CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: argo-cd, cilium-fips, paranoia, argo-workflows-fips, azurefile-csi, cloudflared-fips, grafana, consul-fips, rancher, buildkite-agent-fips, helm-fips, spegel-fips, opentofu, net-kourier, timoni, rabbitmq-messaging-topology-operator-fips, keda-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: livekit-egress, argo-cd, cilium-fips, eks-node-monitoring-agent-fips, boring-registry, pguser, cinder-csi-plugin-fips, paranoia, prometheus-bind-exporter, argo-workflows-fips, s5cmd-fips, crossplane-provider-aws-servicediscovery, kubernetes-csi-external-resizer-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: argo-cd, pguser, apache-beam-python-3.11-sdk, gops-fips, longhorn-share-manager-fips, azurefile-csi, cert-manager-openshift-routes, chronyexporter, rancher-webhook, grafana, spegel-fips, pombump, prometheus-adapter, pgwatch, frp, nova, buildtools-fips,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, go-discover, gostatsd, terraform-provider-google, kube-fluentd-operator, kpt, aws-flb-firehose, aws-flb-cloudwatch, smokescreen, aws-flb-kinesis, php-fpmexporter, sonobuoy, newrelic-nri-statsd, src-fingerprint, hello-world-golang, kubeflow,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, kiam, sonobuoy-fips, aws-flb-cloudwatch-fips, aws-flb-firehose-fips, go-discover, prometheus-beat-exporter-fips, neuvector-dbgen-fips, prometheus-mongodb-exporter, hello-world-golang, kubeflow-fips, consul-fips, kpt, docker-credential-gcr-fips,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: falcoctl-fips, kiam, sonobuoy-fips, aws-flb-cloudwatch-fips, aws-flb-firehose-fips, go-discover, prometheus-beat-exporter-fips, neuvector-dbgen-fips, prometheus-mongodb-exporter, hello-world-golang, kubeflow-fips, consul-fips, kpt, docker-credential-gcr-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kargo, jaeger-operator, karma, kubecolor, kubernetes-dns-node-cache, nri-f5, apisix-ingress-controller, kubernetes-csi-driver-hostpath, kiali, policy-controller, sftpgo-plugin-kms, cert-manager-webhook-pdns, rancher-system-agent, snyk-cli, nri-consul, ko,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: argo-cd, cilium-fips, boring-registry, pguser, apache-beam-python-3.11-sdk, paranoia, argo-workflows-fips, prometheus-redis-exporter, smarter-device-manager, chart-testing-fips, azurefile-csi, sbom-convert, grafana, kubescape-operator-fips,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: karma, kubecolor, dataplaneapi, nri-f5, dex, aws-signer-notation-plugin, kubernetes-csi-driver-hostpath, kiali, policy-controller, sftpgo-plugin-kms, cert-manager-webhook-pdns, distribution, ko, helm-operator, hcloud, src-fingerprint, kubernetes-dashboard-api,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: boring-registry, paranoia, prometheus-bind-exporter, argo-workflows-fips, prometheus-redis-exporter, smarter-device-manager, certificate-transparency-fips, helm-fips, wave-fips, gcsfuse, xcaddy, secrets-store-csi-driver-provider-aws, yq, memcached-exporter,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: boring-registry, prometheus-bind-exporter, argo-workflows-fips, prometheus-redis-exporter, smarter-device-manager, terraform-provider-sendgrid-fips, certificate-transparency-fips, gcsfuse, secrets-store-csi-driver-provider-aws, memcached-exporter, timoni,...

Fluent Bit 缓冲区错误漏洞

Fluent Bit is an open source log processing and analysis system written in C. A buffer overflow vulnerability exists in Fluent Bit version 1.6.4, which stems from the fact that flbgzipcompress in flbgzip.c has an out-of-bounds write operation because it fails to use the correct calculation of the...