Publish Advisories

GHSA-389r-gv7p-r3rp
GHSA-587r-mc96-6f2p
GHSA-crhj-59gh-8x96
GHSA-m38g-vww2-mvgx
GHSA-m5p4-gvpx-4mvr
GHSA-m7cr-m3pv-hgrp
GHSA-q7rr-3cgh-j5r3
GHSA-xrvj-v92f-53gj

Author: advisory-database[bot]

advisories/github-reviewed/2026/05/GHSA-389r-gv7p-r3rp/GHSA-389r-gv7p-r3rp.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-389r-gv7p-r3rp",
-  "modified": "2026-05-11T14:48:12Z",
+  "modified": "2026-06-08T23:42:41Z",
   "published": "2026-05-11T14:48:12Z",
   "aliases": [
     "CVE-2026-45022"
@@ -62,6 +62,10 @@
       "type": "WEB",
       "url": "https://github.com/go-git/go-git/security/advisories/GHSA-389r-gv7p-r3rp"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45022"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/go-git/go-git"
@@ -75,6 +79,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-11T14:48:12Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-27T15:16:29Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-587r-mc96-6f2p/GHSA-587r-mc96-6f2p.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-587r-mc96-6f2p",
-  "modified": "2026-05-11T14:45:08Z",
+  "modified": "2026-06-08T23:42:22Z",
   "published": "2026-05-11T14:45:08Z",
   "aliases": [
     "CVE-2026-44971"
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/DataDog/guarddog/security/advisories/GHSA-587r-mc96-6f2p"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44971"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/DataDog/guarddog"
@@ -52,6 +56,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-11T14:45:08Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-27T15:16:29Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-crhj-59gh-8x96/GHSA-crhj-59gh-8x96.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-crhj-59gh-8x96",
-  "modified": "2026-05-19T15:38:39Z",
+  "modified": "2026-06-08T23:43:04Z",
   "published": "2026-05-19T15:38:39Z",
   "aliases": [
     "CVE-2026-45571"
@@ -84,6 +84,10 @@
       "type": "WEB",
       "url": "https://github.com/go-git/go-git/security/advisories/GHSA-crhj-59gh-8x96"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45571"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/go-git/go-git"
@@ -96,6 +100,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-19T15:38:39Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-27T15:16:30Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-m38g-vww2-mvgx/GHSA-m38g-vww2-mvgx.json

