GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: helm-set-status, grafana-mimir, terraform-docs, crossplane, dgraph, kubernetes-dashboard-api, cert-manager-csi-driver, envconsul, atlantis, gcp-compute-persistent-disk-csi-driver, argo-rollouts, helm-operator, kubernetes-csi-external-health-monitor, guac,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, trivy, zarf, kots, zot, chartmuseum, helm-operator, helm-push, eksctl, kubescape, kubevela, cilium-cli, up, flux-helm-controller, k9s, k8sgpt...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, trivy, zarf, kots, zot, chartmuseum, helm-operator, helm-push, eksctl, kubescape, kubevela, cilium-cli, up, flux-helm-controller, k9s, k8sgpt...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: zarf, chartmuseum-fips, zot, chart-testing-fips, flux, helm-push, cluster-api-helm-controller-fips, flux-source-controller, tw, chart-testing, helm-operator, flux-fips, pluto, helm-operator-fips, kuma, kots, cert-manager-cmctl, helm-docs, eksctl, harbor, kubescape,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kgateway, kube-arangodb, chartmuseum-fips, ocm-cli, oras-fips, headlamp-fips, gitlab-operator, helm-operator, gatekeeper, xeol, ratify, helm-exporter, kots, redpanda-operator, cluster-api-helm-controller, chaos-mesh-fips, gogatekeeper, vcluster-fips, envoy-gateway,...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: kgateway, kube-arangodb, chartmuseum-fips, ocm-cli, oras-fips, headlamp-fips, gitlab-operator, helm-operator, gatekeeper, xeol, ratify, helm-exporter, kots, redpanda-operator, cluster-api-helm-controller, chaos-mesh-fips, gogatekeeper, vcluster-fips, envoy-gateway,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: kube-arangodb, chartmuseum-fips, headlamp-fips, grype, newrelic-infrastructure-agent-fips, gitlab-operator, helm-operator, gatekeeper, xeol, kots, syft, cluster-api-helm-controller, flux-source-controller-fips, flux-helm-controller, envoy-gateway, rancher-fleet,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kube-arangodb, chartmuseum-fips, headlamp-fips, grype, newrelic-infrastructure-agent-fips, gitlab-operator, helm-operator, gatekeeper, xeol, kots, syft, cluster-api-helm-controller, flux-source-controller-fips, flux-helm-controller, envoy-gateway, rancher-fleet,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, kubeflow-pipelines, crossplane-provider-aws-s3, cosign, dynamic-localpv-provisioner-fips, secrets-store-csi-driver-provider-aws, crossplane-provider-aws-memorydb, terraform-provider-aws, secrets-store-csi-driver-provider-gcp,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, k8sgpt, trivy, zot, zarf, flux-helm-controller, up, kubescape, eksctl, helm-operator, kots, chartmuseum, kubevela, flux-source-controller, k9s...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, chart-testing, kubescape, eksctl, helm-operator, flux-source-controller, flux, helm-docs, k9s, cluster-api-helm-controller, zarf, k8ssandra-client, rancher-helm, cilium-cli, pluto, flux-helm-controller, kots, trivy, helm-push, tw, chartmuseum, zot...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, k8sgpt, trivy, zot, zarf, flux-helm-controller, up, kubescape, eksctl, helm-operator, kots, chartmuseum, kubevela, flux-source-controller, k9s...

GO-2026-5622 vulnerabilities

Vulnerabilities for packages: docker-compose, helm-set-status, envoy-gateway, steampipe, syft, kubescape, eksctl, spegel, wolfictl, helm-operator, datadog-agent, kargo, grype, k9s, k8sgpt, zot, cluster-api-helm-controller, kube-arangodb, manifest-tool, neuvector-scanner, fuse-overlayfs-snapshotte...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: docker-compose, helm-set-status, opa, cert-manager-cmctl, envoy-gateway, steampipe, syft, kubescape, eksctl, spegel, wolfictl, helm-operator, falco-no-driver, kargo, flux-source-controller, grype, k9s, melange, k8sgpt, zot, cluster-api-helm-controller, manifest-tool,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: docker-compose, helm-set-status, opa, cert-manager-cmctl, envoy-gateway, steampipe, syft, kubescape, eksctl, spegel, wolfictl, helm-operator, falco-no-driver, kargo, flux-source-controller, grype, k9s, melange, k8sgpt, zot, cluster-api-helm-controller, manifest-tool,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, envoy-gateway, chart-testing, eksctl, helm-operator, kargo, flux-source-controller, helm-docs, k9s, istio, k8sgpt, cerbos, cluster-api-helm-controller, zarf, k8ssandra-client, rancher-helm, cilium-cli, pluto, flux-helm-controller, rancher-fleet,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: helm-set-status, litefs, dask-gateway, terraform-docs, kubernetes-dashboard-api, chart-testing, gcp-compute-persistent-disk-csi-driver, helm-operator, guac, falco-no-driver, kuma, ferretdb, amass, vault-k8s, stakater-reloader, wgcf, bank-vaults, croc,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: helm-set-status, timescaledb-tune, kubernetes-dashboard-api, dgraph, envconsul, chart-testing, helm-operator, kubernetes-csi-external-health-monitor, controller-gen, guac, terraform-provider-azapi, gobump, wgcf, harbor-cli, k3d, kyverno-notation-aws, nri-nginx,...

CLEANSTART-2026-UT23053 Security fixes in helm-operator 1.42.2-r3

Package helm-operator version 1.42.2-r3 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2

Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...