266 matches found
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: frp, kubernetes-dns-node-cache, k3s, caddy, cloudflared, q, spegel, buf...
GO-2025-4222 vulnerabilities
Vulnerabilities for packages: istio, podman, containerd, calico, datadog-agent, nerdctl, rootlesskit, k3s, azure-ipam, docker, flannel, kuma, multus-cni, buildkitd, buildah...
GO-2026-4441 vulnerabilities
Vulnerabilities for packages: gitness, wuzz, fuse-overlayfs-snapshotter, k3s, aws-load-balancer-controller, runc, k8s-device-plugin...
GO-2026-5021 vulnerabilities
Vulnerabilities for packages: istio, external-secrets-operator, containerd, mattermost, argocd-image-updater, k3s, gitsign, argo-events, prometheus, telegraf, guac, terragrunt, falco-no-driver...
GO-2024-3305 vulnerabilities
Vulnerabilities for packages: rancher-agent, k3s, amazon-cloudwatch-agent-operator, pulumi, promxy, kubevela...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: melange, crossplane-provider-aws-ec2, datadog-agent, eksctl, crossplane-provider-aws-cloudwatchlogs, osv-scanner, gomplate, zot, containerd, kubernetes-dashboard, crossplane-provider-aws-s3, crossplane-provider-family-azure, tw, vault-benchmark, fscrypt,...
GO-2026-4610 vulnerabilities
Vulnerabilities for packages: ko, flux-helm-controller, eksctl, harbor, spire-server, bento, osv-scanner, trufflehog, vault-secrets-webhook, lazydocker, kyverno-notation-aws, vcluster, zot, rke2-cloud-provider, harbor-scanner-trivy, aactl, dagdotdev, kubescape-operator, gh, dive, knative-serving,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: eksctl, zot, grafana-rollout-operator, containerd, kubernetes-dashboard, bom, k8sgateway, kubernetes-dashboard-api, delve, dive, harbor-cli, controller-gen, cerbos, prometheus-operator, spire-controller-manager, nginx-prometheus-exporter,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: fulcio, flux-helm-controller, crossplane-provider-azure-authorization, opentelemetry-collector, snyk-cli, neuvector-sigstore-interface, kubernetes-event-exporter, spire-server, gomplate, rabbitmq-messaging-topology-operator, crossplane-provider-azure, skopeo, rook,...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: cert-manager, zot, prometheus-operator, omnictl-multiarch-fips, kaf, prometheus, loki, telegraf, reports-server, kine, zitadel, spire-server, kyverno, flux, minio, terraform, kots, k3d, omnictl-multiarch, commercial-expanso-edge, containerd,...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: prometheus-operator, containerd, flux, aactl, nerdctl, kots, snyk-cli, k3s, telegraf, k3d, loki, spire-server, kine, kyverno, minio, kaf, zot...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: rke2-runtime, k3s, rke2-runtime-fips, spegel-fips, spegel, ipfs-cluster-fips, ipfs-cluster, kubo...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: rke2-runtime, k3s, rke2-runtime-fips, spegel-fips, spegel, ipfs-cluster-fips, ipfs-cluster, kubo...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: k3s, spegel, ipfs-cluster, kubo...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: k3s, spegel, ipfs-cluster, kubo...
GO-2026-5973 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression in github.com/k3s-io/k3s
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression in github.com/k3s-io/k3s. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...
EUVD-2026-39512
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression...
GHSA-JXR7-MQHW-9P98 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...