CLEANSTART-2026-FH32149 Moby is an open source container framework

Security vulnerability affects the docker-cli-buildx package. Moby is an open source container framework...

CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...

CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: nerdctl, neuvector-scanner, eksctl, tigera-operator, rancher-helm, kube-arangodb, syft, docker-compose, buildkitd, trivy-operator, kubescape-operator, manifest-tool, kubevela, scorecard, zarf, skaffold, docker, spegel, headlamp, rancher, zot, kubescape,...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, podman, trivy, kaniko, trivy-operator, conftest, osv-scanner, scorecard, skaffold, guac, zot, kubescape, buildah...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, podman, trivy, kaniko, trivy-operator, conftest, osv-scanner, scorecard, skaffold, guac, zot, kubescape, buildah...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opa-envoy, crossplane-provider-aws-rds, db-operator, delve, argocd-image-updater, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, src-fingerprint,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: minio, nfpm, crossplane-provider-aws-rds, argocd-image-updater, terraform-provider-tls, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tkn, gh, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, gitsign, zarf, skaffold, vexctl, zot, kubescape, teleport, goreleaser, spire-server, policy-controller, ko, neuvector-sigstore-interface, docker-cli-buildx, ratify, sigstore-scaffolding...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tkn, gh, slsa-verifier, flux-source-controller, witness, falcoctl, tekton-chains, cosign, aactl, buildkitd, gitsign, trivy-operator, zarf, skaffold, vexctl, docker, kyverno, zot, kubescape, teleport, goreleaser, crossplane, spire-server, policy-controller, ko,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, portieris, glow, wgcf, amazon-cloudwatch-agent-operator, clickhouse-operator, nri-haproxy, aws-eks-pod-identity-agent, dex, nginx-prometheus-exporter, opentofu, kpt, dgraph, nri-mysql, harbor-cli, harbor-registry, nri-memcached, helm-operator,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: nerdctl, cilium-cli, containerd, caddy, kube-fluentd-operator, undock, helm, prometheus, prometheus-operator, buildah, kots, buildkitd, flux, melange, istio, pulumi, src, argo-cd, grafana-operator, scorecard, zarf, kine, k8s-device-plugin, docker, vexctl, kyverno,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.4, istio, loki, aactl, cloud-provider-aws, frankenphp-8.5, flux, snyk-cli, commercial-grafana, zot, tekton-pipelines-fips, prometheus-operator, omnictl-multiarch, mattermost, argo-workflows-fips, commercial-kyverno, podman-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: minio, nfpm, argocd-image-updater, terraform-provider-tls, ksops, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher, crossplane-provider-azure-managedidentity, apko, policy-controller, mattermost, steampipe, docker-cli-buildx, k9s,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: minio, nerdctl, cilium-cli, containerd, helm, cert-manager, prometheus, prometheus-operator, buildah, aactl, kots, flux, istio, opentelemetry-collector, external-secrets-operator, kine, kyverno, rancher, kubernetes, zot, gitlab-kas, external-dns, cilium, telegraf,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: tigera-operator, kaniko-fips, jfrog-cli, grype-db, tigera-operator-fips, helmfile, consul-k8s, chainctl-fips, helm-exporter, dagger, buildkitd-fips, zot, tekton-pipelines-fips, kube-mgmt-fips, spegel, docker, crossplane-fips, kubescape-operator, google-osconfig-agent...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: tigera-operator, kaniko-fips, jfrog-cli, grype-db, tigera-operator-fips, helmfile, consul-k8s, chainctl-fips, helm-exporter, dagger, buildkitd-fips, zot, kube-mgmt-fips, spegel, docker, crossplane-fips, kubescape-operator, google-osconfig-agent, chainctl,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: cilium-cli, argocd-image-updater, eksctl, k8sgpt-operator, helm, falcoctl, dynamic-localpv-provisioner, datadog-agent, kube-arangodb, argo-rollouts, kwok, velero, kots, kubernetes-dashboard-api, percona-server-mongodb-operator, trivy-operator, istio, vcluster, argo-c...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: opa-envoy, db-operator, delve, argocd-image-updater, terraform-provider-tls, terraform-provider-sendgrid, k8sgpt-operator, k8ssandra-operator, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, net-kourier, argo-rollouts, kyverno-policy-reporter-kyverno-plugin,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: tigera-operator, backup-restore-operator-fips, crane-fips, newrelic-fluent-bit-output-fips, jfrog-cli, aactl, tigera-operator-fips, cosign, licenseclassifier, nsc-fips, chezmoi, prometheus-podman-exporter-fips, kube-mgmt-fips, mattermost, rook-fips, falcoctl-fips,...