CVE-2026-94448 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-datasync-fips, json-exporter-fips, prometheus-fips, kepler-fips, chainloop-control-plane-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-cloudfront-fips, kubevirt-cdi-controller, perses,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, ksops-fips, nri-consul, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips, kyverno-policy-reporter-plugins-trivy, monstache, crossplane-provider-family-gcp-config-fips, gke-deploy, keda-http-add-on,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, nri-consul, grafana-influxdb-datasource-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, nri-consul, grafana-influxdb-datasource-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, grafana-influxdb-datasource-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips, kyverno-policy-reporter-plugins-triv...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, nri-consul, grafana-influxdb-datasource-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, nri-consul, grafana-influxdb-datasource-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, nri-consul, grafana-influxdb-datasource-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, nri-consul, grafana-influxdb-datasource-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips,...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k8sgpt, tigera-operator, flux-helm-controller, cert-manager-cmctl, helm-push, cluster-api-helm-controller, k9s, opentofu, kyverno-notation-aws, helm-mapkubeapis, kargo, rancher-helm, helm-set-status, xeol, kube-arangodb, maru, manifest-tool, gitness...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: k8sgpt, tigera-operator, flux-helm-controller, cert-manager-cmctl, helm-push, cluster-api-helm-controller, k9s, opentofu, kyverno-notation-aws, helm-mapkubeapis, kargo, rancher-helm, helm-set-status, xeol, kube-arangodb, maru, manifest-tool, gitness...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: k8sgpt, wolfictl, spegel, trivy, helm-mapkubeapis, chartmuseum, zarf, helm-set-status, xeol, neuvector-scanner, buildkitd, rancher, headlamp, scorecard, helm-operator, docker-compose, k9s, falco-no-driver, helm-push, skaffold, eksctl, kubescape, kubevela,...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, percona-xtradb-cluster-operator, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips, volsync,...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ds, percona-xtradb-cluster-operator, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, ksops-fips, crossplane-provider-aws-gamelift, jobset-fips, crossplane-provider-family-aws-fips, volsync,...

SUSE CVE-2026-7184

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users with the managesecureconnections permission to obtain remote cluster authentication tokens via a PATCH request to the...

GO-2026-6282 Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server...

PT-2026-82031

Mattermost doesn't sanitize the Remote Cluster API response on PATCH operations in github.com/mattermost/mattermost-server...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kuma, cert-manager, openfga, cluster-api, kubeflow-pipelines, metallb, cert-manager-istio-csr, spqr, cluster-api-aws-controller, argocd-image-updater, tekton-chains, kubernetes-csi-external-snapshotter, grafana, yunikorn-k8shim, cluster-api-provider-vsphere,...

CVE-2026-48162

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.sendtmpfile in framework/wazuh/core/cluster/dapi/dapi.py joins an attacker-controlled tmpfile value to WAZUHPATH without canonicalization or...

CVE-2026-48162

CVE-2026-48162 affects Wazuh (open-source threat detection platform) versions 4.0.0 through 4.14.6 and 5.0.0-beta3 . The vulnerability resides in DistributedAPI.send_tmp_file() in framework/wazuh/core/cluster/dapi/dapi.py, where an attacker-controlled tmp_file value is joined to WAZUH_PATH withou...