GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubescape-operator, keda, kapp-controller, kubernetes-csi-external-resizer, datadog-agent, tetragon, hubble, cluster-api-azure-controller, cloud-provider-azure, flux-helm-controller, kubernetes-csi-external-provisioner, cilium, cluster-api-helm-controller, vcluster,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-google-cas-issuer-fips, mariadb-operator-fips, percona-server-mongodb-operator-fips, percona-xtradb-cluster-operator, cert-manager-istio-csr, cert-manager-istio-csr-fips, gitlab-operator, cert-manager-csi-driver,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, mariadb-operator, cert-manager-istio-csr, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, opentelemetry-operator, cert-manager-csi-driver...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: rancher-machine, undock, amazon-cloudwatch-agent-operator, podman, grafana, nuclei, kpt, datadog-agent, ko, docker-credential-gcr, kots, rancher, trivy-operator, zot, opentelemetry-operator, cri-tools, skopeo, buildah, nerdctl, portieris, spire-server, k8sgpt,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubescape-operator, keda, kapp-controller, kubernetes-csi-external-resizer, datadog-agent, tetragon, hubble, cluster-api-azure-controller, cloud-provider-azure, flux-helm-controller, kubernetes-csi-external-provisioner, cilium, cluster-api-helm-controller, vcluster,...

GHSA-CXH2-4639-VMC5 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Affected Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator TargetAllocator Companion: Prometheus Operator API types CRDs Summary OpenTelemetry Operator's TargetAllocator watches ServiceMonitor resources via the Prometheus Operator CR watcher and converts...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: kargo, ipfs-cluster, kubernetes-dns-node-cache, traefik, teleport, kube-metrics-adapter, dkron, kubo, kyverno-policy-reporter, opentelemetry-operator, jitsucom-bulker, q, spegel, k8sgateway, kyverno-policy-reporter-ui, coredns, k3s, frp...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: keda, amazon-cloudwatch-agent-operator, grafana, datadog-agent, certificate-transparency, tempo, minio-operator, opentelemetry-collector, opentelemetry-operator, node-problem-detector, telegraf, loki, trillian, splunk-otel-collector, istio, mcp-grafana, metrics-serve...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-google-cas-issuer-fips, mariadb-operator-fips, percona-server-mongodb-operator-fips, percona-xtradb-cluster-operator, cert-manager-istio-csr, cert-manager-istio-csr-fips, gitlab-operator, cert-manager-csi-driver,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, mariadb-operator, cert-manager-istio-csr, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, opentelemetry-operator, cert-manager-csi-driver...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, mariadb-operator, cert-manager-istio-csr, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, opentelemetry-operator, cert-manager-csi-driver...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-google-cas-issuer-fips, mariadb-operator-fips, percona-server-mongodb-operator-fips, percona-xtradb-cluster-operator, cert-manager-istio-csr, cert-manager-istio-csr-fips, gitlab-operator, cert-manager-csi-driver,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: flux, timestamp-authority, sigstore-scaffolding, weaviate, rclone, amazon-cloudwatch-agent-operator, cosign, grafana-mimir, restic, mongo-tools, git-sync, gitea, trufflehog, sftpgo-plugin-pubsub, crossplane-provider-family-azure, amazon-cloudwatch-agent, buildkitd,...