Skip to content
OpenAdvisories

Package · Wolfi

k3s-1.36

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-97045

    Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net

    In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign name…

    golang.org/x/net golang.org/x/net/html zot kots Debian Ubuntu Azure Linux Wolfi Go
  • Medium 5.5
    CVE-2026-61801

    github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files

    The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing `/etc/passwd`- or `/etc/group`-style files, allow…

    moby sys zarf k3d Debian Ubuntu Azure Linux Wolfi Go