GO-2026-6238 vulnerabilities

Vulnerabilities for packages: hubble-ui, splunk-otel-collector, k3s, kubescape, nerdctl, vitess, witness, cilium, falcoctl, kubescape-operator, gitaly, kuma, docker, hubble, containerd, delve...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: hubble-ui, splunk-otel-collector, k3s, kubescape, nerdctl, vitess, witness, cilium, falcoctl, kubescape-operator, gitaly, kuma, docker, hubble, containerd, delve...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: hubble-ui, splunk-otel-collector, k3s, kubescape, nerdctl, vitess, witness, cilium, falcoctl, kubescape-operator, gitaly, kuma, docker, hubble, containerd, delve...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: reports-server, snyk-cli, k3s, langfuse, langfuse-fips, prometheus-mongodb-exporter, zot, k3d, kyverno, terraform, nerdctl, kots, containerd, commercial-grafana, k8s-device-plugin, spire-server, aactl...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: reports-server, snyk-cli, k3s, langfuse, langfuse-fips, prometheus-mongodb-exporter, zot, k3d, kyverno, terraform, nerdctl, kots, containerd, commercial-grafana, k8s-device-plugin, spire-server, aactl...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: reports-server, snyk-cli, k3s, langfuse, langfuse-fips, prometheus-mongodb-exporter, zot, k3d, kyverno, terraform, nerdctl, kots, containerd, commercial-grafana, k8s-device-plugin, spire-server, aactl...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: reports-server, snyk-cli, k3s, langfuse, langfuse-fips, prometheus-mongodb-exporter, zot, k3d, kyverno, terraform, nerdctl, kots, containerd, commercial-grafana, k8s-device-plugin, spire-server, aactl...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: kyverno, snyk-cli, k3s, nerdctl, k3d, zot, k8s-device-plugin, kots, aactl, spire-server, containerd...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: kyverno, snyk-cli, k3s, nerdctl, k3d, zot, k8s-device-plugin, kots, aactl, spire-server, containerd...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: kyverno, snyk-cli, k3s, nerdctl, k3d, zot, k8s-device-plugin, kots, aactl, spire-server, containerd...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: kyverno, snyk-cli, k3s, nerdctl, k3d, zot, k8s-device-plugin, kots, aactl, spire-server, containerd...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: trivy, zot, runc, nerdctl, docker, grype, kots, syft, zarf, kubernetes, wolfictl, cadvisor, ctop, k3s, kubescape, buildkitd, newrelic-infrastructure-agent, kaniko, skaffold, k9s, skopeo, k3d, podman...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: runc, k9s, kaniko, kubernetes, kots, cadvisor, ctop, k3s, nerdctl, grype, zot, skaffold, skopeo, podman, kubescape, buildkitd, wolfictl, syft, zarf, k3d, trivy, docker, newrelic-infrastructure-agent...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: istio, multus-cni, azure-ipam, podman, buildkitd, rootlesskit, flannel, k3s, nerdctl, buildah, kuma, docker, containerd, calico, datadog-agent...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cosign, crossplane-provider-aws-elasticache, terraform-provider-acme, kyverno, crossplane-provider-aws-memorydb, cluster-api-azure-controller, k8sgpt, apko, gptscript, hcloud, gitlab-pages, nerdctl, policy-controller, skaffold, cilium, falcoctl, terraform-provider-tl...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cosign, runc, crossplane-provider-aws-elasticache, go-licenses, http-echo, kapp-controller, kubernetes-dns-node-cache, dask-gateway, rancher-loglevel, spark-operator, sftpgo-plugin-kms, gatekeeper, goreleaser, kubeflow, minio-operator, kserve-modelmesh-serving,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: reports-server, zot, elastic-agent-fips, zitadel, nerdctl, backup-restore-operator, omnictl-multiarch-fips, kine, commercial-expanso-edge, kots, kyverno, k3s, terraform, flux, loki, containerd, prometheus-operator, omnictl-multiarch, kaf, aactl, snyk-cli, cert-manage...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-operator, kine, snyk-cli, loki, k3s, nerdctl, k3d, zot, telegraf, kaf, kots, aactl, flux, minio, spire-server, containerd...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-1908)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1908 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, . to execute repeatedly on the same...

Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...