CVE-2026-77801 vulnerabilities

Vulnerabilities for packages: gitlab-kas, gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-6MXV-C89J-2494 vulnerabilities

Vulnerabilities for packages: gitlab-kas, gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-6MXV-C89J-2494 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-kas...

CVE-2026-77801 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-kas...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kwok, kubernetes-csi-external-snapshotter, fluent-operator, cert-manager-webhook-pdns, kubeflow-pipelines, cluster-api, metrics-server, rke2-cloud-provider, external-secrets-operator, node-feature-discovery, flux-helm-controller, apisix-ingress-controller, telegraf,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: nfpm, crossplane-provider-azure-storage, gitlab-runner, atlantis, melange, gomplate, crossplane-provider-aws-kinesis, telegraf, cloud-provider-aws, flux-notification-controller, chisel, eksctl, crossplane-provider-aws-cloudfront, gatus, ksops, terraform-provider-acme...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus, containerd, prometheus-fips, cloudbeat, prometheus-operator, keda-fips, coder, kube-arangodb-fips, falco-no-driver, chisel-fips, etcd, osv-scanner, upwind-agent, flux-source-controller, gatekeeper-fips, knative-kafka-broker, kubescape-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: nfpm, crossplane-provider-azure-storage, gitlab-runner, atlantis, melange, gomplate, telegraf, cloud-provider-aws, flux-notification-controller, chisel, eksctl, gatus, ksops, kargo, wal-g, flux-kustomize-controller, k3s, cosign, step-kms-plugin,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: fscrypt, prometheus-operator, flux, nerdctl, kaf, telegraf, external-secrets-operator, cloud-provider-aws, osv-scanner, chisel, falco-no-driver, prometheus, external-dns, spire-server, zot, helm, minio, trivy, k3s, kyverno, opentelemetry-collector, k9s, cert-manager,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: fscrypt, prometheus-operator, docker-cli-buildx, flux, nerdctl, podman, kaf, telegraf, external-secrets-operator, cloud-provider-aws, buildah, falco-no-driver, prometheus, external-dns, spire-server, zot, helm, minio, k3s, kyverno, opentelemetry-collector,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: nfpm, melange, gomplate, telegraf, cloud-provider-aws, k3s, step-kms-plugin, skaffold, containerd, cilium, snyk-cli, openbao, chezmoi, act, kaf, gptscript, buildah, osv-scanner, pulumi-language-java, helm, scorecard, trivy, k9s, cert-manager, loki,...

GHSA-J88V-2CHJ-QFWX vulnerabilities

Vulnerabilities for packages: sqlexporter, certificate-transparency, gitaly, kubeflow-pipelines, rke2-cloud-provider, cloudprober, telegraf, gitness, flyte, grafana, jitsucom-bulker, spire-server, keda, azure-service-operator, temporal-server, cerbos, ferretdb, grafana-alloy,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: authservice, nfpm, opencost, grafana-agent-operator, telegraf, tetragon, flux-helm-controller, docker-credential-acr-env, addon-resizer, cloud-provider-aws, eksctl, kor, helm-set-status, frp, minio-object-browser, k3s, flux-image-reflector-controller,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: authservice, gitlab-runner, opencost, gitaly, terraform-provider-azuread, atlantis, sftpgo-plugin-auth, thanos, crossplane-provider-aws-kinesis, telegraf, dataplaneapi, flux-helm-controller, apisix-ingress-controller, tetragon, cluster-api-aws-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: authservice, nfpm, opencost, thanos, telegraf, tetragon, flux-helm-controller, addon-resizer, cloud-provider-aws, cluster-api-aws-controller, kor, gatekeeper, minio-object-browser, flux-image-reflector-controller, conftest, tfsec, mongodb-kubernetes-operator,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: authservice, nfpm, opencost, thanos, telegraf, tetragon, flux-helm-controller, addon-resizer, cloud-provider-aws, cluster-api-aws-controller, kor, gatekeeper, minio-object-browser, flux-image-reflector-controller, conftest, tfsec, mongodb-kubernetes-operator,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: authservice, nfpm, opencost, thanos, telegraf, tetragon, flux-helm-controller, addon-resizer, cloud-provider-aws, cluster-api-aws-controller, kor, checksec, gatekeeper, minio-object-browser, flux-image-reflector-controller, conftest, tfsec, mongodb-kubernetes-operato...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: authservice, gitlab-runner, opencost, gitaly, terraform-provider-azuread, atlantis, sftpgo-plugin-auth, thanos, crossplane-provider-aws-kinesis, telegraf, dataplaneapi, flux-helm-controller, apisix-ingress-controller, tetragon, cluster-api-aws-controller,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: json-exporter-fips, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-cloudfront-fips, redka, kubernetes-csi-livenessprobe-fips, prometheus-operator, terragrunt, kube-arangodb-fips...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: json-exporter-fips, kubeflow-pipelines, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-cloudfront-fips, redka, kubernetes-csi-livenessprobe-fips, aws-nuke-fips,...