GO-2024-3305 vulnerabilities

Vulnerabilities for packages: k3s, rancher-agent, rke2-runtime, amazon-cloudwatch-agent-operator, harvester, promxy, prometheus, pulumi, vault, rancher, amazon-ecs-agent, harvester-fips, kubevirt-cdi-uploadserver, amazon-cloudwatch-agent-operator-fips, kubevela, amazon-ecs-agent-fips...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, cluster-api-fips, crossplane, promxy-fips, docker-credential-gcr, kubeflow-katib, amazon-cloudwatch-agent-operator-fips, skaffold, gatekeeper, rancher, lazydocker, aactl, undock, kubevirt-cdi-uploadserver, amazon-ecs-agent, portieris-fips,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, crossplane-provider-azure-spring, ucd, crossplane-provider-azure-streamanalytics, terraform-provider-databricks-fips, teleport, kserve-modelmesh-serving, crossplane-provider-aws-iam, cilium, crossplane-provider-aws-dynamodb, aws-efs-csi-driver-fips...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, aws-ebs-csi-driver-fips, knative-operator, kustomize-fips, rke2-runtime-fips, opencost-fips, cloud-provider-azure-fips, ucd, seaweedfs-fips, gitaly-fips, vendir-fips, x509-certificate-exporter, atlantis-fips, azure-service-operator,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: opencost-fips, seaweedfs-fips, gitaly-fips, tflint-fips, grpcurl-fips, teleport, harbor-registry, cilium, percona-server-mongodb-operator, google-guest-agent, argo-cd, gitlab-workhorse-ce-fips, rekor, nginx-kubernetes-ingress-fips, flux-source-controller-fips,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...