GO-2025-4222 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, containerd, docker, istio-fips, kuma, istio, flannel-fips, buildkitd-fips, datadog-agent, rootlesskit-fips, amazon-k8s-cni-fips, buildah, nerdctl, calico, multus-cni-fips, azure-ipam, multus-cni, docker-fips, buildkitd, rke2-runtime, nerdctl-fips,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: calico, nerdctl, rootlesskit, istio, azure-ipam, kuma, containerd, datadog-agent, flannel, buildkitd, docker, k3s, podman, multus-cni, buildah...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: envconsul, temporal-ui-server, promxy, prometheus, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, cilium, traefik, crossplane-provider-aws-memorydb, nri-haproxy, trino, kube-logging-operator-custom-runner, kube-bench, kubeflow-pipelines,...

CLEANSTART-2026-TZ19908 Security fixes in multus-cni-fips 4.1.4-r4

Package multus-cni-fips version 4.1.4-r4 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1

Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3

Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CVE-2026-56852 affecting package multus for versions less than 4.0.2-10

CVE-2026-56852 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9

CVE-2026-42502 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-25680 affecting package multus for versions less than 4.0.2-9

CVE-2026-25680 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

SUSE CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

CVE-2026-13434 affects KubeVirt’s network annotation generator used when provisioning VirtualMachineInstance with Multus networks. The flaw writes the supplied networkName verbatim into the v1.multus-cni.io/default-network annotation without format validation or sanitization, with only an empty-s...

CVE-2026-13434 Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

EUVD-2026-39796

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...

PT-2026-52848

Name of the Vulnerable Software and Affected Versions KubeVirt versions 1.8.0 and later Description A flaw exists in the network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the networkName value is written directly into the launcher...

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

CVE-2026-39821 affecting package multus for versions less than 4.0.2-8

CVE-2026-39821 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...