GO-2026-4399 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, cert-manager-google-cas-issuer, cert-manager-google-cas-issuer-fips, opentelemetry-operator-fips, cert-manager-cmctl, cert-manager-webhook-pdns, percona-server-mongodb-operator-fips, step-issuer-fips, cert-manager-csi-driver-fips,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, percona-server-mongodb-operator, mariadb-operator, aws-privateca-issuer, cert-manager-cmctl, cert-manager-csi-driver, cert-manager-webhook-pdns, step-issuer, opentelemetry-operator...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, kots, skopeo, trivy, envoy-gateway, zot, docker-credential-gcr, grafana, podman, nerdctl, buildah, undock, rancher, rancher-machine, amazon-cloudwatch-agent-operator, ko, rancher-agent, portieris, nuclei, spire-server, trivy-operator, k8sgpt,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, metrics-server, kots, cloud-provider-vsphere, tetragon, kubernetes-csi-external-resizer, datadog-agent, kyverno, kube-metrics-adapter, cluster-autoscaler, openbao, fluent-operator, cluster-api-gcp-controller,...

GHSA-CXH2-4639-VMC5 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Affected Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator TargetAllocator Companion: Prometheus Operator API types CRDs Summary OpenTelemetry Operator's TargetAllocator watches ServiceMonitor resources via the Prometheus Operator CR watcher and converts...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: coredns, teleport, ipfs-cluster, kargo, k3s, kubernetes-dns-node-cache, kube-metrics-adapter, kubo, q, traefik, spegel, jitsucom-bulker, frp, kyverno-policy-reporter, dkron, kyverno-policy-reporter-ui, k8sgateway, opentelemetry-operator...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: metrics-server, aws-otel-collector, node-problem-detector, opentelemetry-collector-contrib, trillian, datadog-agent, mc, minio-operator, fluent-bit-plugin-loki, loki, cloud-sql-proxy, jaeger, amazon-cloudwatch-agent-operator, prometheus-pushgateway, telegraf, keda,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, cert-manager-google-cas-issuer, cert-manager-google-cas-issuer-fips, opentelemetry-operator-fips, cert-manager-cmctl, cert-manager-webhook-pdns, percona-server-mongodb-operator-fips, step-issuer-fips, cert-manager-csi-driver-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, percona-server-mongodb-operator, mariadb-operator, aws-privateca-issuer, cert-manager-cmctl, cert-manager-csi-driver, cert-manager-webhook-pdns, step-issuer, opentelemetry-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, percona-server-mongodb-operator, mariadb-operator, aws-privateca-issuer, cert-manager-cmctl, cert-manager-csi-driver, cert-manager-webhook-pdns, step-issuer, opentelemetry-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, cert-manager-google-cas-issuer, cert-manager-google-cas-issuer-fips, opentelemetry-operator-fips, cert-manager-cmctl, cert-manager-webhook-pdns, percona-server-mongodb-operator-fips, step-issuer-fips, cert-manager-csi-driver-fips,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: terragrunt, kine, kots, traefik, oauth2-proxy, sigstore-scaffolding, mongo-tools, kargo, mc, dgraph, velero, kube-metrics-adapter, openbao, rook, chartmuseum, velero-plugin-for-microsoft-azure, weaviate, glab, argo-workflows, grafana-alloy, crossplane-provider-azure,...