GO-2026-5023 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, vault-fips, frankenphp-8.3, mattermost, frankenphp-8.4, grafana-fips, rancher, osv-scanner, zarf-fips, minio-fips, reports-server, spire-server, commercial-expanso-edge, kube-state-metrics,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, packer, vault-fips, frankenphp-8.3, mattermost, frankenphp-8.4, grafana-fips, chainloop-cli-fips, osv-scanner, zarf-fips, minio-fips, reports-server, spire-server, commercial-expanso-edge,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, vault-fips, frankenphp-8.3, mattermost, docker-machine-driver-harvester, frankenphp-8.4, grafana-fips, rancher, osv-scanner, zarf-fips, minio-fips, reports-server, spire-server,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, cert-manager-fips, datadog-agent-fips, aws-flb-firehose, commercial-grafana, kaf, mattermost, grafana-fips, ingress-nginx-controller-fips, kubernetes-csi-node-driver-registrar, cloud-provider-azure-fips, spire-server, commercial-expanso-edge,...

GO-2026-5954 vulnerabilities

Vulnerabilities for packages: kube-vip, cilium-cli...

GO-2024-3074 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble, cilium-cli...

GO-2024-3071 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble, cilium-cli...

GO-2026-4736 vulnerabilities

Vulnerabilities for packages: kube-vip, cilium-cli...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, grafana-agent-operator, dex, sigstore-scaffolding, kaniko, opa, melange, cert-manager-cmctl, falcosidekick, grpc-health-probe, spire-server, tempo, tflint, kargo, smarter-device-manager, spicedb, gomplate, zot, dbmate, ksops, restic, cloudnative-pg,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: trivy, helm-push, zot, chartmuseum, k9s, helm-operator, kots, kubevela, cilium-cli, eksctl, kubescape, up, k8sgpt, flux-helm-controller, zarf, flux-source-controller...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-operator, cert-manager-cmctl, helm-docs, tw, helm-push, k8ssandra-client, zot, eksctl, kubescape, zarf, k9s, flux-helm-controller, flux-source-controller, flux, trivy, chart-testing, chartmuseum, kots, pluto, cilium-cli, rancher-helm...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: trivy, helm-push, zot, chartmuseum, k9s, helm-operator, kots, kubevela, cilium-cli, eksctl, kubescape, up, k8sgpt, flux-helm-controller, zarf, flux-source-controller...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: flux, helm-push, kots, kuma, cert-manager-cmctl, rancher-fleet, cilium-cli, zarf, flux-source-controller...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, helm, kaniko, melange, gitness, helm-push, zot, grype, buildkitd, eksctl, kubescape, k8sgpt, k3d, skaffold, flux-helm-controller, flux-source-controller, ctop, trivy, kots, kubevela, up, newrelic-infrastructure-agent, cilium-cli...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, envoy-gateway, helm-operator, cert-manager-cmctl, kargo, istio, helm-docs, tw, helm-push, k8ssandra-client, zot, eksctl, rancher-fleet, k8sgpt, zarf, k9s, linkerd2, flux-helm-controller, flux-source-controller, trivy, chart-testing,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: buf, wolfictl, kaniko, melange, spire-server, cadvisor, kargo, zot, grype, buildkitd, kubescape, tkn, aactl, ko, docker-compose, conftest, ctop, trivy, dagger, crossplane, up, cilium-cli, syft...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: act, helm, cosign, wolfictl, crossplane-provider-aws-firehose, splunk-otel-collector, argo-cd, kargo, gitea, docker-machine-driver-linode, terraform-provider-acme, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, grafana-rollout-operator, harbor-registry, envconsul, cis-operator, kind, rclone, docker-cli-buildx, amazon-cloudwatch-agent-operator, buildkitd, src, terraform-mcp-server, fzf, eksctl, containerd, undock, azure-service-operator, nodetaint, aactl,...

OPENSUSE-SU-2026:21574-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed bsc1267794. Other...

SUSE CVE-2026-49445

Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints,...