GO-2024-3305 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, harvester, harvester-fips, rancher, pulumi, prometheus, rancher-agent, k3s, rke2-runtime, amazon-ecs-agent, amazon-ecs-agent-fips, vault, amazon-cloudwatch-agent-operator, kubevela, kubevirt-cdi-uploadserver, promxy...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: bento, beats-fips, gatekeeper, skaffold, skaffold-fips, kpt, rke2-runtime, portieris, aactl, lazydocker, docker-credential-gcr, amazon-ecs-agent-fips, docker-credential-gcr-fips, kubeflow-katib, opentelemetry-operator-fips, traefik-fips, beats, harbor-scanner-trivy,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-netapp, crossplane-provider-aws-cloudwatch, influxd, docker-fips, skopeo, k8ssandra-client, consul-k8s-fips, src, trident-fips, kubedock, kubedock-fips, crossplane-provider-aws-elasticsearch, grafana-pyroscope, osv-scanner,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, knative-operator, liquibase-package-manager, gotrue-fips, ytt-fips, jobset-fips, envoy-gateway, secrets-store-csi-driver-fips, aws-flb-cloudwatch, dcgm-exporter-fips, influxd, longhorn-cli-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, skaffold, opentelemetry-collector-contrib, gotrue-fips, livekit-server-fips, temporal-server-fips, terragrunt, envoy-gateway, skopeo, image-factory, steampipe, kubescape, kiali-fips, openbao, knative-eventing, consul-k8s-fips, src, trufflehog-fips...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...