CVE-2026-61801 vulnerabilities

Vulnerabilities for packages: runc-fips, envoy-gateway, undock, neuvector-fips, newrelic-infrastructure-agent-fips, google-osconfig-agent, cloudbeat-fips, kubevirt-cdi-uploadserver-fips, zarf, zarf-fips, containerd, k8s-image-swapper-fips, act, kubevirt-cdi-importer, rancher-agent, ctop-fips,...

GHSA-MJCV-P78Q-W5FW vulnerabilities

Vulnerabilities for packages: runc-fips, envoy-gateway, undock, neuvector-fips, newrelic-infrastructure-agent-fips, google-osconfig-agent, cloudbeat-fips, kubevirt-cdi-uploadserver-fips, zarf, zarf-fips, containerd, k8s-image-swapper-fips, act, kubevirt-cdi-importer, rancher-agent, ctop-fips,...

GHSA-MJCV-P78Q-W5FW vulnerabilities

Vulnerabilities for packages: gosu, k3d, xeol, scorecard, k3s, neuvector-scanner, containerd, vcluster, undock, dagger, docker, datadog-agent, act, runc, zarf, ctop, newrelic-infrastructure-agent...

CVE-2026-61801 vulnerabilities

Vulnerabilities for packages: gosu, k3d, xeol, scorecard, k3s, neuvector-scanner, containerd, vcluster, undock, dagger, docker, datadog-agent, act, runc, zarf, ctop, newrelic-infrastructure-agent...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: scorecard, steampipe, k3s, neuvector-scanner, kubevela, buildkitd, cluster-api-helm-controller, dagger, k8sgpt, kubescape, tigera-operator, syft, trivy-operator, zarf, helm-push, falco-no-driver, rancher, zot, helm-mapkubeapis, nerdctl, helm-operator, k9s,...

GO-2026-6165 vulnerabilities

Vulnerabilities for packages: kubo-fips, livekit-egress, telegraf, k3s, rke2-runtime, spegel, spegel-fips, ipfs-cluster-fips, rke2-runtime-fips, ipfs-cluster, kubo...

GO-2026-6099 vulnerabilities

Vulnerabilities for packages: k3s, rke2-runtime, spegel, spegel-fips, ipfs-cluster-fips, rke2-runtime-fips, ipfs-cluster, kubo...

GO-2026-6163 vulnerabilities

Vulnerabilities for packages: op-geth, kubo-fips, livekit-egress, stunnerd, k3s, rke2-runtime, spegel, spegel-fips, ipfs-cluster-fips, rke2-runtime-fips, ipfs-cluster, kubo...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: beats, envoy-gateway, gitaly-fips, milvus, cosmo-router-fips, nerdctl-fips, opentelemetry-ebpf-instrumentation-fips, splunk-otel-collector-fips, kubescape-server-fips, prometheus, containerd, hubble-ui-backend-fips, opentelemetry-ebpf-instrumentation, falcoctl-fips,...

GO-2026-6163 vulnerabilities

Vulnerabilities for packages: k3s, op-geth, spegel, kubo, ipfs-cluster...

GO-2026-6165 vulnerabilities

Vulnerabilities for packages: k3s, spegel, kubo, telegraf, ipfs-cluster...

GO-2026-6099 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, spegel, kubo, k3s...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, k3s, datadog-operator, telegraf, caddy, calico, cluster-api-helm-controller, descheduler, flux-helm-controller, kubescape, rancher-system-agent, yunikorn-k8shim, external-secrets-operator, argocd-image-updater, cluster-api-provider-vsphere,...

BIT-ETCD-2026-73500 etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: falco-no-driver, cert-manager, langfuse-fips, containerd, commercial-grafana, commercial-expanso-edge, nerdctl, kube-conformance, prometheus-mongodb-exporter, k3s, k8s-device-plugin, reports-server, kots, renovate, snyk-cli, kyverno, terraform, commercial-kyverno,...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: falco-no-driver, cert-manager, langfuse-fips, containerd, commercial-grafana, commercial-expanso-edge, nerdctl, kube-conformance, prometheus-mongodb-exporter, k3s, k8s-device-plugin, reports-server, kots, renovate, snyk-cli, kyverno, terraform, commercial-kyverno,...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: falco-no-driver, cert-manager, langfuse-fips, containerd, commercial-grafana, commercial-expanso-edge, nerdctl, kube-conformance, prometheus-mongodb-exporter, k3s, k8s-device-plugin, reports-server, kots, renovate, snyk-cli, kyverno, terraform, commercial-kyverno,...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: falco-no-driver, cert-manager, langfuse-fips, containerd, commercial-grafana, commercial-expanso-edge, nerdctl, kube-conformance, prometheus-mongodb-exporter, k3s, k8s-device-plugin, reports-server, kots, renovate, snyk-cli, kyverno, terraform, commercial-kyverno,...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: falco-no-driver, k3d, kyverno, aactl, k3s, cilium, spire-server, cert-manager, containerd, k8s-device-plugin, nerdctl, trino, zot, snyk-cli, kots, renovate, helm...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: falco-no-driver, k3d, kyverno, aactl, k3s, cilium, spire-server, cert-manager, containerd, k8s-device-plugin, nerdctl, trino, zot, snyk-cli, kots, renovate, helm...