GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, kargo, minio, guac, spegel, terraform-provider-google, conftest, kubernetes-csi-driver-hostpath, kwok, k8sgpt-operator, dex, trivy, kubernetes-csi-external-provisioner, step-ca, zarf, hubble-ui, falcosidekick, k3d, fulcio, tflint, dagger, zot, kaniko, opa...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, dapr, helm-push, rancher-helm, prometheus, harbor-scanner-trivy, kubernetes-csi-external-provisioner, zarf, gogatekeeper, hubble-ui, pgpool2exporter, amazon-k8s-cni, newrelic-infra-operator, octo-sts, vault-benchmark, cluster-api, migrate,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: thanos-operator, k8sgateway, http-echo, nats-top, spegel, crossplane-provider-aws-iam, rancher-helm, kubernetes-csi-external-provisioner, gogatekeeper, hubble-ui, nri-rabbitmq, pgpool2exporter, octo-sts, newrelic-infra-operator, redis-operator, vault-benchmark, calic...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: thanos-operator, k8sgateway, helm-push, rclone, mockgen, prometheus, nri-rabbitmq, fulcio, migrate, docker-cli, nginx-prometheus-exporter, rabbitmq-cluster-operator, kapp, gobump, witness, harbor-cli, nova, dive, lazydocker, pluto, wait-for-port, falcoctl, glow,...

CLEANSTART-2026-XL50286 Security fixes in hubble-ui 0.13.3-r1

Package hubble-ui version 0.13.3-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2025-58190...

CLEANSTART-2026-YG91374 Security fixes in hubble-ui-fips 0.13.3-r1

Package hubble-ui-fips version 0.13.3-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2025-58190...

CVE-2026-56742 vulnerabilities

Vulnerabilities for packages: hubble-fips, kubescape-server-fips, kubescape-operator-fips, hubble-ui, hubble-ui-backend-fips, hubble, kubescape-operator, kubescape, kubescape-server, cilium...

CVE-2026-56742 vulnerabilities

Vulnerabilities for packages: cilium, kubescape-operator, hubble-ui, hubble, kubescape...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

CVE-2026-42502 vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...

CLEANSTART-2026-QA19540 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-64715, CVE-2025-68119, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33726 applied in versions: 0.13.3-r0, 0.13.3-r1

Multiple security vulnerabilities affect the hubble-ui-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VU90450 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-64715, CVE-2025-68119, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33726 applied in versions: 0.13.3-r0, 0.13.3-r1

Multiple security vulnerabilities affect the hubble-ui package. These issues are resolved in later releases. See references for individual vulnerability details...