netavark (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package netavark, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-35406 — CVSS 6.2 (medium): Aardvark-dns is an authoritative dns server for A/AAAA container records. From 1.16.0 to 1.17.0, a truncated TCP DNS query followed by a…
• CVE-2025-8283 — CVSS 3.7 (low): A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being…