CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, kubevirt-cdi-uploadserver, image-factory-fips, terraform, kyverno-policy-reporter-plugins-trivy-fips, chartmuseum-fips, crossplane-provider-aws-elasticsearch, crossplane-provider-aws-cognitoidentity-fips, cluster-api, crossplane-provider-aws-ia...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubelet-csr-approver-fips, authservice-fips, kubevirt-cdi-uploadserver, terraform-provider-pagerduty, image-factory-fips, terraform, kyverno-policy-reporter-plugins-trivy-fips, manifest-tool, chartmuseum-fips, prometheus-operator, nri-f5,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, image-factory-fips, azcopy, restic, grpc-health-probe-fips, kubo, neuvector-sigstore-interface-fips, trillian-fips, rekor, tekton-pipelines, amazon-ssm-agent-fips, zarf-fips, google-osconfig-agent, omni, spire-server, livekit-cli,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...