Skip to content
OpenAdvisories

Package · Go

github.com/siderolabs/talos

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.3
    CVE-2026-77564

    Talos Linux: Support bundle does not redact registry credentials

    Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml in genera…

    siderolabs talos github.com/siderolabs/talos Go
  • High 7.5
    GHSA-m38g-vww2-mvgx

    Talos Linux has a local privilege escalation from untrusted workloads

    ### Summary A vulnerability in the Linux kernel's algif_aead subsystem (CVE-2026-31431, "copy.fail") allows an unprivileged container workload to corrupt arbitrary file page-cache pages via the AF_ALG crypto interface and splice(). On Talos Linux, this vulner…

    github.com/siderolabs/talos Go
  • High 8.6
    GHSA-g5p6-327m-3fxx

    Talos Linux ships runc vulnerable to the escape to the host attack

    ### Impact Snyk has discovered a vulnerability in all versions of runc <=1.1.11, as used by the Docker engine, along with other containerization technologies such as Kubernetes. Exploitation of this issue can result in container escape to the underlying host …

    github.com/siderolabs/talos Go
  • Medium —
    GHSA-jr8j-2jhp-m67v

    nftables binding to an already bound chain

    ### Impact An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel. A denial of service can occur upon binding to an already bound chain. Affected by this vulnerability is the function nft_verdict_init of the file net/netfilter/nf_tables_…

    github.com/siderolabs/talos Go