CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-spring, crossplane-provider-aws-iam, cadence, rancher-webhook-fips, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-cognitoidp, crossplane-provider-aws-kafka-fips, crossplane-provider-aws-cloudsearch-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: verticadb-operator, coredns-fips, nfpm, prometheus-snmp-exporter, wavefront-collector-for-kubernetes, goreleaser, neuvector-dbgen-fips, nri-elasticsearch-fips, prometheus-statsd-exporter-fips, kubevirt-cdi-controller, rancher-pushprox-fips, buf, cadence,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, goreleaser, kyverno-policy-reporter-plugins-kyverno-fips, dkron-fips, cilium, tflint-fips, datadog-agent, kyverno-fips, terragrunt-fips, splunk-otel-collector, seaweedfs, percona-server-mongodb-operator-fips, step-fips, gatus-fips, crossplane,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...