266 matches found
GO-2026-4441 vulnerabilities
Vulnerabilities for packages: wuzz, k3s, fuse-overlayfs-snapshotter, gitness, k8s-device-plugin, aws-load-balancer-controller, runc...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: cloudflared, k3s, buf, q, spegel, caddy, kubernetes-dns-node-cache, frp...
GO-2026-4440 vulnerabilities
Vulnerabilities for packages: wuzz, k3s, fuse-overlayfs-snapshotter, gitness, k8s-device-plugin, aws-load-balancer-controller, runc...
GO-2026-5021 vulnerabilities
Vulnerabilities for packages: guac, istio, k3s, telegraf, argo-events, mattermost, prometheus, gitsign, external-secrets-operator, argocd-image-updater, terragrunt, containerd...
GO-2024-3305 vulnerabilities
Vulnerabilities for packages: k3s, kubevela, pulumi, amazon-cloudwatch-agent-operator, rancher-agent, promxy...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: buildah, pulumi, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, ko, kots, rootlesskit, falcoctl, skaffold, src, rancher, pulumi-language-dotnet, crossplane-provider-aws-elasticache,...
GO-2026-4610 vulnerabilities
Vulnerabilities for packages: kbld, teleport, kwok, kargo, rke2-cloud-provider, tekton-chains, kyverno, rancher-system-agent, policy-controller, tekton-pipelines, flux, harbor, gh, ko, lazydocker, guac, k3s, trivy, rancher-fleet, flux-kustomize-controller, paranoia, manifest-tool, k3d, crossplane...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, kubernetes-dashboard-api, nri-f5, tempo, rancher-system-agent, mockgen, cilium-cli, gobump, ini-file, cis-operator, flux, terraform-mcp-server, ko, polaris, falcoctl, timescaledb-tune, kpt, src, kubernetes-dashboard-auth, eksctl, controller-gen...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: kargo, pulumi, crossplane-provider-azure, rook, tekton-chains, opentelemetry-collector-contrib, policy-controller, ksops, flux, grafana-mimir, gh, opentelemetry-collector, terragrunt, guac, k3s, rabbitmq-messaging-topology-operator, src-fingerprint, falcoctl,...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: telegraf, nerdctl, snyk-cli, kine, cilium, spire-server, prometheus-operator, minio, kots, terraform, omnictl-multiarch, loki, containerd, commercial-expanso-edge, flux, kyverno, k3d, omnictl-multiarch-fips, prometheus, kaf, k3s, prometheus-mongodb-exporter,...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: k3s, kots, telegraf, kine, kyverno, loki, snyk-cli, aactl, nerdctl, k3d, spire-server, prometheus-operator, flux, minio, kaf, zot, containerd...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: rke2-runtime, k3s, kubo, spegel, ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, spegel-fips...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: rke2-runtime, k3s, kubo, spegel, ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, spegel-fips...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: spegel, ipfs-cluster, kubo, k3s...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: spegel, ipfs-cluster, kubo, k3s...
GO-2026-5973 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression in github.com/k3s-io/k3s
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression in github.com/k3s-io/k3s. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
EUVD-2026-39512
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression...
GHSA-JXR7-MQHW-9P98 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...