GO-2025-4222 vulnerabilities

Vulnerabilities for packages: containerd, istio-fips, buildkitd-fips, istio, azure-ipam, datadog-agent-fips, calico-fips, multus-cni, nerdctl-fips, containerd-fips, podman, k3s, docker, flannel, rke2-runtime, amazon-k8s-cni-fips, rootlesskit, nerdctl, multus-cni-fips, datadog-agent, calico,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: istio, rootlesskit, k3s, containerd, azure-ipam, buildkitd, calico, docker, podman, nerdctl, buildah, datadog-agent, flannel, kuma, multus-cni...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, go, k3s, ctop, kubernetes-replicator, policy-controller, buildah, trino, glab, aws-node-termination-handler, apisix-ingress-controller,...

CLEANSTART-2026-RM33874 Security fixes in multus-cni-fips 4.3.0-r1

Package multus-cni-fips version 4.3.0-r1 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-TZ19908 Security fixes in multus-cni-fips 4.1.4-r4

Package multus-cni-fips version 4.1.4-r4 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-EL85268 Security fixes in multus-cni-fips 3.9.3-r2

Package multus-cni-fips version 3.9.3-r2 fixes 14 vulnerabilities: ghsa-v778-237x-gjrc, ghsa-3vm4-22fp-5rfm, ghsa-4374-p667-p6c8, ghsa-69cg-p879-7622, ghsa-69ch-w2m2-3vjp...

CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1

Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3

Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CVE-2026-56852 affecting package multus for versions less than 4.0.2-10

CVE-2026-56852 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...

AZL-93267 CVE-2026-56852 affecting package multus for versions less than 4.0.2-10

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-25680 affecting package multus for versions less than 4.0.2-9

CVE-2026-25680 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

SUSE CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

CVE-2026-13434 affects KubeVirt’s network annotation generator used when provisioning VirtualMachineInstance with Multus networks. The flaw writes the supplied networkName verbatim into the v1.multus-cni.io/default-network annotation without format validation or sanitization, with only an empty-s...

CVE-2026-13434 Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

EUVD-2026-39796

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...