@@ -1,11 +1,11 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m38g-vww2-mvgx",
-  "modified": "2026-05-07T02:38:02Z",
+  "modified": "2026-06-08T23:43:27Z",
   "published": "2026-05-07T02:38:02Z",
   "aliases": [],
   "summary": "Talos Linux has a local privilege escalation from untrusted workloads",
-  "details": "### Summary\n\nA vulnerability in the Linux kernel's algif_aead subsystem (CVE-2026-31431, \"copy.fail\") allows an unprivileged container workload to corrupt arbitrary file page-cache pages via the AF_ALG crypto interface and splice(). On Talos Linux, this vulnerability can be chained into a complete node compromise: an attacker who can schedule a pod on a worker node can, without any elevated Kubernetes permissions, achieve arbitrary code execution as root on the host (by poisoning a binary inside a privileged pod, or poisoning a binary which runs with elevated privileges like a CNI binary), access host filesystem, including node secrets. \n\nThe exploit does not require kernel debugging, race conditions, or any prior privileges beyond the ability to create a pod.\n\n### Impact\n\nAn attacker with the ability to deploy a Kubernetes pod on an affected node can:\n\n1. Corrupt the page-cache of /usr/sbin/nft in the containerd snapshot layer shared between the attacker's pod and the kube-proxy DaemonSet. Because containerd reuses XFS page-cache pages across overlayfs mounts sharing the same lower layer, the corruption is immediately visible to all containers using that image layer — including privileged system DaemonSets.\n2. Execute arbitrary code inside kube-proxy — a privileged DaemonSet running on every node with all Linux capabilities (privileged: true) and host network access — the next time kube-proxy invokes nft as part of its nftables reconciliation loop (typically within seconds).\n3. At this point, an attacker achieved code execution inside a privileged pod, which allows to escape to the host.\n4. Same attack can be planted by infiltrating other binaries running as privileged, for example a CNI plugin.\n\n### Patches\n\nUpgrade to Talos v1.13.0 or Talos v1.12.7 which ships Linux kernel 6.18.25. The kernel fix for CVE-2026-31431 (algif_aead in-place optimization revert) was committed upstream in  Linux 6.18.22 and is included in all Talos releases from v1.13.0 and Talos 1.12.7 onwards.\n\n### Workarounds\n\nThere are multiple workarounds available based on the situation, but upgrading is strongly recommended.\n\n#### Option 1 - Change kernel arguments\n\nAdd a kernel argument with `initcall_blacklist=algif_aead_init` by upgrading Talos to the same version.\n\n> Note: this either requires setting `machine.kernel.extraKernelArgs` if using BIOS based boot or upgrading with a new image from factory/imager generated image by setting the extra kernel args. See [Boot Assets](https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/boot-assets)\n\n#### Option 2 - Deploy all workload pods with a seccomp profile denying  creating `AF_ALG` socket creation\n\n`patch.yaml`\n\n```yaml\nmachine:\n  seccompProfiles:\n    - name: copy-fail-block.json\n      value:\n        defaultAction: SCMP_ACT_ALLOW\n        syscalls:\n          - names:\n              - socket\n            action: SCMP_ACT_ERRNO\n            args:\n              - index: 0\n                value: 38\n                op: SCMP_CMP_EQ\n```\n\nApply this patch to all machines in the cluster and set this for all the pod spec:\n\n```yaml\n...\nspec:\n      securityContext:\n        seccompProfile:\n          type: Localhost\n          localhostProfile: profiles/copy-fail-block.json\n```\n\n#### Option 3 - Block the syscall in runtime with a eBPF program\n\nSee [copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker), this can be applied to a running system without a reboot, but it has to run before any other workloads are scheduled after a reboot. \n\n### Resources\n\n* https://copy.fail/\n* https://xint.io/blog/copy-fail-linux-distributions\n* https://github.com/theori-io/copy-fail-CVE-2026-31431\n* https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
+  "details": "### Summary\n\nA vulnerability in the Linux kernel's algif_aead subsystem (CVE-2026-31431, \"copy.fail\") allows an unprivileged container workload to corrupt arbitrary file page-cache pages via the AF_ALG crypto interface and splice(). On Talos Linux, this vulnerability can be chained into a complete node compromise: an attacker who can schedule a pod on a worker node can, without any elevated Kubernetes permissions, achieve arbitrary code execution as root on the host (by poisoning a binary inside a privileged pod, or poisoning a binary which runs with elevated privileges like a CNI binary), access host filesystem, including node secrets. \n\nThe exploit does not require kernel debugging, race conditions, or any prior privileges beyond the ability to create a pod.\n\n### Impact\n\nAn attacker with the ability to deploy a Kubernetes pod on an affected node can:\n\n1. Corrupt the page-cache of /usr/sbin/nft in the containerd snapshot layer shared between the attacker's pod and the kube-proxy DaemonSet. Because containerd reuses XFS page-cache pages across overlayfs mounts sharing the same lower layer, the corruption is immediately visible to all containers using that image layer — including privileged system DaemonSets.\n2. Execute arbitrary code inside kube-proxy — a privileged DaemonSet running on every node with all Linux capabilities (privileged: true) and host network access — the next time kube-proxy invokes nft as part of its nftables reconciliation loop (typically within seconds).\n3. At this point, an attacker achieved code execution inside a privileged pod, which allows to escape to the host.\n4. Same attack can be planted by infiltrating other binaries running as privileged, for example a CNI plugin.\n\n### Patches\n\nUpgrade to Talos v1.13.0 or Talos v1.12.7 which ships Linux kernel 6.18.25. The kernel fix for CVE-2026-31431 (algif_aead in-place optimization revert) was committed upstream in  Linux 6.18.22 and is included in all Talos releases from v1.13.0 and Talos 1.12.7 onwards.\n\n### Workarounds\n\nThere are multiple workarounds available based on the situation, but we really recommend to upgrade.\n\n#### Option 1 - Change kernel arguments\n\nAdd a kernel argument with `initcall_blacklist=algif_aead_init` by upgrading Talos to the same version.\n\n> Note: this either requires setting `machine.kernel.extraKernelArgs` if using BIOS based boot or upgrading with a new image from factory/imager generated image by setting the extra kernel args. See [Boot Assets](https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/boot-assets)\n\n#### Option 2 - Deploy all workload pods with a seccomp profile denying  creating `AF_ALG` socket creation\n\n`patch.yaml`\n\n```yaml\nmachine:\n  seccompProfiles:\n    - name: copy-fail-block.json\n      value:\n        defaultAction: SCMP_ACT_ALLOW\n        syscalls:\n          - names:\n              - socket\n            action: SCMP_ACT_ERRNO\n            args:\n              - index: 0\n                value: 38\n                op: SCMP_CMP_EQ\n```\n\nApply this patch to all machines in the cluster and set this for all the pod spec:\n\n```yaml\n...\nspec:\n      securityContext:\n        seccompProfile:\n          type: Localhost\n          localhostProfile: profiles/copy-fail-block.json\n```\n\n#### Option 3 - Block the syscall in runtime with a eBPF program\n\nSee [copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker), this can be applied to a running system without a reboot, but it has to run before any other workloads are scheduled after a reboot. \n\n### References\n\n* https://copy.fail/\n* https://xint.io/blog/copy-fail-linux-distributions\n* https://github.com/theori-io/copy-fail-CVE-2026-31431\n* https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
   "severity": [
     {
       "type": "CVSS_V3",

