GO-2025-3900 vulnerabilities

Vulnerabilities for packages: tkn-fips, kyverno, kyverno-notation-aws-fips, jitsucom-bulker, docker-compose-fips, neuvector-sigstore-interface-fips, bank-vaults, istio-fips, rancher-security-scan, grafana-fips, zitadel, k9s-fips, beats, ratify-fips, grafana, boring-registry-fips, pluto-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: grafana-operator-fips, localstack, aws-load-balancer-controller-fips, flux-helm-controller, aws-ebs-csi-driver-fips, loki-fips, victorialogs, flux-notification-controller, flux-image-reflector-controller, flux-operator, librechat, podinfo, victoriametrics-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, terragrunt, dkron, flux-source-controller, flux-notification-controller, stakater-reloader, flux-helm-controller, podinfo, flux-image-reflector-controller, metacontroller, nova, go, flux-image-automation-controller, victoriametrics-cluster,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, terragrunt, dkron, flux-source-controller, flux-notification-controller, stakater-reloader, flux-helm-controller, podinfo, flux-image-reflector-controller, metacontroller, nova, go, flux-image-automation-controller, victoriametrics-cluster,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kubescape, k9s, cilium-cli, helm-push, flux-source-controller, helm-docs, kots, flux-helm-controller, eksctl, tw, zarf, flux, trivy, chart-testing, pluto, rancher-helm, chartmuseum, zot, helm-operator, k8ssandra-client, cluster-api-helm-controller...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kubescape, k9s, cilium-cli, helm-push, flux-source-controller, helm-docs, kots, flux-helm-controller, eksctl, tw, zarf, flux, trivy, chart-testing, pluto, rancher-helm, chartmuseum, zot, helm-operator, k8ssandra-client, cluster-api-helm-controller...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: k8sgpt, cert-manager-cmctl, kubescape, k9s, helm-set-status, cilium-cli, helm-push, flux-source-controller, helm-docs, trivy-operator, kots, flux-helm-controller, eksctl, zarf, flux, linkerd2, cerbos, nova, istio, helm-mapkubeapis, trivy, chart-testing, rancher-fleet...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8sgpt, cert-manager-cmctl, k9s, cilium-cli, helm-push, flux-source-controller, helm-docs, kots, flux-helm-controller, eksctl, tw, zarf, linkerd2, cerbos, istio, trivy, chart-testing, rancher-fleet, envoy-gateway, pluto, rancher-helm, chartmuseum, zot, helm-operator,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, render-template, helm-set-status, cilium-cli, envconsul, witness, thanos-operator, lazydocker, eksctl, caddy, oauth2-proxy, ratify, hubble, nri-rabbitmq, nri-memcached, cloud-sql-proxy, guac, kor, steampipe, rclone, aactl,...

OESA-2026-3299 libreswan security update

Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

SUSE CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

OESA-2026-3073 libreswan security update

Libreswan is an implementation of IKEv1 and IKEv2 for IPsec. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

Libreswan 4.6 < 5.3.1 DoS

The version of Libreswan installed on the remote host is between 4.6 and 5.3.1 exclusive. It is, therefore, affected by a denial of service vulnerability. An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. The function reassemblev2incomingfragments would...

EUVD-2026-41439

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

Linux Distros Unpatched Vulnerability : CVE-2026-12413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The functi...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

DEBIAN-CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

AZL-91779 CVE-2026-12413 affecting package libreswan for versions less than 4.15-2

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...

CVE-2026-12413

An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemblev2incomingfragments would ignore unknown outer payloads but still store these in a fixed size array msgdigest.digestPAYLIMIT...