GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, cloud-provider-aws, kapp-controller, tekton-chains, gatekeeper, fluent-operator, spicedb-operator, cert-manager, flux-helm-controller, node-feature-discovery, tekton-pipelines, cluster-api-ipam-provider-in-cluster, azure-service-operator,...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, oauth2-proxy, terraform-provider-azurerm, containerd, guac, terraform-provider-sendgrid, coredns, grafana-mimir, crossplane-provider-aws-sns, kapp-controller, ferretdb, secrets-store-csi-driver, tekton-chains, gatekeeper, opa,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: chartmuseum, kots, k9s, cilium-cli, helm-operator, trivy, zarf, helm-push, zot, eksctl, flux-helm-controller, flux-source-controller, k8sgpt, up, kubevela, kubescape...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: chartmuseum, kots, k9s, cilium-cli, helm-operator, trivy, zarf, helm-push, zot, eksctl, flux-helm-controller, flux-source-controller, k8sgpt, up, kubevela, kubescape...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, helm-docs, kuma, k9s, cilium-cli, k8ssandra-client-fips, chart-testing-fips, flux-source-controller-fips, flux-fips, rancher-helm, cluster-api-helm-controller-fips, tw, flux, trivy, cluster-api-helm-controller, helm-push, flux-helm-controller-fips, consul-k8s,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, k8ssandra-client-fips, gitlab-operator, rancher-helm, kgateway, kube-arangodb, tw, kube-mgmt, xeol, cluster-api-helm-controller, helm-push, argocd-image-updater, headlamp-fips, k8ssandra-client, opentofu, rancher-fleet-fips, chartmuseum, ocm-cli...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, k8ssandra-client-fips, gitlab-operator, rancher-helm, kgateway, kube-arangodb, tw, kube-mgmt, xeol, cluster-api-helm-controller, helm-push, argocd-image-updater, headlamp-fips, k8ssandra-client, opentofu, rancher-fleet-fips, chartmuseum, ocm-cli...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: kaniko-fips, neuvector, ctop, melange, gitlab-rails-ce, k8ssandra-client-fips, opa, gitlab-operator, rancher-helm, kube-arangodb, tw, xeol, containerd, cluster-api-helm-controller, helm-push, k3s, beats, kubevela-fips, headlamp-fips, k8ssandra-client,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kaniko-fips, neuvector, ctop, melange, gitlab-rails-ce, k8ssandra-client-fips, opa, gitlab-operator, rancher-helm, kube-arangodb, tw, xeol, containerd, cluster-api-helm-controller, helm-push, k3s, beats, kubevela-fips, headlamp-fips, k8ssandra-client,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, frp, hubble-fips, step, buf, certificate-transparency-fips, metallb, crossplane-provider-aws-ec2, cosign, k3s, aws-efs-csi-driver, flux-kustomize-controller, crossplane-provider-aws-cloudwatchlogs, trust-manager,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubevela, k9s, flux-source-controller, k8sgpt, zarf, kubescape, up, eksctl, flux-helm-controller, chartmuseum, trivy, zot, helm-operator, cilium-cli, kots, helm-push...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, pluto, flux, helm-operator, cilium-cli, zarf, kubescape, flux-helm-controller, zot, rancher-helm, flux-source-controller, tw, cert-manager-cmctl, cluster-api-helm-controller, chart-testing, helm-docs, trivy, k8ssandra-client, k9s, chartmuseum, kots, helm-push...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubevela, k9s, flux-source-controller, k8sgpt, zarf, kubescape, up, eksctl, flux-helm-controller, chartmuseum, trivy, zot, helm-operator, cilium-cli, kots, helm-push...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: containerd, kargo, spegel, eksctl, helm-operator, cilium-cli, manifest-tool, opa-envoy, skaffold, opa, zarf, osv-scanner, helm-set-status, kubescape, rancher-fleet, docker, falco-no-driver, flux-helm-controller, newrelic-infrastructure-agent,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: containerd, kargo, spegel, eksctl, helm-operator, cilium-cli, manifest-tool, opa-envoy, skaffold, opa, zarf, osv-scanner, helm-set-status, kubescape, rancher-fleet, docker, falco-no-driver, flux-helm-controller, newrelic-infrastructure-agent,...

GO-2026-5622 vulnerabilities

Vulnerabilities for packages: containerd, kargo, spegel, eksctl, helm-operator, manifest-tool, gatekeeper, skaffold, zarf, helm-set-status, kubescape, kube-arangodb, docker, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, helm, zot, kubevela, rancher-helm, teleport, dagger, wolfictl,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos, eksctl, pluto, helm-operator, cilium-cli, zarf, rancher-fleet, istio, flux-helm-controller, zot, rancher-helm, flux-source-controller, linkerd2, cert-manager-cmctl, tw, cluster-api-helm-controller, chart-testing, helm-docs, helm-push, trivy, k8ssandra-client,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, aws-signer-notation-plugin, guac, newrelic-infra-operator, postgres-operator, cloud-provider-aws, crossplane-provider-aws-sns, go-licenses, gptscript, kapp-controller, manifest-tool, ferretdb, gitleaks, secrets-store-csi-driver,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, containerd, guac, gcsfuse, argo-events, fulcio, kapp-controller, gptscript, tekton-chains, opa, ip-masq-agent, nova, kubeflow-katib, aws-eks-pod-identity-agent, kubernetes-csi-driver-hostpath, kubernetes-csi-driver-nfs, terraform-provider-azapi,...

CLEANSTART-2026-WU83083 Security fixes in helm-operator 1.41.1-r0

Package helm-operator version 1.41.1-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...