GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k8ssandra-client, chartmuseum, rancher-fleet, helm-docs, headlamp, envoy-gateway, flux, k9s, zot, pluto, flux-source-controller, kubescape, cerbos, kube-arangodb, istio, helm-set-status, nova, zarf, tigera-operator, kots, trivy-operator, eksctl, harbor, kuma,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, chartmuseum, rancher-fleet, helm-docs, headlamp, envoy-gateway, flux, k9s, zot, pluto, flux-source-controller, kubescape, cerbos, kube-arangodb, istio, helm-set-status, nova, zarf, tigera-operator, kots, trivy-operator, eksctl, harbor, kuma,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: teleport, flux, helm-operator-fips, headlamp-fips, envoy-gateway-fips, cilium-cli, flux-source-controller-fips, helm-exporter, cluster-api-helm-controller-fips, k9s-fips, kubescape, kuma, trivy, cerbos, zarf-fips, rancher-fleet-fips, flux-fips, trivy-operator-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, gostatsd, git-credential-oauth, kaf, spire-controller-manager, rclone, ctop, nri-f5, postgres-operator, harbor-scanner-trivy, gatekeeper, cluster-api-ipam-provider-in-cluster, gitaly, telegraf, kafka-proxy, apache-exporter, cert-exporter,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: teleport, flux, helm-operator-fips, headlamp-fips, envoy-gateway-fips, cilium-cli, flux-source-controller-fips, helm-exporter, cluster-api-helm-controller-fips, k9s-fips, kubescape, kuma, trivy, cerbos, zarf-fips, rancher-fleet-fips, flux-fips, trivy-operator-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, kaf, spire-controller-manager, ctop, postgres-operator, gatekeeper, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kms, gitaly, telegraf, kserve, octo-sts, crossplane-provider-aws-kinesis, kafka-proxy, apache-exporter,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, kaf, spire-controller-manager, ctop, postgres-operator, gatekeeper, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kms, gitaly, telegraf, kserve, octo-sts, crossplane-provider-aws-kinesis, kafka-proxy, apache-exporter,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, podinfo, buildah, mattermost, kaf, kyverno-policy-reporter-ui, spire-controller-manager, kubo, crossplane-provider-family-aws, prometheus-blackbox-exporter, mcp-grafana, cloud-sql-proxy, crossplane-provider-aws-cloudformation,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, kaf, spire-controller-manager, ctop, postgres-operator, gatekeeper, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kms, gitaly, telegraf, kserve, octo-sts, crossplane-provider-aws-kinesis, kafka-proxy, xcaddy, apache-exporter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, podinfo, buildah, mattermost, kaf, kyverno-policy-reporter-ui, spire-controller-manager, kubo, crossplane-provider-family-aws, prometheus-blackbox-exporter, mcp-grafana, cloud-sql-proxy, crossplane-provider-aws-cloudformation,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, spicedb, helm-operator-fips, trivy, containerd-fips, livekit-cli, secrets-store-csi-driver-provider-gcp-fips, gitlab-operator-fips, prometheus-mongodb-exporter-fips, argo-cd-fips, cass-operator-fips, prometheus-alertmanager,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: grafana-alloy, rclone, crossplane-provider-family-aws, xeol, crossplane-provider-aws-cloudformation, buildkitd, cerbos, crossplane-provider-aws-kms, argocd-image-updater, gitaly, flux-notification-controller, cluster-api, gomplate, crossplane-provider-aws-cloudfront,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: grafana-alloy, rclone, crossplane-provider-family-aws, xeol, crossplane-provider-aws-cloudformation, buildkitd, cerbos, crossplane-provider-aws-kms, argocd-image-updater, gitaly, flux-notification-controller, cluster-api, gomplate, crossplane-provider-aws-cloudfront,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, flux, actions-runner-controller-fips, crossplane-provider-aws-kinesis, argo-workflows-fips, boring-registry-fips, trivy, nfpm, terraform-provider-azurerm, livekit-cli, crossplane-provider-aws-elasticache-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: argocd-image-updater, flux, actions-runner-controller-fips, crossplane-provider-aws-kinesis, argo-workflows-fips, boring-registry-fips, trivy, nfpm, terraform-provider-azurerm, livekit-cli, crossplane-provider-aws-elasticache-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, helm-operator-fips, crane, kube-bench, velero-plugin-for-microsoft-azure, gitlab-kas, nfpm, s5cmd-fips, kepler, yace-fips, rancher-security-scan, containerd-fips, secrets-store-csi-driver-provider-gcp-fips, postgres-operator-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, helm-operator-fips, crane, kube-bench, gitlab-kas, nfpm, s5cmd-fips, kepler, yace-fips, secrets-store-csi-driver-provider-gcp-fips, postgres-operator-fips, longhorn-share-manager, aws-application-networking-k8s-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller-fips, helm-operator-fips, crane, kube-bench, velero-plugin-for-microsoft-azure, gitlab-kas, nfpm, s5cmd-fips, kepler, yace-fips, rancher-security-scan, containerd-fips, secrets-store-csi-driver-provider-gcp-fips, postgres-operator-fips,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: grafana-alloy, sqlexporter, dapr, jitsucom-bulker, splunk-otel-collector, argo-events, opentelemetry-collector-contrib, cluster-api-aws-controller, bento, telegraf...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: grafana-alloy, sqlexporter, dapr, jitsucom-bulker, splunk-otel-collector, argo-events, opentelemetry-collector-contrib, cluster-api-aws-controller, bento, telegraf...