Skip to content
OpenAdvisories

Package · Wolfi

rpk-26.1.2

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-32288

    Unbounded allocation for old GNU sparse in archive/tar

    tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" format.

    Go standard library archive/tar golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.1
    CVE-2026-32289

    JsBraceDepth Context Tracking Bugs (XSS) in html/template

    Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, le…

    Go standard library html/template golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.8
    CVE-2026-33997

    Moby: Off-by-one error in plugin privilege validation

    Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, t…

    moby moby zot kots Debian Ubuntu Alpine Wolfi Go