Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

May 2026Clear ×Project: SPIREClear ×

SPIREv1.15.1SecurityMay 28, 2026

CHECK 1OTHER 2View full analysis

SPIRE v1.15.1 includes a security correction for Azure IMDS node attestation. The release also updates the golang.org/x/net and golang.org/x/crypto dependencies.

Check if affected (1)

securityAzure IMDS node attestation validation
Applies if you use the azure_imds server node attestor plugin.
The azure_imds server node attestor now validates the certificate used for the signature against the trusted Azure roots, preventing forged attested documents from being accepted during node attestation. The fix ships in SPIRE v1.15.1.

Source ↗

SPIREv1.14.7SecurityMay 28, 2026

CHECK 1OTHER 2View full analysis

SPIRE v1.14.7 fixes a security vulnerability in Azure IMDS node attestation. It also updates the Go toolchain to 1.26.3 and updates three dependencies.

Check if affected (1)

securityThe azure_imds node attestor validation is corrected
Applies if you use the azure_imds server node attestor plugin.
SPIRE v1.14.7 corrects validation in the azure_imds server node attestor plugin. The fix ensures the certificate used for signature verification matches the certificate validated against trusted Azure roots, preventing forged attested documents from being accepted.

Source ↗

Browse by month