GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, cilium-cli, eksctl, helm-operator, helm-push, flux-source-controller, zot, kots, kubevela, up, zarf, chartmuseum, kubescape, k9s, k8sgpt, trivy...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, cilium-cli, eksctl, helm-operator, helm-push, flux-source-controller, zot, kots, kubevela, up, zarf, chartmuseum, kubescape, k9s, k8sgpt, trivy...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape-server, kots, argo-cd-fips, helm-exporter-fips, rancher-fleet-fips, trivy, conftest, crossplane, kyverno-notation-aws-fips, oras-fips, k9s-fips, ocm-cli-fips, helm-exporter, helm-mapkubeapis, oras, maru, chaos-mesh-fips, headlamp-fips,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-docs, trivy, chart-testing, kubescape, helm-operator, zot, flux-helm-controller, k9s, kots, rancher-helm, cluster-api-helm-controller, tw, zarf, chartmuseum, flux-source-controller, helm-push, k8ssandra-client, flux, pluto, cert-manager-cmctl, cilium-cli, eksctl...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k8sgpt, kots, up, kubevela, helm-push, trivy, kubescape, helm-operator, cilium-cli, zot, flux-helm-controller, k9s, zarf, eksctl, chartmuseum...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k8sgpt, kots, up, kubevela, helm-push, trivy, kubescape, helm-operator, cilium-cli, zot, flux-helm-controller, k9s, zarf, eksctl, chartmuseum...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: helm-docs, trivy, chart-testing, kubescape, helm-operator, zot, flux-helm-controller, k9s, kots, rancher-helm, cluster-api-helm-controller, tw, zarf, chartmuseum, flux-source-controller, helm-push, k8ssandra-client, flux, pluto, cert-manager-cmctl, cilium-cli, eksctl...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: helm-docs, envoy-gateway, k8sgpt, helm-set-status, trivy-operator, trivy, chart-testing, kubescape, helm-operator, zot, headlamp, flux-helm-controller, istio, k9s, cerbos, kots, linkerd2, cluster-api-helm-controller, helm-mapkubeapis, zarf, chartmuseum,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: ctop, nerdctl, envoy-gateway, k8sgpt, manifest-tool, helm-set-status, trivy-operator, xeol, trivy, osv-scanner, skaffold, grype, kubescape, helm-operator, k3s, headlamp, flux-helm-controller, newrelic-infrastructure-agent, syft, k9s, spegel, zot, kubevela, opa, kots,...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: ctop, nerdctl, envoy-gateway, k8sgpt, xeol, trivy, osv-scanner, skaffold, grype, kubescape, helm-operator, k3s, syft, docker, flux-helm-controller, newrelic-infrastructure-agent, zot, spegel, kubevela, opa, kots, linkerd2, neuvector-scanner,...

GO-2026-5338 vulnerabilities

Vulnerabilities for packages: ctop, envoy-gateway, k8sgpt, manifest-tool, helm-set-status, trivy-operator, scorecard, trivy, rancher, xeol, skaffold, grype, kubescape, helm-operator, k3s, headlamp, docker, newrelic-infrastructure-agent, syft, k9s, spegel, zot, kubevela, kots, linkerd2,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-docs, envoy-gateway, k8sgpt, trivy, chart-testing, helm-operator, zot, flux-helm-controller, istio, k9s, cerbos, kots, linkerd2, rancher-helm, cluster-api-helm-controller, tw, zarf, chartmuseum, flux-source-controller, helm-push, k8ssandra-client, pluto,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: harbor-registry, k8sgpt, nri-f5, trivy, terraform-provider-azapi, k3s, headlamp, polaris, prometheus, nri-haproxy, nri-consul, src, render-template, rclone, steampipe, tflint, aws-privateca-issuer, docker-machine-driver-harvester, cni-plugins, undock, nri-memcached,...

CLEANSTART-2026-XI11910 Security fixes in chartmuseum-fips 0.15.0-r4

Package chartmuseum-fips version 0.15.0-r4 fixes 16 vulnerabilities: ghsa-557j-xg8c-q2mm, ghsa-mh63-6h87-95cp, ghsa-r53h-jv2g-vpx6, ghsa-2c4m-59x9-fr2g, ghsa-3vp4-m3rf-835h...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: syft, kubescape-server, kots, helm-exporter-fips, helm-fips, trivy, crossplane, buildkitd, buildkitd-fips, k9s-fips, packer, scorecard, docker-cli-buildx-fips, helm-exporter, skaffold-fips, harvester-fips, cg, k3s, docker-cli-buildx, helm-mapkubeapis, syft-fips,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: syft, kubescape-server, kots, helm-exporter-fips, helm-fips, trivy, crossplane, buildkitd, buildkitd-fips, k9s-fips, packer, scorecard, docker-cli-buildx-fips, helm-exporter, skaffold-fips, harvester-fips, cg, k3s, docker-cli-buildx, helm-mapkubeapis, syft-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: syft, kubescape-server, kots, helm-exporter-fips, helm-fips, trivy, crossplane, buildkitd, buildkitd-fips, k9s-fips, packer, scorecard, docker-cli-buildx-fips, helm-exporter, skaffold-fips, harvester-fips, cg, k3s, docker-cli-buildx, helm-mapkubeapis, syft-fips,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller-fips, skopeo, crossplane-provider-aws-emr, podman, cert-manager-google-cas-issuer, spark-operator-fips, crossplane-provider-aws-sns, aws-efs-csi-driver, crossplane-provider-aws-elbv2, crossplane-provider-aws-memorydb-fips, istio-fips,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-docs, envoy-gateway, helm-set-status, trivy-operator, trivy, chart-testing, kubescape, helm-operator, zot, headlamp, istio, k9s, cerbos, kots, linkerd2, cluster-api-helm-controller, tw, helm-mapkubeapis, tigera-operator, zarf, consul-k8s, chartmuseum,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: helm-docs, envoy-gateway, helm-set-status, trivy-operator, trivy, chart-testing, kubescape, helm-operator, zot, headlamp, istio, k9s, cerbos, kots, linkerd2, cluster-api-helm-controller, tw, helm-mapkubeapis, tigera-operator, zarf, consul-k8s, chartmuseum,...