GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: eksctl, k8sgpt, cluster-api, cert-manager-istio-csr, skaffold, headlamp, kubernetes-dashboard-api, vcluster, postgres-operator, falcoctl, argo-rollouts, envoy-gateway, docker-cli-buildx, cilium-cli, kubevela, jitsucom-bulker, k8sgpt-operator, hubble, cilium, kargo,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: eksctl, k8sgpt, cluster-api, cert-manager-istio-csr, skaffold, headlamp, kubernetes-dashboard-api, vcluster, postgres-operator, falcoctl, argo-rollouts, envoy-gateway, docker-cli-buildx, cilium-cli, kubevela, jitsucom-bulker, k8sgpt-operator, hubble, cilium, kargo,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: eksctl, skaffold, cloudnative-pg-fips, cert-manager-istio-csr, plugin-barman-cloud, plugin-barman-cloud-fips, trivy-operator-fips, falcoctl, argo-rollouts, docker-cli-buildx, trident-fips, jitsucom-bulker, gpu-operator, k8sgpt-operator, consul-k8s-fips, rke2-runtime,...

AZL-85637 CVE-2026-35469 affecting package docker-buildx for versions less than 0.14.0-13

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, kube-fluentd-operator, rancher-machine, splunk-otel-collector, kubernetes-csi-external-health-monitor, oauth2-proxy, cloud-provider-azure, crossplane-provider-azure-sql, otel-cli, nerdctl, opa-envoy, terraform-provider-azuread, weaviate, falcoctl,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, kube-fluentd-operator, rancher-machine, splunk-otel-collector, kubernetes-csi-external-health-monitor, oauth2-proxy, cloud-provider-azure, crossplane-provider-azure-sql, otel-cli, nerdctl, opa-envoy, terraform-provider-azuread, weaviate, falcoctl,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: goreleaser, extism, cloud-provider-azure, nerdctl, net-kourier, nvidia-nsight-compute-12.8, gitlab-pages, nats-server, aws-flb-firehose-fips, image-factory-fips, opa-fips-envoy, buildah, cloudbeat-fips, grafana, ipfs-cluster, flux-source-controller, gitlab-kas,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-external-health-monitor, plugin-barman-cloud-fips, cloud-provider-azure, nerdctl, crossplane-provider-aws-cloudformation-fips, net-kourier, kube-rbac-proxy-fips, nvidia-nsight-compute-12.8, docker-credential-gcr, gitlab-pages, dapr-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: goreleaser, extism, cloud-provider-azure, nerdctl, net-kourier, nvidia-nsight-compute-12.8, gitlab-pages, nats-server, aws-flb-firehose-fips, image-factory-fips, opa-fips-envoy, buildah, cloudbeat-fips, grafana, ipfs-cluster, flux-source-controller, gitlab-kas,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-external-health-monitor, pvc-autoresizer-fips, docker-credential-acr-env, extism, kubevirt-cdi-controller, cloud-provider-azure, litmus-chaos-operator-fips, plugin-barman-cloud-fips, thanos-operator, victoriametrics-cluster-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-external-health-monitor, pvc-autoresizer-fips, docker-credential-acr-env, extism, kubevirt-cdi-controller, cloud-provider-azure, litmus-chaos-operator-fips, plugin-barman-cloud-fips, thanos-operator, victoriametrics-cluster-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-external-health-monitor, pvc-autoresizer-fips, docker-credential-acr-env, extism, kubevirt-cdi-controller, cloud-provider-azure, litmus-chaos-operator-fips, plugin-barman-cloud-fips, thanos-operator, victoriametrics-cluster-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: eksctl, cert-manager-webhook-pdns, goreleaser, cert-manager-istio-csr, skaffold, kubernetes-csi-external-health-monitor, splunk-otel-collector, cloud-provider-azure, node-feature-discovery, crossplane-provider-azure-sql, otel-cli, weaviate, terraform-provider-google,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: skaffold, docker-compose, osv-scanner, conftest, kubescape, guac, podman, docker-cli-buildx, scorecard, trivy, kaniko, trivy-operator, buildah, zot...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: skaffold, docker-compose, osv-scanner, conftest, kubescape, guac, podman, docker-cli-buildx, scorecard, trivy, kaniko, trivy-operator, buildah, zot...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: skaffold, docker-compose, osv-scanner, conftest, kubescape, guac, podman, docker-cli-buildx, scorecard, trivy, kaniko, trivy-operator, buildah, zot...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: skaffold, docker-compose, osv-scanner, conftest, kubescape, guac, podman, docker-cli-buildx, scorecard, trivy, kaniko, trivy-operator, buildah, zot...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: skaffold, livekit-cli, trivy-operator-fips, guac, docker-cli-buildx, kaniko, zot, docker-compose-fips, skaffold-fips, kaniko-fips, kubescape, buildah-fips, buildah, cloudbeat-fips, conftest, scorecard, podman, trivy, docker-cli-buildx-fips, trivy-fips, conftest-fips,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: skaffold, livekit-cli, trivy-operator-fips, guac, docker-cli-buildx, kaniko, zot, docker-compose-fips, skaffold-fips, kaniko-fips, kubescape, buildah-fips, buildah, cloudbeat-fips, conftest, scorecard, podman, trivy, docker-cli-buildx-fips, trivy-fips, conftest-fips,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: skaffold, livekit-cli, trivy-operator-fips, guac, docker-cli-buildx, kaniko, zot, docker-compose-fips, skaffold-fips, kaniko-fips, kubescape, buildah-fips, buildah, cloudbeat-fips, conftest, scorecard, podman, trivy, docker-cli-buildx-fips, trivy-fips, conftest-fips,...