GO-2026-5013 vulnerabilities

Vulnerabilities for packages: minio, nfpm, crossplane-provider-aws-rds, argocd-image-updater, terraform-provider-tls, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: minio, crossplane-provider-aws-rds, db-operator, sbomqs, crossplane-provider-aws-s3, extism, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, wgcf, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, clickhouse-operator, dockerize,...

Photon OS 5.0: Nerdctl PHSA-2023-5.0-91-0044

An update of the nerdctl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0044. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: loki, aactl, k3d, commercial-expanso-edge, cilium, flux, helm, omnictl-multiarch-fips, snyk-cli, commercial-grafana, zot, nerdctl, falco-no-driver, prometheus-operator, upwind-agent, cert-manager, kine, omnictl-multiarch, elastic-agent-fips, prometheus, telegraf,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: k3d, minio, nerdctl, containerd, helm, prometheus-operator, aactl, kots, flux, kine, kyverno, zot, telegraf, snyk-cli, spire-server, loki, kaf, falco-no-driver, k3s...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-1908)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1908 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, . to execute repeatedly on the same...

Amazon Linux 2 : nerdctl, --advisory ALAS2-2026-3497 (ALAS-2026-3497)

The version of nerdctl installed on the remote host is prior to 2.2.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3497 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN...

Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

Medium: nerdctl

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.4, istio, loki, aactl, chisel, flux-source-controller-fips, minio-fips, cloud-provider-aws, frankenphp-8.5, flux, snyk-cli, commercial-grafana, zot, tekton-pipelines-fips, prometheus-operator, flux-image-automation-controller,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: tigera-operator, crossplane-provider-aws-rds-fips, jfrog-cli, aactl, crossplane-provider-aws-cloudwatch-fips, helmfile, cosign, crossplane-provider-aws-cloudsearch-fips, longhorn-cli-fips, melange, crossplane-provider-aws-ssm, chezmoi,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: tigera-operator, crossplane-provider-aws-rds-fips, jfrog-cli, aactl, crossplane-provider-aws-cloudwatch-fips, helmfile, cosign, crossplane-provider-aws-cloudsearch-fips, longhorn-cli-fips, melange, crossplane-provider-aws-ssm, chezmoi,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: minio, nfpm, argocd-image-updater, terraform-provider-tls, ksops, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher, crossplane-provider-azure-managedidentity, apko, policy-controller, mattermost, steampipe, docker-cli-buildx, k9s,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: minio, flux-image-automation-controller, nerdctl, cilium-cli, argocd-image-updater, containerd, flux-source-controller, osv-scanner, helm, cert-manager, prometheus, prometheus-operator, aactl, kots, flux, trivy-operator, istio, opentelemetry-collector,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: minio, flux-image-automation-controller, nerdctl, cilium-cli, argocd-image-updater, containerd, flux-source-controller, osv-scanner, helm, cert-manager, prometheus, prometheus-operator, aactl, kots, flux, trivy-operator, istio, opentelemetry-collector,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: minio, nerdctl, cilium-cli, containerd, helm, cert-manager, prometheus, prometheus-operator, buildah, aactl, kots, flux, istio, opentelemetry-collector, external-secrets-operator, kine, kyverno, opentofu, rancher, kubernetes, zot, gitlab-kas, external-dns, cilium,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: minio, nerdctl, cilium-cli, containerd, helm, cert-manager, prometheus, prometheus-operator, buildah, aactl, kots, flux, istio, opentelemetry-collector, external-secrets-operator, kine, kyverno, rancher, kubernetes, zot, gitlab-kas, external-dns, cilium, telegraf,...

Amazon Linux 2 : nerdctl, --advisory ALAS2-2026-3334 (ALAS-2026-3334)

The version of nerdctl installed on the remote host is prior to 2.2.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3334 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. CVE-2026-25680 Parsing...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-1735)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1735 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport...

Amazon Linux 2 : nerdctl, --advisory ALAS2-2026-3319 (ALAS-2026-3319)

The version of nerdctl installed on the remote host is prior to 2.2.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3319 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a...