GO-2026-6609 vulnerabilities

Vulnerabilities for packages: atlantis, rancher, hubble-ui, filebrowser, prometheus-adapter, headlamp, grafana, step, temporal-ui-server, ingress-nginx-controller, gitness, yunikorn-web, argo-cd, gitlab-pages, kube-arangodb, juicefs, mesosphere-vsphere-csi, opencost, falco-no-driver, karpenter,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: atlantis, rancher, hubble-ui, filebrowser, prometheus-adapter, headlamp, grafana, step, temporal-ui-server, ingress-nginx-controller, gitness, yunikorn-web, argo-cd, gitlab-pages, kube-arangodb, juicefs, mesosphere-vsphere-csi, opencost, falco-no-driver, karpenter,...

GO-2026-6600 vulnerabilities

Vulnerabilities for packages: rancher, kserve-modelmesh-serving, prometheus-adapter, headlamp, knative-eventing, skaffold, azuredisk-csi, crossplane-provider-aws-cloudwatchlogs, harbor, ingress-nginx-controller, gitness, ksops, falcosidekick, tkn, gitlab-pages, grafana-rollout-operator,...

GO-2026-5501 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GO-2025-3833 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GO-2026-5030 vulnerabilities

Vulnerabilities for packages: snyk-cli, crossplane-provider-aws-elasticache, kots, external-secrets-operator, traefik, prometheus-operator, step, ingress-nginx-controller, hydra, istio, gptscript, helm, gitea, opentelemetry-collector, telegraf, vale, hubble, mattermost, terraform-provider-acme,...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: karma, tempo, grafana-pyroscope, cloud-sql-proxy, mcp-grafana, minio-operator, istio, telegraf, certificate-transparency, datadog-agent, loki, keda, jaeger, prometheus-pushgateway, minio, splunk-otel-collector, mc, trillian, aws-otel-collector, minio-object-browser...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: slsa-verifier, promxy, cilium, terraform-provider-pagerduty, teleport, kubescape, migrate, tetragon, external-secrets-operator, ratify, weaviate, grafana, bento, thanos, tekton-chains, ksops, opentelemetry-collector-contrib, argo-cd, dapr, cortex, juicefs, hubble,...

GO-2026-5501 Pyroscope Exposes Storage Secret in github.com/grafana/pyroscope

Pyroscope Exposes Storage Secret in github.com/grafana/pyroscope...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, amazon-cloudwatch-agent-fips, gotrue, backup-restore-operator, cloudbeat-fips, crossplane-provider-aws-lightsail-fips, crossplane-provider-azure-spring, kubernetes-csi-external-snapshotter,...

CVE-2025-41118 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GHSA-M9HQ-H476-H2G8 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GHSA-M9HQ-H476-H2G8 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

CVE-2025-41118 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, hydra-fips, gotrue, cloudbeat-fips, step-fips, zitadel, chainloop-cli, envconsul-fips, grafana-alloy, grafana-alloy-fips, packer, bank-vaults-fips, kiali-fips, clickhouse-backup, dex-fips, pulumi, vitess, flux-kustomize-controller,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: rancher, cluster-autoscaler, promxy, snyk-cli, kubernetes-csi-driver-nfs, octo-sts, kpt, kserve-modelmesh-serving, prometheus-adapter, knative-eventing, flux-image-reflector-controller, azuredisk-csi, syft, neuvector-sigstore-interface,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: rancher, cluster-autoscaler, promxy, snyk-cli, kubernetes-csi-driver-nfs, octo-sts, kpt, kserve-modelmesh-serving, prometheus-adapter, knative-eventing, flux-image-reflector-controller, azuredisk-csi, syft, neuvector-sigstore-interface,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: postgres-operator, rancher, promxy, snyk-cli, gitleaks, kubernetes-csi-driver-nfs, vt-cli, syft, crossplane-provider-aws-cloudwatchlogs, restic, tflint, ingress-nginx-controller, tkn, kuberay-operator, sops, openfga, docker-cli, azure-service-operator, azurefile-csi,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: postgres-operator, rancher, promxy, snyk-cli, gitleaks, kubernetes-csi-driver-nfs, vt-cli, syft, crossplane-provider-aws-cloudwatchlogs, restic, tflint, ingress-nginx-controller, tkn, kuberay-operator, sops, openfga, docker-cli, azure-service-operator, azurefile-csi,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: postgres-operator, rancher, promxy, snyk-cli, gitleaks, kubernetes-csi-driver-nfs, vt-cli, syft, crossplane-provider-aws-cloudwatchlogs, restic, tflint, ingress-nginx-controller, tkn, kuberay-operator, sops, openfga, docker-cli, azure-service-operator, azurefile-csi,...