107 matches found
GHSA-PG57-6JWG-Q645 vulnerabilities
Vulnerabilities for packages: buildkitd, zot, skaffold, helm-set-status, scorecard, tigera-operator, kubevela, chartmuseum, docker-compose, rancher-agent, kube-arangodb, trivy, fuse-overlayfs-snapshotter, helm-mapkubeapis, xeol, kubescape, manifest-tool, k8sgpt, rancher, headlamp, zarf, steampipe...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: buildkitd, zot, skaffold, helm-set-status, scorecard, tigera-operator, kubevela, chartmuseum, docker-compose, rancher-agent, kube-arangodb, trivy, fuse-overlayfs-snapshotter, helm-mapkubeapis, xeol, kubescape, manifest-tool, k8sgpt, rancher, headlamp, zarf, steampipe...
Amazon Linux 2 : nerdctl (ALAS-2026-3903)
The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...
Medium: nerdctl
Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...
Amazon Linux 2023 : nerdctl (ALAS2023-2026-2129)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2129 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such...
Medium: nerdctl
Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: containerd, nerdctl, docker, kubescape, falcoctl, kuma, runc, splunk-otel-collector, k3s, witness, gitaly, delve, kubescape-operator, cilium, hubble-ui, hubble, vitess...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: containerd, nerdctl, docker, kubescape, falcoctl, kuma, runc, splunk-otel-collector, k3s, witness, gitaly, delve, kubescape-operator, cilium, hubble-ui, hubble, vitess...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: containerd, nerdctl, docker, kubescape, falcoctl, kuma, runc, splunk-otel-collector, k3s, witness, gitaly, delve, kubescape-operator, cilium, hubble-ui, hubble, vitess...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: zot, kube-conformance, snyk-cli, terraform, falco-no-driver, cert-manager, kyverno, aactl, renovate, spire-server, cilium, k3s, k3d, nemo, prometheus-mongodb-exporter, commercial-expanso-edge, upwind-agent, langfuse, containerd, kots, trino, reports-server,...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: zot, kube-conformance, snyk-cli, terraform, falco-no-driver, cert-manager, kyverno, aactl, renovate, spire-server, cilium, k3s, k3d, nemo, prometheus-mongodb-exporter, commercial-expanso-edge, upwind-agent, langfuse, containerd, kots, trino, reports-server,...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: zot, kube-conformance, snyk-cli, terraform, falco-no-driver, cert-manager, kyverno, aactl, renovate, spire-server, cilium, k3s, k3d, nemo, prometheus-mongodb-exporter, commercial-expanso-edge, upwind-agent, langfuse, containerd, kots, trino, reports-server,...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: zot, kube-conformance, snyk-cli, terraform, falco-no-driver, cert-manager, kyverno, aactl, renovate, spire-server, cilium, k3s, k3d, nemo, prometheus-mongodb-exporter, commercial-expanso-edge, upwind-agent, langfuse, containerd, kots, trino, reports-server,...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: containerd, zot, kots, nerdctl, cert-manager, renovate, k3s, k8s-device-plugin, helm, spire-server, trino, aactl, cilium, falco-no-driver, snyk-cli, k3d, kyverno...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: containerd, zot, kots, nerdctl, cert-manager, renovate, k3s, k8s-device-plugin, helm, spire-server, trino, aactl, cilium, falco-no-driver, snyk-cli, k3d, kyverno...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: containerd, zot, kots, nerdctl, cert-manager, renovate, k3s, k8s-device-plugin, helm, spire-server, trino, aactl, cilium, falco-no-driver, snyk-cli, k3d, kyverno...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: containerd, zot, kots, nerdctl, cert-manager, renovate, k3s, k8s-device-plugin, helm, spire-server, trino, aactl, cilium, falco-no-driver, snyk-cli, k3d, kyverno...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, buildkitd, zot, syft, k9s, skopeo, cadvisor, skaffold, podman, k3s, kubernetes, docker, grype, k3d, ctop, kots, trivy, kubescape, wolfictl, kaniko, nerdctl, runc, zarf...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: buildkitd, zot, skaffold, skopeo, trivy, kots, cadvisor, kubernetes, kubescape, zarf, k3d, k9s, nerdctl, docker, kaniko, newrelic-infrastructure-agent, wolfictl, grype, ctop, runc, syft, podman, k3s...