GO-2025-4155 vulnerabilities

Vulnerabilities for packages: nuclei, redis-operator-fips, minio-object-browser-fips, secrets-store-csi-driver-provider-azure, sigstore-scaffolding, nri-memcached, apisix-ingress-controller, pgpool2exporter-fips, hubble-ui, cfssl-fips, envoy-gateway-fips, policy-controller-fips, promxy-fips,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: nuclei, argo-workflows-fips, prometheus-mongodb-exporter, redis-operator-fips, sigstore-scaffolding, hubble-ui, dynamic-localpv-provisioner, vault-csi-provider, policy-controller-fips, x509-certificate-exporter, promxy-fips, linkerd2,...

GO-2025-3848 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: pombump, melange...

GO-2026-5337 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: zot, tflint, trivy, terraform, k9s, kots, conftest, tfsec, zarf, wolfictl, grype, terragrunt, snyk-cli, kubescape...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: teleport, rancher, mattermost, dex, rancher-agent...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2026-5235 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: fq, dataplaneapi, aws-load-balancer-controller, bazelisk, pombump, metallb, wireguard-go, controller-gen, kubernetes-csi-external-resizer, newrelic-prometheus-configurator, dynamic-localpv-provisioner, cue, k8ssandra-operator, terraform-docs, kube-rbac-proxy, kaf,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: melange, gitaly, pulumi-language-yaml, tfsec, steampipe, grafana-alloy, trivy-operator, act, argo-events, argocd-image-updater, grype, witness, kubescape, scorecard, nfpm, flux, nuclei, gptscript, src-fingerprint, kyverno, flux-image-automation-controller, wolfictl,...

GO-2026-4871 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nova, vale, mattermost, grafana-rollout-operator, velero-plugin-for-microsoft-azure, metallb, witness, rancher-agent, mariadb-operator, falco-exporter, ghaudit, kapp, kaf, kargo, ingress-nginx-controller, nri-mysql,...

GO-2026-4762 vulnerabilities

Vulnerabilities for packages: mattermost, grafana-rollout-operator, terraform-provider-acme, velero-plugin-for-microsoft-azure, azcopy, metallb, witness, rancher-agent, gcp-compute-persistent-disk-csi-driver, crossplane-provider-aws-kinesis, falco-exporter, kube-rbac-proxy,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, tkn, argo-events, argocd-image-updater, crossplane-provider-keycloak, atlantis, crossplane-provider-aws-kinesis, crossplane-provider-aws-ec2, guac, q, snyk-cli, crossplane-provider-aws-cloudfront, kyverno-notation-aws,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: metallb, ghaudit, flux-kustomize-controller, kaf, kargo, nri-mysql, neuvector-scanner, policy-controller, glab, redka, sops, swagger, docker-credential-acr-env, kubernetes-dashboard-metrics-scraper, velero-plugin-for-aws, http-echo, nri-discovery-kubernetes,...

GO-2024-2963 vulnerabilities

Vulnerabilities for packages: metallb, ghaudit, kube-rbac-proxy, flux-kustomize-controller, kaf, kargo, nri-mysql, neuvector-scanner, policy-controller, pulumi, glab, eksctl, redka, swagger, docker-credential-acr-env, kubernetes-dashboard-metrics-scraper, velero-plugin-for-aws, http-echo,...

CVE-2026-73420 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, jitsucom-jitsu...

CLEANSTART-2026-FH61032 Security fixes in metrics-server 0.8.1-r2

Package metrics-server version 0.8.1-r2 fixes 13 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-42154, ghsa-8rm2-7qqf-34qm...

DEBIAN-CVE-2026-68398

In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the L2TP UDP-encap softirq RX path: l2tpudpencaprecv - l2tprecvcommon - pppol2tprecv - pppinput&po-chan It runs under rcureadlock holding...

Malicious code in ventrix-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b68f964850d0777c1f3993c52e3b66dc425b02ee82fb33bcd958514f730926 [email protected] ships a loader that, when the package's default getPlugin export is invoked, performs an HTTP request to the hardcoded endpoint...