59725 matches found
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: terragrunt-fips, omnictl-multiarch, flux-source-controller-fips, kine, redpanda-console, kubernetes-dashboard, frankenphp-8.2, gatekeeper-fips, zarf-fips, splunk-otel-collector-fips, pulumi, cilium-cli, istio, argo-events, frankenphp-8.5, etcd-fips, minio-fips,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-sql, flux-source-controller-fips, kine, tflint, kubernetes-dashboard, coder-fips, splunk-otel-collector-fips, flux-kustomize-controller, istio, crossplane-provider-aws-emr-fips, crossplane-provider-aws-vpc, crossplane-provider-aws-cloudfront...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: terragrunt-fips, omnictl-multiarch, flux-source-controller-fips, kine, redpanda-console, rootlesskit-fips, kubernetes-dashboard, longhorn-cli, frankenphp-8.2, docker, coder-fips, gatekeeper-fips, zarf-fips, splunk-otel-collector-fips, pulumi, cilium-cli, istio,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: cert-manager, rancher-machine, gomplate, crossplane-provider-azure-managedidentity, kine, crossplane-provider-aws-cloudwatchlogs, flux-notification-controller, crossplane-provider-aws-ec2, terraform-provider-azurerm, openbao, chisel, flux-image-automation-controller,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: cert-manager, rancher-machine, gomplate, crossplane-provider-azure-managedidentity, kine, flux-notification-controller, terraform-provider-azurerm, openbao, chisel, flux-image-automation-controller, neuvector-sigstore-interface, pulumi-kubernetes-operator, rootlesski...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: cert-manager, kots, rancher, kubernetes-dashboard, zarf, mattermost, kyverno, istio, prometheus-operator, argocd-image-updater, kine, kubernetes, trivy-operator, prometheus, flux, chisel, flux-image-automation-controller, kubescape, opentelemetry-collector,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: cert-manager, rancher-machine, gomplate, crossplane-provider-azure-managedidentity, kine, crossplane-provider-aws-cloudwatchlogs, flux-notification-controller, crossplane-provider-aws-ec2, terraform-provider-azurerm, openbao, chisel, flux-image-automation-controller,...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: cert-manager, kots, rancher, kubernetes-dashboard, mattermost, kyverno, istio, prometheus-operator, kine, kubernetes, podman, prometheus, flux, opentelemetry-collector, knative-serving, cilium, buildah, snyk-cli, kaf, fscrypt, k3s, telegraf, cloud-provider-aws,...
CVE-2026-9640
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...
EUVD-2026-39794
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...
CVE-2026-9640
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...
CVE-2026-9640
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...
CVE-2026-9640 LXD Snapshot Import Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...
CVE-2026-9640
CVE-2026-9640 concerns LXD versions 6.0–6.9, 5.21.0–5.21.5, and 5.0.0–5.0.7. It describes a privilege escalation where an authenticated project operator in a restricted multi-tenant environment can bypass project-restriction policies during snapshot restoration by importing a malicious instance b...
CVE-2026-9640 LXD Snapshot Import Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...
PT-2026-52844
Name of the Vulnerable Software and Affected Versions LXD versions 6.0 through 6.8 LXD versions 5.21.0 through 5.21.4 LXD versions 5.0.0 through 5.0.6 Description An issue exists in the handling of project-restriction policies during snapshot restoration. An authenticated project operator in a...
PT-2026-53025
Summary js-toml's interpreter checks whether a key already exists in a parser-built container with if objectkey instead of if key in object. When the prior value is a falsy primitive — false, 0, 0n, 0.0, -0, or "" — the duplicate-key branch is skipped and the value is silently overwritten by a...
PT-2026-53022
Name of the Vulnerable Software and Affected Versions Nebula Mesh affected versions not specified Description The web UI /ui/ fails to apply per-operator Certificate Authority CA scoping. This allows any authenticated non-admin operator to access, block, or delete resources belonging to other...
CVE-2026-47770
A flaw was found in jq, a command-line JSON processor. This vulnerability allows a local user or an attacker providing malicious input to cause a denial of service DoS by comparing two sufficiently deeply nested arrays using the '==' operator. This action exhausts the C stack due to uncontrolled...