1.34.3-r0

Package eks-distro-kube-scheduler-fips version 1.34.3-r0 fixes 18 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27140, CVE-2026-32280...

CLEANSTART-2026-CF63541 Security fixes in eks-distro-coredns-fips 1.35.7-r0

Package eks-distro-coredns-fips version 1.35.7-r0 fixes 6 vulnerabilities: ghsa-cfpf-hrx2-8rv6, ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, CVE-2025-68156, CVE-2026-24051...

CVE-2026-54727

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...

CVE-2026-54574

proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through extractplaintar in prootdistro/commands/install.py and Docker layers through applylayer in prootdistro/helpers/docker.py without validating...

GHSA-7H3G-4W2F-FJ2F proot-distro has a Container Isolation Bypass via Crafted Restore Archive

Affected Component - Package: proot-distro - Affected command: restore - Attack surface: Host-side Termux CLI processing a user-supplied backup archive - Vulnerability type: Container Isolation Bypass / Cross-Container Read and Write --- Affected Versions | Component | Version | |---|---| |...

CVE-2026-54727 proot-distro has a Container Isolation Bypass via Crafted Restore Archive

proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...