CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory

Kata Containers is an open source implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 4.0.0, the kata-agent is vulnerable to an authorization bypass in confidential-guest memory management. In Confidential Containers CoCo deployments, the kata-age...

CVE-2022-23628

OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: argo-events-fips, otel-cli, newrelic-infra-operator, contour-fips, boring-registry, openbao-fips, tofu-controller, hello-world-golang, azure-aad-pod-identity-mic, kubernetes-csi-external-provisioner-fips, amazon-ssm-agent, apache-exporter, falco-exporter-fips, thanos...