CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, opentelemetry-operator, traefik, teleport, spegel, kubernetes-dns-node-cache, frp, kubo, dkron, prometheus-blackbox-exporter, coredns, kyverno-policy-reporter-ui, ipfs-cluster, kube-metrics-adapter, kargo, k8sgateway, q, k3s...

CVE-2026-42508 vulnerabilities

Vulnerabilities for packages: prometheus, k3s, telegraf, loki, vitess, argo-events, containerd, mattermost, terragrunt, argo-cd, guac, istio, gitsign, argocd-image-updater...

CVE-2026-42508 vulnerabilities

Vulnerabilities for packages: zitadel, mattermost, vitess, knative-kafka-broker, prometheus-mongodb-exporter, argo-cd, prometheus, harbor, traefik, traefik-fips, argocd-image-updater, telegraf, keda-fips, kubernetes, loki, k3s, gitlab-rails-ce, argo-cd-fips, istio, terragrunt, flux,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: external-dns, vitess, minio, coredns, grafana-alloy, k8s-device-plugin, kubernetes, knative-serving, nerdctl, aws-flb-cloudwatch, prometheus, zarf, external-secrets-operator, kube-fluentd-operator, rancher-agent, cilium-cli, knative-eventing, prometheus-operator, run...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: cilium-envoy-fips, aactl, zarf, knative-kafka-broker, minio-fips, kubevela-fips, kube-oidc-proxy, harbor, virt-operator, cloud-provider-azure-fips, opentofu-fips, loki, headlamp-fips, knative-eventing, libnvidia-container, gitlab-rails-ce, istio, istio-fips,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: cosign-fips, kubernetes-csi-external-snapshotter-fips, crossplane-provider-azure-relay, cloudbeat, opa-fips-envoy, scorecard, crossplane-provider-azure-servicebus, crossplane-provider-aws-sesv2, kubevela-fips, spicedb-operator-fips, virt-operator,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: cosign-fips, kubernetes-csi-external-snapshotter-fips, crossplane-provider-azure-relay, cloudbeat, opa-fips-envoy, scorecard, crossplane-provider-azure-servicebus, crossplane-provider-aws-sesv2, kubevela-fips, spicedb-operator-fips, virt-operator,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: cosign-fips, kubernetes-csi-external-snapshotter-fips, crossplane-provider-azure-relay, cloudbeat, opa-fips-envoy, scorecard, crossplane-provider-azure-servicebus, crossplane-provider-aws-sesv2, kubevela-fips, spicedb-operator-fips, virt-operator,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: cosign-fips, kubernetes-csi-external-snapshotter-fips, crossplane-provider-azure-relay, cloudbeat, opa-fips-envoy, scorecard, crossplane-provider-azure-servicebus, crossplane-provider-aws-sesv2, kubevela-fips, spicedb-operator-fips, virt-operator,...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: kpt, redpanda, cloud-provider-azure, buildah, litestream, grafana-alloy, k8s-device-plugin, jitsucom-bulker, knative-serving, kubeflow-katib, prometheus, authservice, terraform-provider-pagerduty, zarf, kube-fluentd-operator, gitaly, prometheus-blackbox-exporter,...

CVE-2026-33811 vulnerabilities

Vulnerabilities for packages: kpt, redpanda, cloud-provider-azure, buildah, litestream, grafana-alloy, k8s-device-plugin, jitsucom-bulker, knative-serving, kubeflow-katib, prometheus, authservice, terraform-provider-pagerduty, zarf, kube-fluentd-operator, gitaly, prometheus-blackbox-exporter,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: kpt, cloud-provider-azure, buildah, grafana-alloy, k8s-device-plugin, knative-serving, prometheus, zarf, kube-fluentd-operator, kubevela, grafana, k8sgpt, k8ssandra-client, nats, redka, kaf, atlantis, telegraf, kyverno, rancher-webhook, kubernetes-dashboard, sftpgo,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: kpt, cloud-provider-azure, buildah, grafana-alloy, k8s-device-plugin, knative-serving, prometheus, zarf, kube-fluentd-operator, kubevela, grafana, k8sgpt, k8ssandra-client, nats, redka, kaf, atlantis, telegraf, kyverno, rancher-webhook, kubernetes-dashboard, sftpgo,...

GHSA-W239-58X2-Q8P5 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, k3s, spegel...

CVE-2026-42328 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, k3s, spegel...

GHSA-W239-58X2-Q8P5 vulnerabilities

Vulnerabilities for packages: spegel-fips, rke2-runtime, rke2-runtime-fips, ipfs-cluster-fips, spegel, ipfs-cluster, k3s...

CVE-2026-42328 vulnerabilities

Vulnerabilities for packages: spegel-fips, rke2-runtime, rke2-runtime-fips, ipfs-cluster-fips, spegel, ipfs-cluster, k3s...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: goose, openbao-fips, cloudnative-pg, gitaly-fips, cerbos, falcosidekick-fips, seaweedfs, cloudprober, temporal-server-fips, openbao, pgtimetable, rke2-runtime, certificate-transparency-fips, ferretdb, openfga, opentelemetry-collector-contrib, temporal-server,...

GHSA-9JJ7-4M8R-RFCM vulnerabilities

Vulnerabilities for packages: kots, spire-server, envoy-gateway, k3s, kine...

GHSA-9JJ7-4M8R-RFCM vulnerabilities

Vulnerabilities for packages: kine, commercial-expanso-edge, spire-server, envoy-gateway, envoy-gateway-fips, commercial-chainloop-backend, k3s, kots...