AZL-98367 CVE-2026-37236 affecting package flannel 0.24.2-31

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

CVE-2026-73500 affecting package flannel for versions less than 0.24.2-30

CVE-2026-73500 affecting package flannel for versions less than 0.24.2-30. A patched version of the package is available...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: buildkitd, docker, amazon-k8s-cni-fips, buildkitd-fips, podman, rootlesskit, multus-cni, calico, k3s, azure-ipam, flannel-fips, rootlesskit-fips, multus-cni-fips, datadog-agent-fips, nerdctl-fips, istio, datadog-agent, containerd-fips, istio-fips, containerd, kuma,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: docker, azure-ipam, containerd, buildkitd, multus-cni, rootlesskit, buildah, kuma, flannel, k3s, datadog-agent, nerdctl, istio, podman, calico...

CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29

CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29. A patched version of the package is available...

AZL-93177 CVE-2026-56852 affecting package flannel for versions less than 0.24.2-29

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

flannel-0.28.7-1.1 on GA media (moderate)

flannel-0.28.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11231-1 Rating: moderate Cross-References: CVE-2026-33814 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Security update for flannel (important)

openSUSE Security Update: Security update for flannel Announcement ID: openSUSE-SU-2026:0239-1 Rating: important References: 1265780 1266620 Cross-References: CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2026-33814 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-39821 SUSE: 9.1...

OPENSUSE-SU-2026:11231-1 flannel-0.28.7-1.1 on GA media

These are all security issues fixed in the flannel-0.28.7-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for flannel (important)

openSUSE Security Update: Security update for flannel Announcement ID: openSUSE-SU-2026:0149-1 Rating: important References: 1260847 1260853 Cross-References: CVE-2026-33343 CVE-2026-33413 CVSS scores: CVE-2026-33343 SUSE: 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

flannel-0.28.5-1.1 on GA media (moderate)

flannel-0.28.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:10980-1 Rating: moderate Cross-References: CVE-2026-44283 CVSS scores: CVE-2026-44283 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2026-44283 SUSE : 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10980-1 flannel-0.28.5-1.1 on GA media

These are all security issues fixed in the flannel-0.28.5-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-39821 affecting package flannel for versions less than 0.24.2-28

CVE-2026-39821 affecting package flannel for versions less than 0.24.2-28. A patched version of the package is available...

AZL-87732 CVE-2026-39821 affecting package flannel for versions less than 0.24.2-28

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

CLEANSTART-2026-TZ10716 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.6.0-r0

Multiple security vulnerabilities affect the cni-plugin-flannel package. These issues are resolved in later releases. See references for individual vulnerability details...

ROS-20260506-73-0042

Vulnerability in flannel due to failure to clean data at the management level. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands...

Security update for flannel (important)

openSUSE Security Update: Security update for flannel Announcement ID: openSUSE-SU-2026:0150-1 Rating: important References: 1260847 1260853 Cross-References: CVE-2026-33343 CVE-2026-33413 CVSS scores: CVE-2026-33343 SUSE: 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

flannel-0.28.4-1.1 on GA media (moderate)

flannel-0.28.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10562-1 Rating: moderate Cross-References: CVE-2026-33413 CVSS scores: CVE-2026-33413 SUSE : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2026-33413 SUSE : 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10562-1 flannel-0.28.4-1.1 on GA media

These are all security issues fixed in the flannel-0.28.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...