CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: k8sgpt, kgateway-fips, chainctl, teleport, trivy-operator-fips, cg, tw, kubescape-operator, scorecard, helm-fips, tigera-operator, harvester, kube-arangodb, steampipe, trivy-operator, amazon-ecs-agent, docker-cli-buildx, helm, trivy, syft, packer, helm-operator-fips,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: k8sgpt, kgateway-fips, chainctl, teleport, trivy-operator-fips, cg, tw, kubescape-operator, scorecard, helm-fips, tigera-operator, harvester, kube-arangodb, steampipe, trivy-operator, amazon-ecs-agent, docker-cli-buildx, helm, trivy, syft, packer, helm-operator-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k8sgpt, kgateway-fips, chainctl, teleport, trivy-operator-fips, cg, tw, kubescape-operator, scorecard, helm-fips, tigera-operator, harvester, kube-arangodb, steampipe, trivy-operator, amazon-ecs-agent, docker-cli-buildx, helm, trivy, syft, packer, helm-operator-fips,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kubevirt-cdi-uploadserver, k8ssandra-client, argo-rollouts, crossplane-provider-aws-lambda-fips, db-operator, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-cloudsearch-fip...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux, headlamp, rancher-fleet, helm-push, helm-operator, cerbos, cluster-api-helm-controller, kube-arangodb, helm-set-status, consul-k8s, chart-testing, k9s, pluto, teleport, zarf, kubescape, istio, flux-source-controller, envoy-gateway, helm-docs, trivy-operator, tw...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: flux, headlamp, rancher-fleet, helm-push, helm-operator, cerbos, cluster-api-helm-controller, kube-arangodb, helm-set-status, consul-k8s, chart-testing, k9s, pluto, teleport, zarf, kubescape, istio, flux-source-controller, envoy-gateway, helm-docs, trivy-operator, tw...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: envoy-gateway, cilium-cli, kube-arangodb-fips, chart-testing-fips, chaos-mesh-fips, cluster-api-helm-controller-fips, gitlab-operator, headlamp-fips, helm-push, k8ssandra-client, kots, kuma, cluster-api-helm-controller, cerbos, teleport, flux-source-controller-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kubevirt-cdi-uploadserver, gomplate-fips, chezmoi, k8ssandra-client, azuredisk-csi, timoni, keda-fips, falcoctl, argo-workflows, amazon-ssm-agent, azuredisk-csi-fips, backup-restore-operator-fips, kube-arangodb, oras, amazon-ecs-agent,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kubevirt-cdi-uploadserver, gomplate-fips, chezmoi, k8ssandra-client, azuredisk-csi, timoni, keda-fips, falcoctl, argo-workflows, amazon-ssm-agent, azuredisk-csi-fips, backup-restore-operator-fips, kube-arangodb, oras, amazon-ecs-agent,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, external-secrets-operator, kubevirt-cdi-uploadserver, gomplate-fips, k8ssandra-client, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, opentelemetry-operator, timoni, keda-fips, falcoct...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, external-secrets-operator, kubevirt-cdi-uploadserver, gomplate-fips, k8ssandra-client, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, opentelemetry-operator, timoni, keda-fips, falcoct...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager-fips, external-secrets-operator, kubevirt-cdi-uploadserver, gomplate-fips, chezmoi, k8ssandra-client, nri-postgresql, argo-rollouts, azuredisk-csi, crossplane-provider-aws-lambda-fips, db-operator, longhorn-cli-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubevirt-cdi-uploadserver, k8ssandra-client, nri-postgresql, minify, timoni, kubevirt-cdi-controller-fips, yunikorn-web, protoc-gen-go, otel-cli, grafana-pyroscope, terraform-provider-kubernetes-fips, kubernetes-ingress-defaultbackend-fips, crossplane-provider-aws-ec...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, gomplate, gitlab-runner, grafana-operator, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, gogatekeeper, vault-env, polaris, flux-source-controller, sonobuoy, regclient, coredns,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, gomplate, gitlab-runner, cni-plugins, grafana-operator, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, gogatekeeper, mage, vault-env, polaris, flux-source-controller, sonobuoy,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, gomplate, gitlab-runner, cni-plugins, grafana-operator, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, gogatekeeper, mage, vault-env, polaris, flux-source-controller, sonobuoy,...

CLEANSTART-2026-CT39828 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-TS42581 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-SY95837 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: policy-controller, ghaudit, conjur-cli, custom-pod-autoscaler, docker-cli-buildx, docker-credential-acr-env, dockerize, terraform-provider-random, dive, ko, kubeflow, kubelet-csr-approver, kubernetes-event-exporter, kubescape-operator, step-kms-plugin, fscrypt,...