CVE-2026-128085 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-codecommit-fips, neuvector-fips, crossplane-provider-aws-configservice-fips, crossplane-provider-aws-macie2, aws-node-termination-handler-fips, crossplane-provider-aws-fis, restic-fips, docker-compose, gcp-compute-persistent-disk-csi-driver,...

GO-2026-6865 vulnerabilities

Vulnerabilities for packages: kwok, kaf, prometheus, verticadb-operator, wgcf, grafana, opa, crane, tempo, dive, pulumi-language-dotnet, kyverno-policy-reporter-kyverno-plugin, kbld, kyverno-notation-aws, wolfictl, minio, local-path-provisioner, skopeo, kafkaexporter, restic, neuvector-scanner,...

CVE-2026-116591 vulnerabilities

Vulnerabilities for packages: neuvector-fips, grafana-jaeger-datasource-fips, restic-fips, docker-compose, eksctl, grafana-mssql-datasource, mapotf, spegel, grafana-zipkin-datasource, nomad-fips, tekton-chains-fips, kargo, cadvisor-fips, kserve, krakend-fips, victoriametrics, gitleaks-fips,...

GHSA-FPMH-FRQ8-7RJ8 vulnerabilities

Vulnerabilities for packages: neuvector-fips, grafana-jaeger-datasource-fips, restic-fips, docker-compose, eksctl, grafana-mssql-datasource, mapotf, spegel, grafana-zipkin-datasource, nomad-fips, tekton-chains-fips, kargo, cadvisor-fips, kserve, krakend-fips, victoriametrics, gitleaks-fips,...

CVE-2026-116591 vulnerabilities

Vulnerabilities for packages: kwok, kaf, prometheus, verticadb-operator, wgcf, grafana, opa, crane, tempo, dive, pulumi-language-dotnet, kyverno-policy-reporter-kyverno-plugin, kbld, kyverno-notation-aws, wolfictl, minio, local-path-provisioner, skopeo, kafkaexporter, restic, neuvector-scanner,...

GHSA-FPMH-FRQ8-7RJ8 vulnerabilities

Vulnerabilities for packages: kwok, kaf, prometheus, verticadb-operator, wgcf, grafana, opa, crane, tempo, dive, pulumi-language-dotnet, kyverno-policy-reporter-kyverno-plugin, kbld, kyverno-notation-aws, wolfictl, minio, local-path-provisioner, skopeo, kafkaexporter, restic, neuvector-scanner,...

CLEANSTART-2025-IZ48257 kubectl cp command allows copying files between containers and the user machine

Security vulnerability affects the k3s package. The kubectl cp command allows copying files between containers and the user machine...

CLEANSTART-2025-AS71068 Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced

Security vulnerability affects the k3s package. The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced...

CLEANSTART-2025-RW12960 Kubernetes kube-controller-manager in versions v1

Security vulnerability affects the k3s package. The Kubernetes kube-controller-manager in versions v1...

CLEANSTART-2025-CH37035 vulnerability was found in all versions of containernetworking/plugins before version 0

Security vulnerability affects the k3s package. A vulnerability was found in all versions of containernetworking/plugins before version 0...

CLEANSTART-2025-SV39817 Kubernetes kubelet component in versions 1

Security vulnerability affects the k3s package. The Kubernetes kubelet component in versions 1...

CLEANSTART-2025-WI16713 In containerd (an industry-standard container runtime) before versions 1

Security vulnerability affects the k3s package. In containerd an industry-standard container runtime before versions 1...

CLEANSTART-2025-PR73528 runc before 1

Security vulnerability affects the k3s package. runc before 1...

CLEANSTART-2025-AT28198 K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material (cluster certificate authority privat...

Security vulnerability affects the k3s package. K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase,...

CLEANSTART-2025-SC39439 OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go

Security vulnerability affects the k3s package. OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go...

PT-2026-142778

Security vulnerability affects the k3s package. runc before 1...

PT-2026-142636

Security vulnerability affects the k3s package. containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows...

PT-2026-142835

Security vulnerability affects the k3s package. The Kubernetes kube-controller-manager in versions v1...

CVE-2026-63209 vulnerabilities

Vulnerabilities for packages: k3d, reports-server, aactl, prometheus, containerd, zitadel, zot, kyverno, commercial-kyverno, prometheus-mongodb-exporter, upwind-agent, commercial-expanso-edge, terraform, snyk-cli, cert-manager, kine, nerdctl, falco-no-driver, kots, flux, prometheus-operator,...

CVE-2026-63209 vulnerabilities

Vulnerabilities for packages: kine, prometheus-operator, helm, spire-server, k3d, kaf, kyverno, nerdctl, k3s, minio, loki, zot, kots, containerd, flux, falco-no-driver, telegraf, snyk-cli, aactl...