GO-2026-5005 vulnerabilities

Vulnerabilities for packages: k3s, kyverno, snyk-cli, rancher-agent, cloud-provider-aws, fscrypt, kubernetes-dashboard, external-secrets-operator, kaf, containerd, minio, helm, external-dns, spire-server, prometheus-operator, kine, podman, docker-cli-buildx, kots, kubernetes, flux, cilium-cli,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: k3s, k9s, kyverno, snyk-cli, rancher-agent, kubescape, chisel, cloud-provider-aws, trivy, zarf, fscrypt, kubernetes-dashboard, external-secrets-operator, docker-machine-driver-harvester, kaf, containerd, minio, helm, external-dns, spire-server,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: k3s, ferretdb, xeol, ingress-nginx-controller, steampipe, goreleaser, kubeflow-katib, aws-flb-cloudwatch, dask-gateway, traefik, runc, kubernetes-dashboard-api, tfsec, kubernetes-dns-node-cache, kubernetes-dashboard, redka, eksctl, scorecard, thanos-operator, minio,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: nri-postgresql, kubernetes-event-exporter, kubernetes-csi-driver-nfs, hydra, govulncheck, kubeflow-katib, rancher-machine, crossplane-provider-aws-cloudfront, octo-sts, local-static-provisioner, cloud-provider-aws, kubernetes-dns-node-cache,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, falcoctl, kubeflow-katib, cni-plugins, grafana-alloy, amazon-cloudwatch-agent-operator, kyverno-notation-aws, nginx-prometheus-exporter, libnvidia-container, k8sgpt, undock, yunikorn-k8shim, kuberlr, aws-application-networking-k8s,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3s, bank-vaults, src-fingerprint, snyk-cli, kubernetes-event-exporter, goreleaser, falcoctl, rekor, kubescape, crossplane-provider-azure-authorization, pulumi-kubernetes-operator, flux-image-reflector-controller, rabbitmq-messaging-topology-operator, gitsign, tkn,...

CLEANSTART-2026-TN09152 Security fixes in helm 4.2.3-r0

Package helm version 4.2.3-r0 fixes 1 vulnerabilities: CVE-2026-50163...

CLEANSTART-2026-KJ07309 Security fixes in helm 4.2.1-r1

Package helm version 4.2.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-TK72884 Security fixes in helm 3.21.1-r1

Package helm version 3.21.1-r1 fixes 4 vulnerabilities: CVE-2026-53488, ghsa-jpcc-p29g-p8mq, ghsa-xhf5-7wjv-pqxp, CVE-2026-47262...

CVE-2026-71473

The CVE-2026-71473 affects the search-v2-operator component in the ACM search-v2-operator workflow (Acm-search-v2-rhel9). Evidence from CVE records tied to CVELIST indicates a flaw where a user with specific administrative permissions on a managed cluster can inject arbitrary configuration data v...

CVE-2026-71473 Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke

A flaw was found in the search-v2-operator component. A user with specific administrative permissions on a managed cluster can exploit a vulnerability that allows them to inject arbitrary configuration data. This manipulation can override critical settings, leading to the replacement of container...

CVE-2026-66016

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

CVE-2026-66016

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

CVE-2026-66016 Rendered Artifactory Helm manifests may contain generated TLS private keys

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

EUVD-2026-57259

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

CVE-2026-66016

CVE-2026-66016 concerns rendered Artifactory Helm manifests produced under specific self-hosted Helm configurations, where generated TLS private keys may be retained and become accessible to highly privileged local users. The CVSS-derived metrics in the initial entry indicate local attack vector,...

CVE-2026-66016 Rendered Artifactory Helm manifests may contain generated TLS private keys

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

CVE-2026-66016: Cleartext Storage of Sensitive Information

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

PT-2026-71123

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

CVE-2026-50237

A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace tenant can plant a ProjectHelmChartRepository with an arbitrary URL that the console pod fetches server-side, bypassing tenant egress restrictions. Combined with catalog metadata...