GO-2026-6605 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, kubeflow-pipelines-driver-fips, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults, cluster-proportional-autoscaler, xeol-fips, skopeo-fips, virt-operator,...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, kubeflow-pipelines-driver-fips, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults, cluster-proportional-autoscaler, xeol-fips, skopeo-fips, virt-operator,...

GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, envoy-ai-gateway, crossplane-provider-aws-efs-fips, falcoctl-fips, kube-rbac-proxy, temporal-ui-server-fips, extension-auto-registration-kubernetes, spire-controller-manager-fips, versitygw-fips, request-1279, conftest,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, kubeflow-pipelines-driver-fips, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults, cluster-proportional-autoscaler, xeol-fips, skopeo-fips, virt-operator,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, kubeflow-pipelines-driver-fips, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults, cluster-proportional-autoscaler, xeol-fips, skopeo-fips, virt-operator,...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, kubeflow-pipelines-driver-fips, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults, cluster-proportional-autoscaler, xeol-fips, skopeo-fips, virt-operator,...

CLEANSTART-2026-ZK87180 application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2

Security vulnerability affects the apache-nifi package. An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, cluster-autoscaler, temporal-ui-server-fips, request-1279, crossplane-provider-aws-elastictranscoder, kubeflow-pipelines-driver-fips, crossplane-provider-aws-datapipeline, karpenter, milvus, crossplane-provider-aws-xray-fips, bank-vaults,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: tkn, yace, nri-discovery-kubernetes, task, keda, ksops, vertical-pod-autoscaler, melange, fluxcd-kustomize-mutating-webhook, kiali, blobfuse2, crossplane-provider-aws-ec2, flux-image-reflector-controller, pvc-autoresizer, gatus, argo-rollouts,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: tkn, yace, nri-discovery-kubernetes, task, keda, ksops, vertical-pod-autoscaler, melange, fluxcd-kustomize-mutating-webhook, kiali, blobfuse2, crossplane-provider-aws-ec2, flux-image-reflector-controller, pvc-autoresizer, gatus, argo-rollouts,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: tkn, kubernetes-csi-driver-nfs, spqr, yace, nri-discovery-kubernetes, task, keda, ksops, terraform-provider-sendgrid, vertical-pod-autoscaler, melange, fluxcd-kustomize-mutating-webhook, kiali, blobfuse2, crossplane-provider-aws-ec2, flux-image-reflector-controller,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: tkn, kubernetes-csi-driver-nfs, spqr, yace, nri-discovery-kubernetes, task, keda, ksops, terraform-provider-sendgrid, vertical-pod-autoscaler, melange, fluxcd-kustomize-mutating-webhook, kiali, blobfuse2, crossplane-provider-aws-ec2, flux-image-reflector-controller,...

CVE-2026-73179

Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic...