GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kube-fluentd-operator, spqr, nri-nginx, runc, tekton-chains, petname, grafana-mimir, amazon-k8s-cni, nats-server-config-reloader, nova, nri-postgresql, pgtimetable, ratify, http-echo, kubo, sonobuoy, kots, local-static-provisioner, migrate,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kube-fluentd-operator, spqr, nri-nginx, runc, tekton-chains, petname, grafana-mimir, amazon-k8s-cni, nats-server-config-reloader, nova, nri-postgresql, pgtimetable, ratify, http-echo, kubo, sonobuoy, kots, local-static-provisioner, migrate,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kube-fluentd-operator, spqr, nri-nginx, runc, tekton-chains, petname, grafana-mimir, amazon-k8s-cni, nats-server-config-reloader, nova, nri-postgresql, pgtimetable, ratify, http-echo, kubo, sonobuoy, kots, local-static-provisioner, migrate,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kube-fluentd-operator, spqr, nri-nginx, runc, tekton-chains, grafana-mimir, amazon-k8s-cni, nova, nri-postgresql, pgtimetable, ratify, http-echo, kubo, sonobuoy, kots, local-static-provisioner, migrate, kube-arangodb, nats, mc, apko,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, runc, tekton-chains, pgtimetable, kots, nats, crossplane, aactl, aws-flb-kinesis, nuclei, kyverno, cilium-cli, goreleaser, juicefs, minio, k8ssandra-client, metrics-server, zot, coredns, opencost, thanos, sftpgo, slsa-verifier,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kube-fluentd-operator, spqr, runc, tekton-chains, grafana-mimir, kubo, kots, migrate, kube-arangodb, mc, apko, crossplane, aactl, aws-flb-kinesis, secrets-store-csi-driver, xeol, nuclei, jitsucom-bulker, kyverno, authservice, redpanda,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, runc, tekton-chains, pgtimetable, kots, nats, crossplane, aactl, aws-flb-kinesis, nuclei, kyverno, cilium-cli, goreleaser, juicefs, minio, k8ssandra-client, metrics-server, zot, coredns, opencost, thanos, sftpgo, slsa-verifier,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, runc, tekton-chains, pgtimetable, kots, nats, crossplane, aactl, aws-flb-kinesis, nuclei, kyverno, cilium-cli, goreleaser, juicefs, minio, k8ssandra-client, metrics-server, zot, coredns, opencost, thanos, sftpgo, slsa-verifier,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, runc, tekton-chains, pgtimetable, kots, nats, crossplane, aactl, aws-flb-kinesis, nuclei, kyverno, cilium-cli, goreleaser, juicefs, minio, k8ssandra-client, metrics-server, zot, coredns, opencost, thanos, sftpgo, slsa-verifier,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cert-manager-cmctl, chart-testing, pluto, k9s, nova, trivy-operator, trivy, tigera-operator, helm-operator, cluster-api-helm-controller, kots, kube-arangodb, kubescape, helm-mapkubeapis, istio, tw, linkerd2, teleport, chartmuseum, cerbos,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux-source-controller, cert-manager-cmctl, chart-testing, pluto, k9s, nova, trivy-operator, trivy, tigera-operator, helm-operator, cluster-api-helm-controller, kots, kube-arangodb, kubescape, helm-mapkubeapis, istio, tw, linkerd2, teleport, chartmuseum, cerbos,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: linkerd2-fips, chart-testing-fips, zot, nova, kubescape-server, k9s, cilium-cli, istio, k8ssandra-client, cert-manager-cmctl-fips, linkerd2, harbor, helm-operator-fips, kots, kube-arangodb, nova-fips, chartmuseum-fips, eksctl, chartmuseum, tw, helm-diff-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kubewatch, nri-nginx, mongodb-kubernetes-operator, terraform-provider-time, vertical-pod-autoscaler, rancher, nri-postgresql, cri-tools, kargo, sonobuoy, aactl, aws-flb-kinesis, govulncheck, policy-controller, pvc-autoresizer, tofu-controller...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: linkerd2-fips, chart-testing-fips, zot, nova, kubescape-server, k9s, cilium-cli, istio, k8ssandra-client, cert-manager-cmctl-fips, linkerd2, harbor, helm-operator-fips, kots, kube-arangodb, nova-fips, chartmuseum-fips, eksctl, chartmuseum, tw, helm-diff-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, kube-fluentd-operator, flux-source-controller, spqr, runc, terraform-provider-time, nvidia-container-toolkit, k8ssandra-operator, cluster-api-provider-vsphere, rancher, cri-tools, kafka-proxy, crossplane-provider-aws-ec2, kubo, kots,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, kube-fluentd-operator, flux-source-controller, spqr, runc, terraform-provider-time, nvidia-container-toolkit, k8ssandra-operator, cluster-api-provider-vsphere, rancher, cri-tools, kafka-proxy, crossplane-provider-aws-ec2, kubo, kots,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubewatch, nri-nginx, mongodb-kubernetes-operator, terraform-provider-time, vertical-pod-autoscaler, kubecolor, rancher, nri-postgresql, cri-tools, crossplane-provider-aws-ec2, kubo, nri-cassandra, sonobuoy, sealed-secrets, aws-flb-kinesis,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubewatch, nri-nginx, mongodb-kubernetes-operator, terraform-provider-time, vertical-pod-autoscaler, kubecolor, rancher, nri-postgresql, cri-tools, crossplane-provider-aws-ec2, kubo, nri-cassandra, sonobuoy, sealed-secrets, aws-flb-kinesis,...