advisories/github-reviewed/2026/05/GHSA-m5p4-gvpx-4mvr/GHSA-m5p4-gvpx-4mvr.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m5p4-gvpx-4mvr",
-  "modified": "2026-05-11T14:43:43Z",
+  "modified": "2026-06-08T23:42:18Z",
   "published": "2026-05-11T14:43:43Z",
   "aliases": [
     "CVE-2026-44972"
@@ -40,6 +40,10 @@
       "type": "WEB",
       "url": "https://github.com/DataDog/guarddog/security/advisories/GHSA-m5p4-gvpx-4mvr"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44972"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/DataDog/guarddog"
@@ -52,6 +56,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-11T14:43:43Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-27T15:16:29Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-m7cr-m3pv-hgrp/GHSA-m7cr-m3pv-hgrp.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-m7cr-m3pv-hgrp",
-  "modified": "2026-05-19T15:21:01Z",
+  "modified": "2026-06-08T23:42:58Z",
   "published": "2026-05-19T15:21:01Z",
   "aliases": [
     "CVE-2026-45570"
@@ -84,6 +84,10 @@
       "type": "WEB",
       "url": "https://github.com/go-git/go-git/security/advisories/GHSA-m7cr-m3pv-hgrp"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45570"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/go-git/go-git"
@@ -96,6 +100,6 @@
     "severity": "LOW",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-19T15:21:01Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-27T15:16:30Z"
   }
 }

advisories/github-reviewed/2026/05/GHSA-q7rr-3cgh-j5r3/GHSA-q7rr-3cgh-j5r3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q7rr-3cgh-j5r3",
-  "modified": "2026-05-11T14:42:10Z",
+  "modified": "2026-06-08T23:42:14Z",
   "published": "2026-05-11T14:42:10Z",
   "aliases": [
     "CVE-2026-44902"
@@ -78,6 +78,10 @@
       "type": "WEB",
       "url": "https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-q7rr-3cgh-j5r3"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44902"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/open-telemetry/opentelemetry-js"
@@ -90,6 +94,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-05-11T14:42:10Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-05-27T15:16:29Z"
   }
 }

advisories/github-reviewed/2026/06/GHSA-xrvj-v92f-53gj/GHSA-xrvj-v92f-53gj.json

@@ -0,0 +1,58 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xrvj-v92f-53gj",
+  "modified": "2026-06-08T23:43:42Z",
+  "published": "2026-06-08T23:43:42Z",
+  "aliases": [
+    "CVE-2026-47734"
+  ],
+  "summary": "Dulwich has unbounded memory allocation in receive-pack from crafted thin packs",
+  "details": "## Impact\n\nAn uncontrolled-resource-consumption (memory exhaustion) denial-of-service vulnerability (CWE-400 / CWE-789).\n\nA client with push access could push a tiny crafted thin pack (~174 bytes)  whose delta header declares a huge   dest_size. When dulwich ingested it via  add_thin_pack / apply_delta, it would  allocate hundreds of MB of memory based on that attacker-controlled size, with no relationship to the actual bytes received.\n\nWho is impacted: Operators running a Dulwich-based Git server that exposes git-receive-pack (i.e. accepts pushes) -\nfor example via dulwich.server functionality, the HTTP  smart server, or anything built on ReceivePackHandler. \n\n## Patches\n\nPatched in 1.2.5.\n\nadd_thin_pack now accepts a max_input_size keyword (bytes; 0/None = unlimited, matching git's semantics), and ReceivePackHandler reads receive.maxInputSize from the repository config and passes it through. Wire reads are counted and a PackInputTooLarge exception is raised once the cap is exceeded - equivalent to git index-pack --max-input-size.\n\nUsers should upgrade to Dulwich 1.2.5 or later and set receive.maxInputSize in their server's repository config to a sane bound for their environment.\n\n## Workarounds\n\nOn unpatched versions, receive.maxInputSize has no effect, so it cannot be used as a workaround. Until upgrading, operators should:\n\n- Restrict dulwich-receive-pack (push) access to trusted, authenticated clients only, or disable it entirely on servers that only need to serve fetches.\n- Run the server under an OS-level memory limit (e.g. ulimit, cgroups/MemoryMax, or a container memory limit) so a malicious push is killed rather than taking down the host.\n\n##  Resources\n\n- git's receive.maxInputSize / git index-pack --max-input-size documentation \n- Reported by Liyi, Ziyue, Strick, Maurice and Chenchen @ University of Sydney",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "PyPI",
+        "name": "dulwich"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0.1.0"
+            },
+            {
+              "fixed": "1.2.5"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/jelmer/dulwich/security/advisories/GHSA-xrvj-v92f-53gj"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/jelmer/dulwich"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400",
+      "CWE-789"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2026-06-08T23:43:42Z",
+    "nvd_published_at": null
+  }
+}