k3s-multicall-1.32

3 results · Clear filters · Feed

• High 7.5
  CVE-2026-56852 Public exploit

  Infinite loop on invalid input in golang.org/x/text

  A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

  golang.org/x/text golang.org/x/text/unicode/norm zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  Jul 21, 2026
• High 7.3
  CVE-2025-52881 Public exploit

  runc: LSM labels can be bypassed with malicious config using dummy procfs files

  runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with s…

  opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  Nov 6, 2025
• High 7.3
  CVE-2025-31133 Public exploit

  runc container escape via "masked path" abuse due to mount race conditions

  runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount…

  opencontainers runc k3s-static-1.32 falco-no-driver Debian Ubuntu Azure Linux Alpine Wolfi Go
  Nov 6, 2025