GHSA-W6R9-248C-FRG8 vulnerabilities

Vulnerabilities for packages: bento, telegraf, falcosidekick-fips, krakend-fips, keda-fips, falcosidekick, argo-events, bento-fips, keda, guac, trufflehog-fips, krakend, argo-events-fips, trufflehog...

CVE-2026-107386 vulnerabilities

Vulnerabilities for packages: bento, telegraf, falcosidekick-fips, krakend-fips, keda-fips, falcosidekick, argo-events, bento-fips, keda, guac, trufflehog-fips, krakend, argo-events-fips, trufflehog...

GHSA-W6R9-248C-FRG8 vulnerabilities

Vulnerabilities for packages: telegraf, keda, argo-events, bento, trufflehog, falcosidekick, guac...

CVE-2026-107386 vulnerabilities

Vulnerabilities for packages: telegraf, keda, argo-events, bento, trufflehog, falcosidekick, guac...

CLEANSTART-2026-JF99427 Security fix for ghsa-m425-mq94-257g applied in: argo-events 1.6.3-r1, cert-manager-webhook-pdns-fips 2.3.0-r0, cloudprober 0.12.9-r0, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, metrics-server-fips 0.5.2-r3, multus-cni-fips 3.9.3-r2, multus-cni-fips 4.0.2-r2

ghsa-m425-mq94-257g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PI41655 Security fix for CVE-2022-1996 applied in: argo-events 1.6.3-r1, cert-manager-webhook-pdns-fips 2.3.0-r0, kserve-modelmesh-serving 0.9.0-r1, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r2

CVE-2022-1996 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GY43798 Security fix for ghsa-r48q-9g5r-8q2h applied in: argo-events 1.6.3-r1, kserve-modelmesh-serving 0.9.0-r1

ghsa-r48q-9g5r-8q2h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2025-3608 vulnerabilities

Vulnerabilities for packages: argo-events-fips...

GO-2023-1930 vulnerabilities

Vulnerabilities for packages: argo-events-fips, argo-events...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, bom, kargo, grafana-alloy-fips, kots, goreleaser, pulumi-language-dotnet, flux-image-automation-controller-fips, flux-source-controller-fips, argo-workflows-fips, argo-events-fips, grafana-alloy, flux-kustomize-controller-fips, tekton-pipelines,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, dapr, argo-events-fips, grafana-alloy, bento, vault, amazon-cloudwatch-agent-fips, splunk-otel-collector, sqlexporter-fips, splunk-otel-collector-fips, cluster-api-aws-controller-fips, sqlexporter, telegraf, argo-events, dapr-fips, vault-fips...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesisanalytics-fips, vertical-pod-autoscaler, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-secretsmanager-fips, loki, crossplane-provider-aws-codestarnotifications-fips, commercial-chainloop-cli, gitsign,...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: mattermost, external-secrets-operator, prometheus, istio, telegraf, kyverno, terragrunt, argo-events, k3s, argocd-image-updater, falco-no-driver, gitsign, helm, opentofu, argo-cd, containerd, guac...

GO-2023-1930 vulnerabilities

Vulnerabilities for packages: argo-events...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: osv-scanner, kubescape, grype, kubevela, argo-events, gitea, argocd-image-updater, pulumi-kubernetes-operator, wolfictl, skaffold, grafana-alloy, pulumi-language-dotnet, kaniko, pulumi-language-java, flux-kustomize-controller, argo-workflows, crossplane, gptscript,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: osv-scanner, kubescape, grype, kubevela, argo-events, gitea, argocd-image-updater, pulumi-kubernetes-operator, wolfictl, skaffold, grafana-alloy, pulumi-language-dotnet, kaniko, pulumi-language-java, flux-kustomize-controller, argo-workflows, crossplane, gptscript,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: trivy-operator, external-secrets-operator, osv-scanner, kubescape, grype, kubevela, argo-events, gitea, argocd-image-updater, pulumi-kubernetes-operator, wolfictl, skaffold, argo-cd, grafana-alloy, pulumi-language-dotnet, kaniko, pulumi-language-java, argo-workflows,...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: atlantis, goreleaser, kyverno-policy-reporter, argo-rollouts, argo-events, kubernetes-event-exporter, kubewatch, bento, argo-cd...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, argo-events, bento, jitsucom-bulker, opentelemetry-collector-contrib, sqlexporter, cluster-api-aws-controller, grafana-alloy, amazon-cloudwatch-agent...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sqlpad, wal-g, rclone, kubescape, argo-events, fluent-bit-plugin-loki, thanos, cortex, prometheus-operator, velero, tkn, rook, py3-cassandra-medusa, hugo-extended, flux-kustomize-controller, argo-workflows, restic, flux-image-reflector-controller, nuclei,...