GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubescape, kyverno-fips, external-secrets-operator-fips, chisel, skaffold-fips, zot, argo-cd, external-dns, gitlab-workhorse-ce, kubevela-fips, snyk-cli, kubescape-server-fips, nemo, harbor-fips, gitlab-workhorse-ce-fips, containerd, kubernetes-dashboard,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: kubescape, splunk-otel-collector-fips, kyverno-fips, docker-cli-buildx-fips, external-secrets-operator-fips, chisel, skaffold-fips, redpanda-console, longhorn-cli-fips, zot, argo-cd, grype-db, prometheus-podman-exporter, external-dns, apko-fips, chainctl,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, crossplane-provider-aws-route53resolver, agentbeat-fips, crossplane-provider-aws-cloudwatch-fips, crossplane-provider-aws-elb, grype-db, external-dns, gitlab-workhorse-ce, kubevela-fips, crossplane-provider-aws-elb-fips...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildah, kubescape, kyverno-fips, splunk-otel-collector-fips, teleport, docker-cli-buildx-fips, age-fips, external-secrets-operator-fips, chisel, skaffold-fips, step-kms-plugin-fips, redpanda-console, crossplane-provider-azure-netapp, falcoctl-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, crossplane-provider-aws-route53resolver, agentbeat-fips, crossplane-provider-aws-cloudwatch-fips, crossplane-provider-aws-elb, grype-db, external-dns, gitlab-workhorse-ce, kubevela-fips, crossplane-provider-aws-elb-fips...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: kubescape, splunk-otel-collector-fips, kyverno-fips, external-secrets-operator-fips, skaffold-fips, redpanda-console, zot, argo-cd, grype-db, prometheus-podman-exporter, external-dns, apko-fips, chainctl, gitlab-workhorse-ce, kubevela-fips, apko, snyk-cli, cg,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: buildah, kubescape, kyverno-fips, splunk-otel-collector-fips, teleport, docker-cli-buildx-fips, external-secrets-operator-fips, chisel, skaffold-fips, step-kms-plugin-fips, redpanda-console, crossplane-provider-azure-netapp, falcoctl-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubescape, kyverno-fips, external-secrets-operator-fips, chisel, skaffold-fips, zot, argo-cd, external-dns, gitlab-workhorse-ce, kubevela-fips, snyk-cli, kubescape-server-fips, nemo, harbor-fips, gitlab-workhorse-ce-fips, containerd, kubernetes-dashboard,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, sealed-secrets, crossplane-provider-aws-eks, atlantis, scorecard, sops, eksctl, argo-events, docker-machine-driver-linode,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, atlantis, scorecard, sops, eksctl, argo-events, flux-image-automation-controller, buildkitd, hcloud, osv-scanner, rancher-machine,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: skaffold, zarf, argocd-image-updater, kaf, prometheus-operator, rancher, cert-manager, containerd, falco-no-driver, gitea, kyverno, cilium-cli, kubernetes-dashboard, cilium, opentelemetry-collector, trivy, mattermost, fscrypt, minio, k3s,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: prometheus-operator, kaf, rancher, cert-manager, containerd, falco-no-driver, kyverno, buildah, docker-cli-buildx, cilium-cli, kubernetes-dashboard, cilium, opentelemetry-collector, mattermost, fscrypt, minio, k3s, external-dns, nerdctl, flux, kine, kots, loki,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, sealed-secrets, crossplane-provider-aws-eks, atlantis, scorecard, sops, eksctl, argo-events, docker-machine-driver-linode,...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640 LXD Snapshot Import Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

EUVD-2026-39794

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640

CVE-2026-9640 concerns LXD versions 6.0–6.9, 5.21.0–5.21.5, and 5.0.0–5.0.7. It describes a privilege escalation where an authenticated project operator in a restricted multi-tenant environment can bypass project-restriction policies during snapshot restoration by importing a malicious instance b...

CVE-2026-9640 LXD Snapshot Import Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...