CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: hubble, istio, containerd, rekor, opentofu, dataplaneapi, pulumi-language-yaml, kine, flux, pinact, pulumi-language-dotnet, grafana-operator, grafana-alloy, apko, nerdctl, cerbos, k3s, karpenter, azuredisk-csi, azurefile-csi, kubeflow-katib, kubernetes, cilium-cli,...

CVE-2026-39822

creationtimestamp| type| source ---|---|--- 2026-07-08 17:20:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5mx4lmyo2y 2026-07-09 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq7lk7amnk2g 2026-07-12 07:58:03+00:00| seen|...

DEBIAN-CVE-2026-39822

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...

CVE-2026-39822

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...