GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: harbor, frankenphp-8.4, prometheus-elasticsearch-exporter, kubernetes-dashboard, telegraf, gitea-fips, gatekeeper-fips, rancher, argo-workflows-fips, kyverno, argo-cd, falco-no-driver, snyk-cli, kubescape, trivy-operator, frankenphp-8.5, coder, argo-workflows, kots,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kaf, crossplane-provider-azure-storage, kyverno, podman, gitlab-runner, fulcio, caddy, scorecard, external-dns, cilium-cli, rancher-machine, osv-scanner, rancher-agent, slsa-verifier, k9s, buildkitd, pulumi-language-java, ksops, docker-cli-buildx, guac, mods, telepor...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kaf, skaffold, cloud-provider-aws, k3s, kine, trivy, cert-manager, nerdctl, kyverno, gitea, aactl, zot, external-secrets-operator, rancher, spire-server, trivy-operator, mattermost, chisel, prometheus-operator, external-dns, opentelemetry-collector, cilium-cli,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: kaf, kyverno, podman, caddy, scorecard, external-dns, cilium-cli, osv-scanner, rancher-agent, k9s, pulumi-language-java, docker-cli-buildx, guac, minio, pulumi-language-dotnet, step-kms-plugin, step-issuer, openbao, k3s, chezmoi, trivy, act, pulumi-language-yaml,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: buildah, kaf, k3s, kine, cert-manager, nerdctl, gitlab-kas, kyverno, podman, aactl, zot, external-secrets-operator, rancher, spire-server, mattermost, prometheus-operator, external-dns, opentelemetry-collector, cilium-cli, flux, falco-no-driver, fscrypt, loki,...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via unsanitized handling of the uploadId parameter in the multipart upload process. An attacker can create arbitrary files on the host system, potentially leading to arbitrary command execution, by...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the record-output process. An attacker can create or overwrite files on the host system by exploiting a crafted symlink in a container image, which can lead to arbitrary command execution...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the record-output process. An attacker can create or overwrite files on the host system by exploiting a crafted symlink in a container image, which can lead to arbitrary command execution...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the record-output process. An attacker can create or overwrite files on the host system by exploiting a crafted symlink in a container image, which can lead to arbitrary command execution...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the rootfs symlink during image extraction. An attacker can gain unauthorized access to sensitive files and perform arbitrary file creation or modification on the host by importing a special...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the rootfs symlink during image extraction. An attacker can gain unauthorized access to sensitive files and perform arbitrary file creation or modification on the host by importing a special...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the rootfs symlink during image extraction. An attacker can gain unauthorized access to sensitive files and perform arbitrary file creation or modification on the host by importing a special...

CVE-2026-47205

CVE-2026-47205 affects Envoy’s ext_authz HTTP filter. From 1.36.0 through 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free (UAF) occurs when processing per-route authorization overrides concurrently with rapid downstream disconnects. The vulnerable flow creates a transient per-route client and reallo...

CVE-2026-47205 Envoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free UAF vulnerability leading to a sudden segmentation fault exists in Envoy's extauthz HTTP filter when processing per-route authorization overrides...

CVE-2026-47205 Envoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free UAF vulnerability leading to a sudden segmentation fault exists in Envoy's extauthz HTTP filter when processing per-route authorization overrides...

CVE-2026-47207 Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if an extproc server sends a single gRPC message containing multiple, specially crafted ProcessingResponse messages. This can occur when the...