GO-2024-3074 vulnerabilities

Vulnerabilities for packages: cilium-cli, hubble, hubble-ui...

GO-2026-5954 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip...

GO-2026-4736 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip...

GO-2024-3071 vulnerabilities

Vulnerabilities for packages: cilium-cli, hubble, hubble-ui...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, cilium-cli, kubevela, kots, k8sgpt, helm-operator, k9s, eksctl, kubescape, zot, helm-push, up, flux-source-controller, flux-helm-controller, zarf...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, cluster-api-helm-controller, tw, helm-operator, eksctl, flux-source-controller, cert-manager-cmctl, cilium-cli, k9s, kubescape, zot, helm-push, rancher-helm, flux, flux-helm-controller, k8ssandra-client, zarf, chart-testing, kots, helm-docs, pluto...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, temporal, conftest, dagger, vcluster, opentelemetry-collector-contrib, kwok, terraform-provider-google, ksops, spicedb, tflint, kargo, restic, fulcio, kubernetes-csi-external-provisioner, k3s, certificate-transparency, grpc-health-probe, rqlite,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, cilium-cli, kubevela, kots, k8sgpt, helm-operator, k9s, eksctl, kubescape, zot, helm-push, up, flux-source-controller, flux-helm-controller, zarf...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cilium-cli, kots, zarf, rancher-fleet, helm-push, flux, flux-source-controller, kuma, cert-manager-cmctl...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: trivy, fuse-overlayfs-snapshotter, up, skaffold, eksctl, flux-source-controller, buildkitd, melange, ctop, cilium-cli, k8sgpt, gitness, kubescape, grype, zot, k3d, helm-push, flux-helm-controller, kaniko, newrelic-infrastructure-agent, kubevela, kots, helm...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, envoy-gateway, cluster-api-helm-controller, tw, rancher-fleet, kargo, helm-operator, eksctl, istio, flux-source-controller, cert-manager-cmctl, cilium-cli, cerbos, k8sgpt, k9s, zot, helm-push, rancher-helm, flux-helm-controller, k8ssandra-client,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, conftest, dagger, buf, crossplane, up, kargo, wolfictl, ko, buildkitd, melange, ctop, cilium-cli, kubescape, grype, cadvisor, zot, tkn, kaniko, aactl, docker-compose, syft...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, terraform-provider-acme, cilium, nuclei, kargo, crossplane-provider-aws-rds, crossplane-provider-keycloak, fulcio, skaffold, crossplane-provider-aws-cloudformation, gomplate,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, kube-logging-operator, helm-set-status, cloud-provider-vsphere, cluster-api-helm-controller, kubernetes-dashboard, gptscript, kuberlr, nuclei, aws-otel-collector, fulcio, kpt, undock, helm-operator, azure-service-operator, polaris,...

OPENSUSE-SU-2026:21574-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed bsc1267794. Other...

SUSE CVE-2026-49445

Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints,...

SUSE CVE-2026-53935

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

CLEANSTART-2026-YO06374 Security fixes in cilium 1.18.9-r0

Package cilium version 1.18.9-r0 fixes 22 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-27143, CVE-2026-27144, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-YQ65927 Security fixes in cilium 1.19.3-r0

Package cilium version 1.19.3-r0 fixes 22 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-27143, CVE-2026-27144, CVE-2026-27142, CVE-2026-27139...

openSUSE 16 Security Update : alloy (openSUSE-SU-2026:21442-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21442-1 advisory. This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger...