107 matches found
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: rancher, k8sgpt, kargo, nerdctl, skaffold, cluster-api-helm-controller, trivy, falco-no-driver, syft, scorecard, helm-set-status, chartmuseum, zarf, helm-push, grype, neuvector-scanner, docker-compose, fuse-overlayfs-snapshotter, manifest-tool, zot, docker,...
GHSA-PG57-6JWG-Q645 vulnerabilities
Vulnerabilities for packages: rancher, k8sgpt, kargo, nerdctl, skaffold, cluster-api-helm-controller, trivy, falco-no-driver, syft, scorecard, helm-set-status, chartmuseum, zarf, helm-push, grype, neuvector-scanner, docker-compose, fuse-overlayfs-snapshotter, manifest-tool, zot, docker,...
Amazon Linux 2023 : nerdctl (ALAS2023-2026-2129)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2129 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such...
Amazon Linux 2 : nerdctl (ALAS-2026-3903)
The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3903 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go o...
Medium: nerdctl
Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...
Medium: nerdctl
Issue Overview: A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be...
GO-2026-6238 vulnerabilities
Vulnerabilities for packages: falcoctl, gitaly, vitess, witness, docker, k3s, delve, kubescape-operator, nerdctl, containerd, kubescape, cilium, hubble-ui, splunk-otel-collector, runc, hubble, kuma...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: falcoctl, gitaly, vitess, witness, docker, k3s, delve, kubescape-operator, nerdctl, containerd, kubescape, cilium, hubble-ui, splunk-otel-collector, runc, hubble, kuma...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: falcoctl, gitaly, vitess, witness, docker, k3s, delve, kubescape-operator, nerdctl, containerd, kubescape, cilium, hubble-ui, splunk-otel-collector, runc, hubble, kuma...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: kots, commercial-grafana, renovate, commercial-kyverno, k8s-device-plugin, prometheus-mongodb-exporter, helm, snyk-cli, containerd, zot, kube-conformance, reports-server, aactl, cert-manager, langfuse, nemo, k3s, nerdctl, upwind-agent, kyverno, falco-no-driver,...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: kots, commercial-grafana, renovate, commercial-kyverno, k8s-device-plugin, prometheus-mongodb-exporter, helm, snyk-cli, containerd, zot, kube-conformance, reports-server, aactl, cert-manager, langfuse, nemo, k3s, nerdctl, upwind-agent, kyverno, falco-no-driver,...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: kots, commercial-grafana, renovate, commercial-kyverno, k8s-device-plugin, prometheus-mongodb-exporter, helm, snyk-cli, containerd, zot, kube-conformance, reports-server, aactl, cert-manager, langfuse, nemo, k3s, nerdctl, upwind-agent, kyverno, falco-no-driver,...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: kots, commercial-grafana, renovate, commercial-kyverno, k8s-device-plugin, prometheus-mongodb-exporter, helm, snyk-cli, containerd, zot, kube-conformance, reports-server, aactl, cert-manager, langfuse, nemo, k3s, nerdctl, upwind-agent, kyverno, falco-no-driver,...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: k3d, kyverno, snyk-cli, spire-server, k8s-device-plugin, k3s, renovate, zot, nerdctl, aactl, helm, cert-manager, containerd, cilium, falco-no-driver, trino, kots...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: k3d, kyverno, snyk-cli, spire-server, k8s-device-plugin, k3s, renovate, zot, nerdctl, aactl, helm, cert-manager, containerd, cilium, falco-no-driver, trino, kots...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: k3d, kyverno, snyk-cli, spire-server, k8s-device-plugin, k3s, renovate, zot, nerdctl, aactl, helm, cert-manager, containerd, cilium, falco-no-driver, trino, kots...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: k3d, kyverno, snyk-cli, spire-server, k8s-device-plugin, k3s, renovate, zot, nerdctl, aactl, helm, cert-manager, containerd, cilium, falco-no-driver, trino, kots...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: kots, cadvisor, runc, syft, kaniko, grype, zarf, docker, buildkitd, skopeo, zot, skaffold, ctop, k9s, newrelic-infrastructure-agent, trivy, k3s, nerdctl, k3d, kubescape, podman, wolfictl, kubernetes...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: nerdctl, skaffold, kubernetes, trivy, syft, zarf, grype, cadvisor, zot, docker, buildkitd, ctop, k3s, podman, kubescape, kaniko, runc, wolfictl, k3d, k9s, newrelic-infrastructure-agent, skopeo, kots...