GO-2026-6238 vulnerabilities

Vulnerabilities for packages: witness, delve, hubble-ui, containerd, gitaly, k3s, kubescape, kubescape-operator, kuma, runc, splunk-otel-collector, vitess, hubble, nerdctl, docker, falcoctl...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: witness, delve, hubble-ui, containerd, gitaly, k3s, kubescape, kubescape-operator, kuma, runc, splunk-otel-collector, vitess, hubble, nerdctl, docker, falcoctl...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: witness, delve, hubble-ui, containerd, gitaly, k3s, kubescape, kubescape-operator, kuma, runc, splunk-otel-collector, vitess, hubble, nerdctl, docker, falcoctl...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, aactl, nemo, kots, reports-server, spire-server, upwind-agent, kube-conformance, k3d, langfuse-fips, k3s, snyk-cli, kyverno, nerdctl, zot, containerd, langfuse, commercial-grafana, terraform, prometheus-mongodb-exporter, falco-no-driver...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, aactl, nemo, kots, reports-server, spire-server, upwind-agent, kube-conformance, k3d, langfuse-fips, k3s, snyk-cli, kyverno, nerdctl, zot, containerd, langfuse, commercial-grafana, terraform, prometheus-mongodb-exporter, falco-no-driver...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, aactl, nemo, kots, reports-server, spire-server, upwind-agent, kube-conformance, k3d, langfuse-fips, k3s, snyk-cli, kyverno, nerdctl, zot, containerd, langfuse, commercial-grafana, terraform, prometheus-mongodb-exporter, falco-no-driver...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, aactl, nemo, kots, reports-server, spire-server, upwind-agent, kube-conformance, k3d, langfuse-fips, k3s, snyk-cli, kyverno, nerdctl, zot, containerd, langfuse, commercial-grafana, terraform, prometheus-mongodb-exporter, falco-no-driver...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: aactl, k3s, containerd, k8s-device-plugin, kyverno, snyk-cli, kots, spire-server, zot, nerdctl, falco-no-driver, k3d...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: aactl, k3s, containerd, k8s-device-plugin, kyverno, snyk-cli, kots, spire-server, zot, nerdctl, falco-no-driver, k3d...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: aactl, k3s, containerd, k8s-device-plugin, kyverno, snyk-cli, kots, spire-server, zot, nerdctl, falco-no-driver, k3d...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: aactl, k3s, containerd, k8s-device-plugin, kyverno, snyk-cli, kots, spire-server, zot, nerdctl, falco-no-driver, k3d...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: grype, skaffold, k9s, runc, kaniko, kots, skopeo, kubescape, ctop, docker, podman, k3d, cadvisor, k3s, nerdctl, zot, kubernetes, syft, trivy, zarf, wolfictl, newrelic-infrastructure-agent, buildkitd...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: skaffold, runc, k9s, podman, grype, kaniko, k3d, k3s, kubernetes, cadvisor, wolfictl, zarf, trivy, skopeo, zot, nerdctl, syft, kubescape, kots, docker, ctop, buildkitd, newrelic-infrastructure-agent...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: azure-ipam, buildah, containerd, k3s, kuma, flannel, multus-cni, rootlesskit, podman, nerdctl, docker, calico, istio, datadog-agent, buildkitd...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, nfpm, gatus, k9s, src, crossplane-provider-aws-ec2, act, rancher, prometheus-operator, go-discover, external-secrets-operator, steampipe, zarf, crossplane-provider-aws-firehose, pulumi-language-dotnet, gh, snyk-cli, trivy, ko,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, helm-set-status, kubernetes-csi-driver-nfs, temporal-ui-server, timoni, runc, podinfo, maru, azure-service-operator, gatus, sbomqs, kubernetes-csi-external-provisioner, git-sync, nri-haproxy, src, vault-k8s, juicefs, influx,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: zitadel, aactl, commercial-expanso-edge, minio, kots, telegraf, prometheus-operator, reports-server, cert-manager, spire-server, upwind-agent, backup-restore-operator, k3d, kine, omnictl-multiarch-fips, cilium, k3s, snyk-cli, kyverno, nerdctl, zot, containerd, loki,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: aactl, k3s, containerd, kyverno, prometheus-operator, flux, snyk-cli, kots, kine, minio, spire-server, telegraf, nerdctl, zot, loki, kaf, k3d...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-1908)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1908 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, . to execute repeatedly on the same...

Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...