GHSA-2QPH-QPVM-2QF7 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector...

GHSA-2QPH-QPVM-2QF7 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector...

CVE-2024-28854 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector...

GHSA-22W5-2FXG-VRWX OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...

OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...

CVE-2026-73499 vulnerabilities

Vulnerabilities for packages: dapr, kine...

CVE-2026-66780: Insertion of Sensitive Information into Log File

A flaw was found in the submariner-operator component. The submariner-k8s-broker-cluster Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, helm-exporter, gpu-operator, crossplane-provider-aws-batch, trivy-k8s-wrapper-fips, cluster-proportional-autoscaler-fips, terraform-provider-azurerm-fips, crossplane-provider-azure-storagecache, fairwinds-gemini, mongodb-kubernetes-operator-fips,...

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, helm-exporter, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, crossplane-provider-aws-batch, trivy-k8s-wrapper-fips, beats, cluster-proportional-autoscaler-fips,...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, helm-exporter, gpu-operator, crossplane-provider-aws-batch, trivy-k8s-wrapper-fips, cluster-proportional-autoscaler-fips, terraform-provider-azurerm-fips, crossplane-provider-azure-storagecache, fairwinds-gemini, mongodb-kubernetes-operator-fips,...

CVE-2026-56859 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, helm-exporter, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, crossplane-provider-aws-batch, trivy-k8s-wrapper-fips, beats, cluster-proportional-autoscaler-fips,...

GO-2021-0061 vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator, k3d...

GO-2020-0036 vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator, k3d...

GO-2022-0956 vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator, k3d...

GO-2022-0229 vulnerabilities

Vulnerabilities for packages: dex-k8s-authenticator, k3d...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache-fips, k8sgateway-fips, eks-distro-fips, kubernetes-dns-node-cache, cloudflared, k8sgateway, cloudflared-fips, eks-distro, juicefs...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-push, k8ssandra-client-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, flux-helm-controller-fips, rancher-helm, trivy-operator-fips, kuma, trivy, zarf, cert-manager-cmctl, kargo, pluto, consul-k8s, flux-fip...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: trivy-operator, flux-source-controller, helm-push, k8ssandra-client-fips, helm-mapkubeapis, k9s-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips, flux-helm-controller-fips, headlamp-fips, nova-fips,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-push, k8ssandra-client-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips, flux-helm-controller-fips, rancher-helm, kuma, trivy, zarf, cert-manager-cmctl, pluto, consul-k8s,...

GO-2026-5435 vulnerabilities

Vulnerabilities for packages: jfrog-cli, kubescape-server, flux-source-controller, helm-exporter, helm-push, trivy-operator, k8ssandra-client-fips, kube-arangodb, helm-mapkubeapis, k9s-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, chart-testing-fips, cluster-api-helm-controller-fips...