GO-2025-3547 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, harvester-fips, longhorn-manager, eks-distro, kubernetes-csi-driver-hostpath, longhorn-manager-fips, harvester, rancher-system-agent, azurefile-csi-fips, azurefile-csi, longhorn-share-manager-fips, longhorn-share-manager, rke2-runtime-fips,...

GO-2025-3521 vulnerabilities

Vulnerabilities for packages: harvester-fips, spark-operator-fips, longhorn-manager, azure-container-networking, longhorn-manager-fips, harvester, vcluster, longhorn-share-manager-fips, longhorn-share-manager, rke2-runtime-fips, argo-cd-fips, kubernetes...

GO-2025-3915 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, nodetaint, node-feature-discovery-fips, cephcsi-fips, longhorn-share-manager, kubernetes-dns-node-cache, rancher-webhook-fips, local-static-provisioner, yunikorn-k8shim-fips, vcluster, azuredisk-csi, cephcsi, mesosphere-vsphere-csi,...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, harvester-fips, longhorn-manager, eks-distro, kubernetes-csi-driver-hostpath, longhorn-manager-fips, harvester, rancher-system-agent, azurefile-csi-fips, azurefile-csi, longhorn-share-manager-fips, longhorn-share-manager, rke2-runtime-fips,...

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, harvester-fips, longhorn-manager, eks-distro, kubernetes-csi-driver-hostpath, longhorn-manager-fips, harvester, rancher-system-agent, azurefile-csi-fips, azurefile-csi, longhorn-share-manager-fips, longhorn-share-manager, rke2-runtime-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, chartmuseum, kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, external-dns-fips, google-osconfig-agent,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, argocd-image-updater, k8s-driver-manager, gitlab-kas, aws-node-termination-handler, k8sgpt, rancher-fleet-fips, zarf, redis-operator-fips, eksctl, vcluster, hubble, k9s-fips, zarf-fips, kube-arangodb-fips, cloudbeat-fips, k8s-driver-manager-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, argocd-image-updater, k8s-driver-manager, gitlab-kas, aws-node-termination-handler, k8sgpt, rancher-fleet-fips, zarf, redis-operator-fips, eksctl, vcluster, hubble, k9s-fips, zarf-fips, kube-arangodb-fips, cloudbeat-fips, k8s-driver-manager-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: filebrowser, cert-manager-cmctl, knative-serving, whereabouts, envoy-ratelimit, nri-couchbase, aws-flb-kinesis, q, falcoctl, crane, docker-credential-acr-env, hey, lazydocker, sbomqs, terraform-docs, consul-k8s, redpanda, addon-resizer, frp, cert-manager-csi-driver,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-backup, crossplane-provider-aws-servicediscovery, gitaly, terraform-provider-azuread-fips, opencost-fips, sftpgo-plugin-pubsub, promxy-fips, wave-fips, kubernetes-dashboard-web-fips, kube-rbac-proxy-fips, hubble, chartmuseum,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-backup, crossplane-provider-aws-servicediscovery, gitaly, terraform-provider-azuread-fips, opencost-fips, sftpgo-plugin-pubsub, promxy-fips, wave-fips, kubernetes-dashboard-web-fips, kube-rbac-proxy-fips, hubble, chartmuseum,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nats-top-fips, crossplane-provider-aws-backup, nfs-subdir-external-provisioner-fips, crossplane-provider-aws-servicediscovery, nodetaint, doppler-kubernetes-operator, gitaly, terraform-provider-azuread-fips, opencost-fips, sftpgo-plugin-pubsub, promxy-fips, wave-fips...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-backup, kube-rbac-proxy-fips, chartmuseum, virt-handler, supercronic, newrelic-k8s-metadata-injection, kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, hivemind, external-dns-fips, kube-vip-fips, x509-certificate-exporter, yace-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, whereabouts, nri-couchbase, aws-flb-kinesis, q, falcoctl, crossplane-provider-aws-dynamodb, crane, sbomqs, consul-k8s, redpanda, addon-resizer, s5cmd, argo-events, gitlab-runner, terraform-provider-azapi, yq, neuvector-dbgen, sealed-secrets,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, whereabouts, nri-couchbase, aws-flb-kinesis, q, falcoctl, crossplane-provider-aws-dynamodb, crane, sbomqs, consul-k8s, redpanda, addon-resizer, s5cmd, argo-events, gitlab-runner, terraform-provider-azapi, yq, neuvector-dbgen, sealed-secrets,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, whereabouts, nri-couchbase, aws-flb-kinesis, q, falcoctl, crossplane-provider-aws-dynamodb, crane, sbomqs, consul-k8s, redpanda, addon-resizer, s5cmd, argo-events, gitlab-runner, terraform-provider-azapi, yq, neuvector-dbgen, sealed-secrets,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, whereabouts, nri-couchbase, aws-flb-kinesis, q, falcoctl, crossplane-provider-aws-dynamodb, crane, sbomqs, consul-k8s, redpanda, addon-resizer, s5cmd, argo-events, gitlab-runner, terraform-provider-azapi, yq, neuvector-dbgen, sealed-secrets,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: spqr, restic, rook, tofu-controller, cert-manager-cmctl, kubernetes, kyverno-policy-reporter-kyverno-plugin, boring-registry, tetragon, crossplane-provider-aws-cloudfront, prometheus-alertmanager, apisix-ingress-controller, aws-flb-kinesis, litestream,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: spqr, restic, rook, tofu-controller, cert-manager-cmctl, kubernetes, kyverno-policy-reporter-kyverno-plugin, boring-registry, tetragon, crossplane-provider-aws-cloudfront, prometheus-alertmanager, apisix-ingress-controller, aws-flb-kinesis, litestream,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner-fips, deck, gitaly, terraform-provider-azuread-fips, opencost-fips, sftpgo-plugin-pubsub, promxy-fips, wave-fips, kubernetes-dashboard-web-fips, crossplane-provider-aws-sns, kube-rbac-proxy-fips, kubebuilder,...