GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: kubo, goreleaser, kubernetes-csi-node-driver-registrar, cortex, sftpgo-plugin-auth, karpenter, crossplane, dbmate, coredns, sops, helm, kubernetes-csi-driver-nfs, zarf, knative-eventing, lvm-driver, litestream, scorecard, thanos, mattermost, aactl, teleport, telegraf...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: kubo, aws-otel-collector, nri-postgresql, goreleaser, kubernetes-csi-node-driver-registrar, cortex, sftpgo-plugin-auth, karpenter, crossplane, cert-exporter, dbmate, tw, coredns, sops, helm, kubernetes-csi-driver-nfs, zarf, ratify, grafana-operator, knative-eventing,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: kubo, aws-otel-collector, nri-postgresql, goreleaser, kubernetes-csi-node-driver-registrar, cortex, sftpgo-plugin-auth, karpenter, crossplane, cert-exporter, dbmate, coredns, sops, helm, kubernetes-csi-driver-nfs, zarf, ratify, grafana-operator, knative-eventing,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: kubo, aws-otel-collector, nri-postgresql, goreleaser, kubernetes-csi-node-driver-registrar, cortex, sftpgo-plugin-auth, karpenter, crossplane, cert-exporter, dbmate, tw, coredns, sops, helm, kubernetes-csi-driver-nfs, zarf, ratify, grafana-operator, knative-eventing,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-node-driver-registrar, cortex, karpenter, crossplane, coredns, helm, zarf, grafana-operator, knative-eventing, scorecard, thanos, mattermost, aactl, teleport, telegraf, redka, nats, cilium-certgen, flux, runc, timestamp-authority, kyverno,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-node-driver-registrar, cortex, karpenter, crossplane, coredns, helm, zarf, grafana-operator, knative-eventing, scorecard, thanos, mattermost, aactl, teleport, telegraf, redka, nats, cilium-certgen, flux, runc, timestamp-authority, kyverno,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-node-driver-registrar, cortex, karpenter, crossplane, coredns, helm, zarf, grafana-operator, knative-eventing, scorecard, thanos, mattermost, aactl, teleport, telegraf, redka, nats, cilium-certgen, flux, runc, timestamp-authority, kyverno,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: kubo, goreleaser, kubernetes-csi-node-driver-registrar, cortex, sftpgo-plugin-auth, karpenter, crossplane, dbmate, coredns, sops, helm, kubernetes-csi-driver-nfs, zarf, knative-eventing, lvm-driver, litestream, scorecard, thanos, mattermost, aactl, teleport, telegraf...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: goreleaser, kubernetes-csi-node-driver-registrar, cortex, karpenter, crossplane, coredns, helm, zarf, grafana-operator, knative-eventing, scorecard, thanos, mattermost, aactl, teleport, telegraf, redka, nats, cilium-certgen, flux, runc, timestamp-authority, kyverno,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, nova, trivy-operator, linkerd2, trivy, tw, envoy-gateway, zarf, k9s, chartmuseum, eksctl, kubescape, chart-testing, harbor, teleport, k8ssandra-client, kuma, istio, zot, cerbos, tigera-operator, cilium-cli, helm-set-status, kube-arangodb, headlamp...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, nova, trivy-operator, linkerd2, trivy, tw, envoy-gateway, zarf, k9s, chartmuseum, eksctl, kubescape, chart-testing, harbor, teleport, k8ssandra-client, kuma, istio, zot, cerbos, tigera-operator, cilium-cli, helm-set-status, kube-arangodb, headlamp...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k9s, cloudbeat, cloudbeat-fips, linkerd2-fips, zarf, headlamp-fips, helm-diff-fips, trivy-operator, kubescape-server, helm-operator-fips, envoy-gateway, pluto-fips, envoy-gateway-fips, chaos-mesh-fips, helm-exporter, kube-arangodb, chartmuseum-fips, consul-k8s-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, sbomqs, goreleaser, temporal, opensearch-k8s-operator, sbom-convert, sftpgo-plugin-auth, portieris, envoy-gateway, vault-k8s, nri-rabbitmq, spark-operator, wal-g, polaris, yunikorn-k8shim, nri-kafka, github-mcp-server, gitsign,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k9s, cloudbeat, cloudbeat-fips, linkerd2-fips, zarf, headlamp-fips, helm-diff-fips, trivy-operator, kubescape-server, helm-operator-fips, envoy-gateway, pluto-fips, envoy-gateway-fips, chaos-mesh-fips, helm-exporter, kube-arangodb, chartmuseum-fips, consul-k8s-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubo, ingress-nginx-controller, secrets-store-csi-driver-provider-aws, kubernetes-csi-node-driver-registrar, timoni, cortex, kubernetes-csi-external-resizer, crossplane-provider-aws-route53, sftpgo-plugin-auth, argocd-image-updater, coredns, sops, helm, syft,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kubo, ingress-nginx-controller, secrets-store-csi-driver-provider-aws, kubernetes-csi-node-driver-registrar, timoni, cortex, kubernetes-csi-external-resizer, crossplane-provider-aws-route53, sftpgo-plugin-auth, argocd-image-updater, coredns, sops, helm, syft,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, secrets-store-csi-driver-provider-aws, sbomqs, opensearch-k8s-operator, sbom-convert, sftpgo-plugin-auth, portieris, nri-rabbitmq, crossplane-provider-aws-cloudwatchlogs, spark-operator, wal-g, polaris, yunikorn-k8shim, nri-kafka, gitlab-runner,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, secrets-store-csi-driver-provider-aws, sbomqs, opensearch-k8s-operator, sbom-convert, sftpgo-plugin-auth, portieris, nri-rabbitmq, crossplane-provider-aws-cloudwatchlogs, spark-operator, wal-g, polaris, yunikorn-k8shim, nri-kafka, gitlab-runner,...