Medium: nerdctl

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: nerdctl

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : nerdctl (ALAS-2026-4053)

The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4053 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-3344)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3344 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

CVE-2026-63209 vulnerabilities

Vulnerabilities for packages: zitadel, minio, commercial-kyverno, aactl, zot, loki, prometheus, prometheus-mongodb-exporter, prometheus-operator, commercial-expanso-edge, flux, snyk-cli, terraform, spire-server, commercial-grafana, falco-no-driver, omnictl-multiarch, cilium, cert-manager, k3s,...

CVE-2026-63209 vulnerabilities

Vulnerabilities for packages: prometheus-operator, flux, aactl, kots, k3s, containerd, spire-server, kyverno, kaf, falco-no-driver, snyk-cli, kine, minio, telegraf, nerdctl, helm, zot, k3d, loki...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-3274)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3274 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global...

Amazon Linux 2 : nerdctl (ALAS-2026-4018)

The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4018 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the...

Important: nerdctl

Issue Overview: Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and te...

Important: nerdctl

Issue Overview: Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and te...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: headlamp, syft, helm-mapkubeapis, scorecard, docker-cli-buildx, k3s, helm-operator, eksctl, kaniko, falco-no-driver, dagger, manifest-tool, trivy, k8sgpt, zarf, rancher-agent, chartmuseum, rancher-helm, trivy-operator, kubevela, skaffold, cluster-api-helm-controller,...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: headlamp, syft, helm-mapkubeapis, scorecard, docker-cli-buildx, k3s, helm-operator, eksctl, kaniko, falco-no-driver, dagger, manifest-tool, trivy, k8sgpt, zarf, rancher-agent, chartmuseum, rancher-helm, trivy-operator, kubevela, skaffold, cluster-api-helm-controller,...

Amazon Linux 2 : nerdctl (ALAS-2026-3903)

The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-2129)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2129 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such...

Medium: nerdctl

Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...

Medium: nerdctl

Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: witness, falcoctl, gitaly, hubble-ui, runc, kubescape-operator, kuma, cilium, kubescape, nerdctl, hubble, k3s, vitess, delve, tetragon, containerd, docker, splunk-otel-collector...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: witness, falcoctl, gitaly, hubble-ui, runc, kubescape-operator, kuma, cilium, kubescape, nerdctl, hubble, k3s, vitess, delve, tetragon, containerd, docker, splunk-otel-collector...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: witness, falcoctl, gitaly, hubble-ui, runc, kubescape-operator, kuma, cilium, kubescape, nerdctl, hubble, k3s, vitess, delve, tetragon, containerd, docker, splunk-otel-collector...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, langfuse, commercial-kyverno, aactl, nvidia-nsight-compute-12.9, zot, nvidia-nsight-compute-13.2, cadence-web, langfuse-fips, prometheus-mongodb-exporter, kube-conformance, renovate, commercial-expanso-edge, nvidia-nsight-compute-13.1,...