GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: regclient, crossplane-provider-aws-kinesis, rekor, kyverno-policy-reporter-ui, cloud-provider-gcp-cloud-controller-manager, gitness, dagdotdev, bank-vaults, actions-runner-controller, stakater-reloader, sftpgo-plugin-eventsearch, slsa-verifier,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-serving, k9s-fips, argo-workflows, external-secrets-operator-fips, kubevela-fips, flux-source-controller, frankenphp-8.3, trivy-operator-fips, elastic-agent-fips, kuma, skaffold-fips, prometheus-mongodb-exporter, cert-manager, rancher-agent, drone, cloudbeat,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: containerd, nfpm, kaf, pulumi-language-yaml, dagger, skaffold, flux-image-automation-controller, glab, witness, docker, gatus, external-dns, argo-events, openbao, falcoctl, act, slsa-verifier, crossplane-provider-azure-storage, neuvector-sigstore-interface, tkn,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: telegraf, kots, fscrypt, nerdctl, kubernetes-dashboard, containerd, kyverno, spire-server, argocd-image-updater, kaf, knative-serving, helm, mattermost, flux-image-automation-controller, skaffold, kubernetes, opentelemetry-collector, aactl, trivy, cilium, cert-manage...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, traefik, containerd, nfpm, kaf, crossplane-provider-aws-cloudformation, pulumi-language-yaml, dagger, skaffold, flux-image-automation-controller, glab, witness, docker, gatus, external-dns, argo-events, openbao, falcoctl, act,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: telegraf, kots, fscrypt, nerdctl, kubernetes-dashboard, containerd, kyverno, spire-server, kaf, knative-serving, helm, mattermost, podman, kubernetes, opentelemetry-collector, aactl, cilium, cert-manager, external-dns, minio, vitess, loki, buildah, prometheus,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: containerd, nfpm, kaf, pulumi-language-yaml, dagger, skaffold, flux-image-automation-controller, witness, external-dns, argo-events, openbao, act, rancher-agent, teleport, gptscript, pulumi, k3s, docker-cli-buildx, step-kms-plugin, trivy-operator, step, telegraf,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: telegraf, kots, fscrypt, nerdctl, kubernetes-dashboard, containerd, docker-machine-driver-harvester, kyverno, spire-server, argocd-image-updater, kaf, knative-serving, helm, mattermost, flux-image-automation-controller, skaffold, kubernetes, opentelemetry-collector,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana-mimir, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-fips, prometheus-podman-exporter-fips, jobset-fips, blob-csi-fips, tfsec, crossplane-provider-gitlab, kubevela-fips, image-factory, trivy-operator-fips, bank-vaults,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: k9s-fips, grafana-mimir, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-fips, prometheus-podman-exporter-fips, jobset-fips, blob-csi-fips, tfsec, crossplane-provider-gitlab, kubevela-fips, image-factory, trivy-operator-fips, bank-vaults,...

CLEANSTART-2026-MO16862 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-pjcq-xvwq-hhpj applied in versions: 1.20.2-r0

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9. A patched version of the package is available...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, crossplane-provider-aws-kinesis, grafana-operator, trino, vault-k8s, traefik, containerd, crossplane-provider-aws-cloudformation, cass-operator, cluster-api, argo-events, aws-node-termination-handler, kube-state-metrics,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, crossplane-provider-aws-kinesis, grafana-operator, trino, vault-k8s, traefik, containerd, crossplane-provider-aws-cloudformation, cass-operator, cluster-api, argo-events, aws-node-termination-handler, kube-state-metrics,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, sigstore-scaffolding, jitsucom-bulker, crossplane-provider-aws-kinesis, grafana-operator, golangci-lint, rekor, trino, traefik, vault-k8s, containerd, crossplane-provider-aws-cloudformation, cass-operator, nri-haproxy, newrelic-nri-statsd,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, sigstore-scaffolding, jitsucom-bulker, crossplane-provider-aws-kinesis, grafana-operator, golangci-lint, rekor, trino, traefik, vault-k8s, containerd, crossplane-provider-aws-cloudformation, cass-operator, nri-haproxy, newrelic-nri-statsd,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, sigstore-scaffolding, jitsucom-bulker, crossplane-provider-aws-kinesis, grafana-operator, golangci-lint, rekor, trino, traefik, vault-k8s, containerd, crossplane-provider-aws-cloudformation, cass-operator, nri-haproxy, newrelic-nri-statsd,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, sigstore-scaffolding, jitsucom-bulker, crossplane-provider-aws-kinesis, grafana-operator, golangci-lint, rekor, trino, traefik, vault-k8s, containerd, crossplane-provider-aws-cloudformation, cass-operator, nri-haproxy, newrelic-nri-statsd,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-scheduler-fips, kyverno-policy-reporter-fips, minio-operator-fips, crossplane-provider-aws-ecr-fips, kubevela-fips, trivy-operator-fips, mountpoint-s3-csi-driver, fairwinds-gemini-fips, crossplane-provider-aws-emrserverless-fips,...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-scheduler-fips, kyverno-policy-reporter-fips, minio-operator-fips, crossplane-provider-aws-ecr-fips, kubevela-fips, trivy-operator-fips, mountpoint-s3-csi-driver, fairwinds-gemini-fips, crossplane-provider-aws-emrserverless-fips,...