istio-pilot-discovery-fips-1.26

Direct Vulnerabilities

Known vulnerabilities in the istio-pilot-discovery-fips-1.26 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-259r-337f-4rfw	*
L GHSA-gcjh-h69q-9w9g	*
L CVE-2026-46600	*
L GHSA-hrxh-6v49-42gf	*
L CVE-2026-56852	*
L GO-2026-5932	*
L CVE-2026-39822	*
L CVE-2026-42505	*
L Uncontrolled Memory Allocation	*
L GHSA-rm8v-mxj3-5rmq	*
H NULL Pointer Dereference	*
L Uncontrolled Memory Allocation	<1.26.8-r11
L CVE-2024-28122	*
M Resource Exhaustion	*
L Improper Certificate Validation	*
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	*
L CVE-2026-39824	*
L CVE-2026-27145	*
L CVE-2026-42507	*
L Improper Certificate Validation	*
L Out-of-Bounds	*
L Improper Verification of Cryptographic Signature	*
L CVE-2026-42504	*
L Missing Authorization	*
L CVE-2026-46595	*
L Incorrect Type Conversion or Cast	*
L Integer Overflow or Wraparound	*
L CVE-2026-46598	*
L Missing Authorization	*
L CVE-2026-39821	*
L Cross-site Scripting (XSS)	*
L Improper Certificate Validation	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1.26.6-r2
M CVE-2025-47911	<1.26.6-r2
L Resource Exhaustion	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Deserialization of Untrusted Data	*
L Reachable Assertion	<1.26.6-r2
L Improper Restriction of Rendered UI Layers or Frames	*
L Improper Restriction of Rendered UI Layers or Frames	*
H Information Exposure	*
M Incorrect Authorization	*
L Resource Exhaustion	*
L Information Exposure	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	<1.26.8-r12
L CVE-2026-42499	<1.26.8-r12
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.26.8-r12
H NULL Pointer Dereference	<1.26.8-r12
L Improper Encoding or Escaping of Output	<1.26.8-r12
M Out-of-bounds Write	<1.26.8-r12
L Cross-site Scripting (XSS)	<1.26.8-r12
M Link Following	<1.26.8-r12
H Double Free	<1.26.8-r12
L CVE-2026-39825	<1.26.8-r12
L CVE-2026-42501	<1.26.8-r12
M Cross-site Scripting (XSS)	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	<1.26.8-r11
C CVE-2026-27143	<1.26.8-r10
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.26.8-r10
L CVE-2026-32280	<1.26.8-r10
H Improper Certificate Validation	<1.26.8-r4
M Link Following	<1.26.8-r10
H Incorrect Authorization	<1.26.8-r10
H Improper Certificate Validation	<1.26.8-r10
H Allocation of Resources Without Limits or Throttling	<1.26.8-r10
M Cross-site Scripting (XSS)	<1.26.8-r10
M Allocation of Resources Without Limits or Throttling	<1.26.8-r10
H Untrusted Search Path	<1.26.8-r11
L Uncaught Exception	<1.26.8-r9
L Improper Authorization	<1.26.8-r8
L Direct Request ('Forced Browsing')	<1.26.8-r7
L Directory Traversal	<1.26.8-r7
L Cross-site Scripting (XSS)	<1.26.8-r7
L Improper Certificate Validation	<1.26.8-r4
L Improper Certificate Validation	<1.26.8-r4
H CVE-2025-15558	<1.26.8-r6
L Untrusted Search Path	<1.26.8-r5
L CVE-2025-61732	<1.26.8-r2
C CVE-2025-68121	<1.26.8-r2
L Allocation of Resources Without Limits or Throttling	<1.26.8-r1
L Allocation of Resources Without Limits or Throttling	<1.26.8-r1
L CVE-2025-61730	<1.26.8-r1
L Out-of-bounds Write	<1.26.8-r1
L CVE-2025-61731	<1.26.8-r1
L Information Exposure	<1.26.7-r1
L Improper Certificate Validation	<1.26.7-r0
L Improper Certificate Validation	<1.26.7-r0
L CVE-2025-58181	<1.26.6-r2
L CVE-2025-47914	<1.26.6-r2
L CVE-2025-58186	<1.26.6-r1
L Allocation of Resources Without Limits or Throttling	<1.26.6-r1
L CVE-2025-47912	<1.26.6-r1
L CVE-2025-61725	<1.26.6-r1
L Allocation of Resources Without Limits or Throttling	<1.26.6-r1
L Improper Certificate Validation	<1.26.6-r1
L Allocation of Resources Without Limits or Throttling	<1.26.6-r1
L Information Exposure Through Log Files	<1.26.6-r1
L Algorithmic Complexity	<1.26.6-r1
L CVE-2025-58183	<1.26.6-r1
L CVE-2025-47910	<1.26.4-r1
L Use of Uninitialized Resource	<1.26.3-r1
L Allocation of Resources Without Limits or Throttling	<1.26.3-r1

istio-pilot-discovery-fips-1.26

Direct Vulnerabilities

Fix vulnerabilities automatically