DEBIAN-CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kaniko, helm-operator, neuvector-scanner, k3s, kubescape, docker, tigera-operator, chartmuseum, docker-cli-buildx, kube-arangodb, helm-mapkubeapis, rancher, syft, helm-set-status, gatekeeper, kubescape-operator, kots, linkerd2, helm-push, consul-k8s, trivy-operator,...