GO-2025-3900 vulnerabilities

Vulnerabilities for packages: grafana-fips, gitlab-cng, gitlab-cng-fips, beats-fips, tkn-fips, kyverno, kyverno-notation-aws-fips, jitsucom-bulker, k9s-fips, istio-fips, beats, bank-vaults, pluto-fips, ratify-fips, grafana, rancher-security-scan, mattermost-fips, zitadel, boring-registry-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-fips, flux-helm-controller, grafana-fips, podinfo, victorialogs-fips, victoriametrics-cluster, go, victoriametrics-cluster-fips, aws-ebs-csi-driver, victoriametrics-fips, victorialogs, librechat, pluto, grafana-rollout-operator, localstack, loki-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: pluto, flux-helm-controller, terragrunt, flux-notification-controller, steampipe, grafana-operator, victoriametrics-cluster, flux-image-automation-controller, metacontroller, stakater-reloader, flux-source-controller, dkron, nova, go, grafana-rollout-operator, podinf...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: pluto, flux-helm-controller, terragrunt, flux-notification-controller, steampipe, grafana-operator, victoriametrics-cluster, flux-image-automation-controller, metacontroller, stakater-reloader, flux-source-controller, dkron, nova, go, grafana-rollout-operator, podinf...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, chartmuseum, kots, flux, helm-docs, k9s, flux-source-controller, zot, tw, rancher-helm, eksctl, cilium-cli, k8ssandra-client, kubescape, cert-manager-cmctl, chart-testing, cluster-api-helm-controller...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, chartmuseum, kots, flux, helm-docs, k9s, flux-source-controller, zot, tw, rancher-helm, eksctl, cilium-cli, k8ssandra-client, kubescape, cert-manager-cmctl, chart-testing, cluster-api-helm-controller...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, flux, trivy-operator, helm-docs, k9s, flux-source-controller, zot, linkerd2, headlamp, nova, k8sgpt, envoy-gateway, helm-mapkubeapis, helm-set-status, cerbos,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, helm-docs, k9s, flux-source-controller, zot, linkerd2, k8sgpt, tw, envoy-gateway, rancher-helm, cerbos, eksctl, cilium-cli, k8ssandra-client, kargo,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, wait-for-port, kapp-controller, ini-file, amazon-cloudwatch-agent-operator, kubernetes-dashboard-api, flux, steampipe, nri-mysql, nodetaint, cluster-api-provider-vsphere, rabbitmq-default-user-credential-updater, terraform-mcp-server, kind, opa,...

SUSE CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

Libreswan 4.6 < 5.3.1 DoS

The version of Libreswan installed on the remote host is between 4.6 and 5.3.1 exclusive. It is, therefore, affected by a denial of service vulnerability. An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. The function reassemblev2incomingfragments would...

EUVD-2026-41439

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

Linux Distros Unpatched Vulnerability : CVE-2026-12413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The functi...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

DEBIAN-CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

UBUNTU-CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

The CVE-2026-12413 issue affects Libreswan’s pluto daemon and is triggered by an invalidly formatted IKEv2 fragment. The root cause is an off-by-one error in the assertion within reassemble_v2_incoming_fragments(), which can cause the daemon to abort when handling certain outer payloads that are ...