CVE-2026-84304 affecting package multus for versions less than 4.0.2-11

CVE-2026-84304 affecting package multus for versions less than 4.0.2-11. A patched version of the package is available...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: flannel-fips, nerdctl-fips, multus-cni, istio, datadog-agent, rke2-runtime, amazon-k8s-cni-fips, containerd-fips, calico, podman, buildah, buildkitd, istio-fips, rootlesskit, docker, buildkitd-fips, nerdctl, flannel, kuma, azure-ipam, k3s, multus-cni-fips, containerd...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: nerdctl, buildkitd, multus-cni, containerd, kuma, buildah, rootlesskit, istio, flannel, docker, k3s, azure-ipam, podman, calico, datadog-agent...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, slsa-verifier, spark-operator, nova, terraform-provider-acme, trino, envconsul, docker-credential-acr-env, golangci-lint, tofu-controller, bento, crossplane-provider-azure-storage, nri-consul, cis-operator, newrelic-nri-statsd,...

CLEANSTART-2026-RM33874 Security fixes in multus-cni-fips 4.3.0-r1

Package multus-cni-fips version 4.3.0-r1 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-TZ19908 Security fixes in multus-cni-fips 4.1.4-r4

Package multus-cni-fips version 4.1.4-r4 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1

Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-EL85268 Security fixes in multus-cni-fips 3.9.3-r2

Package multus-cni-fips version 3.9.3-r2 fixes 14 vulnerabilities: ghsa-v778-237x-gjrc, ghsa-3vm4-22fp-5rfm, ghsa-4374-p667-p6c8, ghsa-69cg-p879-7622, ghsa-69ch-w2m2-3vjp...

CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3

Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CVE-2026-56852 affecting package multus for versions less than 4.0.2-10

CVE-2026-56852 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...

AZL-93267 CVE-2026-56852 affecting package multus for versions less than 4.0.2-10

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-25680 affecting package multus for versions less than 4.0.2-9

CVE-2026-25680 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

SUSE CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

CVE-2026-13434 affects KubeVirt’s network annotation generator used when provisioning VirtualMachineInstance with Multus networks. The flaw writes the supplied networkName verbatim into the v1.multus-cni.io/default-network annotation without format validation or sanitization, with only an empty-s...

CVE-2026-13434 Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434 Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

EUVD-2026-39796

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...