Argo CD 信息泄露漏洞

Argo CD is an open-source tool developed by Argo for Kubernetes, designed for declarative GitOps continuous delivery. Versions of Argo CD prior to 3.2.11 and 3.3.0–3.3.9 contained a vulnerability related to information leakage. This vulnerability stemmed from a lack of authorization and data...

Important Photon OS Security Update - PHSA-2026-4.0-1012

Updates of 'vim', 'etcd' packages of Photon OS have been released...

RHCOS 3 : kubernetes (RHSA-2015:1945)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1945 advisory. - Kubernetes: Missing name validation allows path traversal in etcd CVE-2015-5305 Note that Nessus has not tested for this issue but has...

PT-2026-38402

Name of the Vulnerable Software and Affected Versions etcd versions prior to 3.4.44 etcd versions prior to 3.5.30 etcd versions prior to 3.6.11 Description etcd is a distributed key-value store for distributed system data. A flaw allows authenticated users without sufficient read or lease-related...

Photon OS 5.0: Etcd PHSA-2026-5.0-0802

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: lvm-driver, promxy, verticadb-operator, cri-tools, step, kube-state-metrics, coredns, cortex, kubernetes-csi-node-driver-registrar, crossplane, cert-manager, k3s, terraform-provider-kubernetes, gitaly, xeol, docker-machine-driver-harvester, kserve-rest-proxy,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: fulcio, kaniko, verticadb-operator, cri-tools, jaeger-operator, coredns, kube-state-metrics, cortex, kubernetes-csi-node-driver-registrar, percona-server-mongodb-operator, cert-manager, k3s, gatekeeper, gitaly, kubernetes-csi-external-snapshotter,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager, grafana-beyla, kube-state-metrics-fips, grafana-agent-operator, crossplane-provider-azure-security, crossplane-provider-azure-storagesync, cloud-sql-proxy, headlamp-fips, kubevela-fips, azcopy, thanos-receive-controller,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager, grafana-beyla, kube-state-metrics-fips, grafana-agent-operator, crossplane-provider-azure-security, crossplane-provider-azure-storagesync, cloud-sql-proxy, headlamp-fips, kubevela-fips, azcopy, thanos-receive-controller,...

GO-2026-4808 Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd

Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd...

GO-2026-4806 Authorization bypasses in multiple APIs in go.etcd.io/etcd

Authorization bypasses in multiple APIs in go.etcd.io/etcd...

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33413 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1

CVE-2026-33343 affecting package etcd for versions less than 3.5.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33817

Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...

Critical Photon OS Security Update - PHSA-2026-5.0-0802

Updates of 'rubygem-activesupport', 'etcd', 'glibc', 'nghttp2', 'strongswan', 'python3-Pygments', 'sqlite', 'python3-requests', 'python3-pyOpenSSL', 'libpng', 'python3' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0802

Updates of 'rubygem-activesupport', 'python3-requests', 'nghttp2', 'sqlite', 'libpng', 'glibc', 'python3-pyOpenSSL', 'python3', 'python3-Pygments', 'etcd', 'strongswan' packages of Photon OS have been released...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-33413)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33413 advisory. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases (CVE-2026-33343)

The version of CBL-Mariner Releases installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-33343 advisory. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions...