{"id":"DHI-zy6h-cf54-ulop-i3uu","summary":"Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has…","details":"Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.","modified":"2026-11-10T22:15:03.963394378Z","published":"2026-11-10T22:10:05Z","upstream":["CVE-2026-56862"],"references":[{"type":"ADVISORY","url":"https://scout.docker.com/v/DHI-zy6h-cf54-ulop-i3uu"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56862"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-60304.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:60304"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-60305.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:60305"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-62406.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:62406"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-62407.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:62407"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-63124.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:63124"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-63136.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:63136"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-63163.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:63163"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-65117.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65117"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-65153.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65153"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-66016.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:66016"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-66364.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:66364"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-67161.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:67161"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-69961.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:69961"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-70391.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:70391"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-70640.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:70640"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-70641.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:70641"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2/ALAS-2026-3893.html"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56865"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56864"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56862"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56860"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56859"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56858"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56853"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33818"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2023/ALAS-2026-2114.html"},{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-56862"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6090"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-60304-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-60304-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-60305-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-60305-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-60306-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-60306-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-62406-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-62406-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-62407-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-62407-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-62577-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-62577-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-62578-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-62578-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-62631-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-62631-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-63022-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-63022-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-63119-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-63119-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-63124-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-63124-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-63136-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-63136-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-63163-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-63163-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-63332-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-63332-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-64777-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-64777-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-64788-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-64788-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-64818-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-64818-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-65153-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-65153-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-65534-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-65534-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-65886-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-65886-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-65895-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-65895-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-66364-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-66364-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-67161-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-67161-0.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-69308.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-69308.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-69961.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-69961.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-70201.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-70201.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-70391.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-70391.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-70640.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-70640.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/cve/ELSA-2026-70641.html"},{"type":"ADVISORY","url":"https://linux.oracle.com/errata/ELSA-2026-70641.html"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-56862"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:60304"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:60305"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:60306"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:62406"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:62407"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:62577"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:62578"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:62631"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:63022"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:63119"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:63124"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:63136"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:63163"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:63332"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:64777"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:64788"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:64818"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:65116"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:65117"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:65153"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:65534"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:65886"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:65895"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:66016"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:66364"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:67161"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:69308"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:69961"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:70201"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:70391"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:70640"},{"type":"ADVISORY","url":"https://errata.rockylinux.org/RLSA-2026:70641"},{"type":"ADVISORY","url":"https://ubuntu.com/security/CVE-2026-56862"},{"type":"ADVISORY","url":"http://people.ubuntu.com/~ubuntu-security/cve/CVE-2026-56862"},{"type":"WEB","url":"https://github.com/golang/go/issues/80528"}],"affected":[{"package":{"name":"tailscale-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale-fips-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-fips-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale-fips","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-fips"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json","owner_kind":"HSP"}},{"package":{"name":"tailscale-k8s-nameserver-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale-k8s-nameserver-fips-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver-fips-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json","owner_kind":"HSP"}},{"package":{"name":"tailscale-k8s-nameserver-fips","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver-fips"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale-k8s-nameserver","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json","owner_kind":"HSP"}},{"package":{"name":"tailscale-k8s-operator-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale-k8s-operator-fips-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator-fips-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale-k8s-operator-fips","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator-fips"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale-k8s-operator","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}},{"package":{"name":"tailscale","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-zy6h-cf54-ulop-i3uu.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}