470 matches found
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: local-static-provisioner, rancher-pushprox, prometheus-blackbox-exporter, chart-testing, cis-operator, nri-mssql, argo-workflows, argo-workflows-fips, calico-fips, kubernetes-dashboard-api, kubernetes-csi-node-driver-registrar, dex-fips, crossplane-provider-aws-efs,...
CLEANSTART-2026-YG73853 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2
Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-PH5J-38MG-J6HP vulnerabilities
Vulnerabilities for packages: omnictl-multiarch, pluto, podinfo, loki-fips, grafana-fips, grafana-operator-fips, dkron, victorialogs-fips, grafana-operator, aws-ebs-csi-driver-fips, stakater-reloader, gotenberg, victoriametrics-cluster, aws-ebs-csi-driver, flux-operator-fips, flux-source-watcher,...
CVE-2026-27137 vulnerabilities
Vulnerabilities for packages: omnictl-multiarch, pluto, podinfo, loki-fips, grafana-fips, grafana-operator-fips, dkron, victorialogs-fips, grafana-operator, aws-ebs-csi-driver-fips, stakater-reloader, gotenberg, victoriametrics-cluster, aws-ebs-csi-driver, flux-operator-fips, flux-source-watcher,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: kepler, newrelic-infrastructure-agent, prometheus-blackbox-exporter, emqx-exporter-fips, aws-ebs-csi-driver-fips, crossplane-provider-aws-memorydb, argo-workflows-fips, kubernetes-dashboard-api, prometheus-blackbox-exporter-fips, langfuse-fips, tempo, temporal-fips,...
GHSA-434X-W66G-QW3R vulnerabilities
Vulnerabilities for packages: yazi, lychee, wadm, linkerd2, samply, zizmor, nushell, netavark, mdbook, sdp-k8s-injector, pgcat, wasmcloud, qdrant, sccache, berg, zed, linkerd-await, oranda, parseable, ntpd-rs, tealdeer, sqlx, zellij, rustup, linkerd-network-validator, topgrade, efs-utils,...
CVE-2026-25541 vulnerabilities
Vulnerabilities for packages: yazi, lychee, wadm, linkerd2, samply, zizmor, nushell, netavark, mdbook, sdp-k8s-injector, pgcat, wasmcloud, qdrant, sccache, berg, zed, linkerd-await, oranda, parseable, ntpd-rs, tealdeer, sqlx, zellij, rustup, linkerd-network-validator, topgrade, efs-utils,...
GHSA-434X-W66G-QW3R vulnerabilities
Vulnerabilities for packages: wadm, helix, wash, watchexec, cargo-c, oranda, kdash, py3-xet-core, wasmcloud, xh, netavark, fnm, efs-utils, linkerd-network-validator, valkey-ldap, sdp-k8s-injector, shadowsocks-rust, komodo, nushell, berg, linkerd-extension-init, zed, linkerd2, mdbook, linkerd-awai...
CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc
Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...
CLEANSTART-2026-ME47927 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-PA85871 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-CB20757 Cancelling a query (e
Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-UY85485 Within HostnameError
Multiple security vulnerabilities affect the vault-k8s package. Within HostnameError. See references for individual vulnerability details...
PT-2026-21259
Name of the Vulnerable Software and Affected Versions consul-k8s-fips affected versions not specified Description The consul-k8s-fips package is affected by multiple security issues. The net/http package does not correctly handle line terminators in chunked data, potentially leading to issues...
CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0
Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...
CLEANSTART-2025-EU07511 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0
Multiple security vulnerabilities affect the vault-k8s package. These issues are resolved in later releases. See references for individual CVE details...
CVE-2026-23634: Least Privilege Violation
Pepr is a type safe K8s middleware. Prior to 1.0.5 , Pepr defaults to a cluster-admin RBAC configuration and does not explicitly force or enforce least-privilege guidance for module authors. The default behavior exists to make the “getting started” experience smooth: new users can experiment with...