GO-2025-3503 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes-dns-node-cache-fips, skaffold, chartmuseum-fips, nerdctl, whereabouts-fips, src-fingerprint, zarf, caddy, ksops, mongo-tools, cass-operator-fips, velero-plugin-for-microsoft-azure-fips, kubernetes-csi-driver-hostpath, cloudflared,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes-dns-node-cache-fips, skaffold, chartmuseum-fips, docker-credential-acr-env-fips, nerdctl, authservice, src-fingerprint, zarf, caddy, ksops, mongo-tools, helm, velero-plugin-for-microsoft-azure-fips, cloudflared, cloudprober, dex-k8s-authenticator...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: kubewatch, kubernetes-event-exporter, argo-events, goreleaser, argo-cd, argo-rollouts, kyverno-policy-reporter, bento, atlantis...

CLEANSTART-2026-XF44142 Security fixes in kubewatch 2.12.0-r1

Package kubewatch version 2.12.0-r1 fixes 6 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-QF03518 Security fixes in kubewatch 2.12.0-r2

Package kubewatch version 2.12.0-r2 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-ER76776 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 2.12.0-r2

Multiple security vulnerabilities affect the kubewatch package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TL44561 (*x509

Multiple security vulnerabilities affect the kubewatch package. x509. See references for individual vulnerability details...

CLEANSTART-2026-AQ33378 Security fixes for ghsa-gxhx-2686-5h9g applied in versions: 2.12.0-r0

Security vulnerability affects the kubewatch package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: kubewatch, kubernetes-event-exporter, argo-events, goreleaser, argo-cd, argo-rollouts, kyverno-policy-reporter, bento, atlantis...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: kubewatch, supercronic, hubble, victoriametrics-cluster, flux-notification-controller, github-mcp-server, spire-server, aws-load-balancer-controller, dataplaneapi, external-secrets-operator, secrets-store-csi-driver-provider-aws, pluto, grafana-rollout-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: calico, victoriametrics-cluster, cluster-api-provider-vsphere, minio-operator, delve, kubernetes-dashboard-auth, secrets-store-csi-driver-provider-azure, slsa-verifier, vale, task, external-secrets-operator, helm-set-status, spegel, goreleaser, runc,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-mysql, sbom-scorecard, golangci-lint, docker-credential-acr-env, lazygit, delve, shfmt, helm-operator, secrets-store-csi-driver-provider-azure, dive, ip-masq-agent, slsa-verifier, task, ytt, kwok, sonobuoy, docker-credential-ecr-login, metallb,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-mysql, sbom-scorecard, golangci-lint, docker-credential-acr-env, lazygit, delve, shfmt, helm-operator, secrets-store-csi-driver-provider-azure, dive, ip-masq-agent, slsa-verifier, task, ytt, kwok, sonobuoy, docker-credential-ecr-login, metallb,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-mysql, sbom-scorecard, golangci-lint, docker-credential-acr-env, lazygit, delve, shfmt, helm-operator, secrets-store-csi-driver-provider-azure, dive, ip-masq-agent, slsa-verifier, task, ytt, kwok, sonobuoy, docker-credential-ecr-login, metallb,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-mysql, sbom-scorecard, golangci-lint, docker-credential-acr-env, lazygit, delve, shfmt, helm-operator, secrets-store-csi-driver-provider-azure, dive, ip-masq-agent, slsa-verifier, task, ytt, kwok, sonobuoy, docker-credential-ecr-login, metallb,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: sbom-scorecard, delve, shfmt, kubernetes-dashboard-auth, secrets-store-csi-driver-provider-azure, slsa-verifier, runc, controller-gen, wire-go, boring-registry, src-fingerprint, checksec, rancher-loglevel, temporal, glow, sftpgo-plugin-eventsearch, yace, go-md2man,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: ollama, golangci-lint, flux-notification-controller, helm-operator, secrets-store-csi-driver-provider-azure, ip-masq-agent, slsa-verifier, kwok, sonobuoy, crossplane-provider-aws-sqs, metallb, pulumi-language-java, secrets-store-csi-driver, kots, goreleaser,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-mysql, sbom-scorecard, golangci-lint, docker-credential-acr-env, lazygit, delve, shfmt, helm-operator, secrets-store-csi-driver-provider-azure, dive, ip-masq-agent, slsa-verifier, task, ytt, kwok, sonobuoy, docker-credential-ecr-login, metallb,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-mysql, sbom-scorecard, golangci-lint, docker-credential-acr-env, lazygit, delve, shfmt, helm-operator, secrets-store-csi-driver-provider-azure, dive, ip-masq-agent, slsa-verifier, task, ytt, kwok, sonobuoy, docker-credential-ecr-login, metallb,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, dynamic-localpv-provisioner-fips, kubernetes-dashboard-metrics-scraper, prometheus-elasticsearch-exporter-fips, prometheus-mongodb-exporter, skaffold, hey, chartmuseum, falcoctl, node-problem-detector, aactl, dgraph, falcoctl-fips, caddy,...