GO-2024-3305 vulnerabilities

Vulnerabilities for packages: rke2-runtime, promxy, k3s, harvester-fips, kubevirt-cdi-uploadserver, rancher-agent, prometheus, rancher, vault, amazon-cloudwatch-agent-operator-fips, pulumi, amazon-cloudwatch-agent-operator, amazon-ecs-agent-fips, kubevela, amazon-ecs-agent, harvester...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator-fips, tekton-pipelines, promxy, gitlab-rails-ce-fips, rancher-agent, traefik, beats-fips, harbor, kpt, cluster-api, portieris-fips, xeol-fips, rancher, skaffold, harvester, aactl, cluster-api-helm-controller-fips, docker-credential-gcr-fips,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, crossplane-provider-azure-synapse, crossplane-provider-azure-signalrservice, crossplane-provider-aws-firehose, crossplane-provider-aws-servicediscovery-fips, aws-efs-csi-driver, blob-csi, crossplane-provider-aws-opensearch-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: lvm-driver, harbor-registry-fips, apko-fips, omni-fips, mcp-grafana, nats, cloud-provider-gcp-cloud-controller-manager-fips, terraform-provider-random-fips, addon-resizer, crossplane-provider-aws-servicediscovery-fips, aws-efs-csi-driver, rancher-fleet-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: harbor-registry-fips, apko-fips, omni-fips, spicedb-fips, google-guest-agent-manager, flux-operator, falcosidekick, grafana-mimir-fips, grafana-mimir, temporal, commercial-chainloop-cli, peerdb-flow, openbao-fips, crossplane-fips, elastic-agent, skopeo-fips,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...