CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: keda, telegraf, jaeger, mcp-grafana, opentelemetry-collector, datadog-agent, certificate-transparency, mc, cloud-sql-proxy, minio, node-problem-detector, trillian, karma, prometheus, minio-object-browser, metrics-server, splunk-otel-collector,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: keda, telegraf, jaeger, mcp-grafana, opentelemetry-collector, datadog-agent, certificate-transparency, mc, cloud-sql-proxy, minio, node-problem-detector, trillian, karma, prometheus, minio-object-browser, metrics-server, splunk-otel-collector,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: agentbeat, karma-fips, ld-relay-fips, prometheus-pushgateway, metrics-server, telegraf, minio-object-browser-fips, node-problem-detector-fips, prometheus-fips, node-problem-detector, certificate-transparency-fips, istio, mcp-grafana-fips, certificate-transparency,...

EUVD-2026-25846

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skiptlsvalidation by default it is...

PT-2026-35413

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skip tls validation by default it is...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: flannel, slsa-verifier, vexctl, vault-benchmark, docker-machine-driver-harvester, xeol, argo-rollouts, cue, kubescape-operator, aws-node-termination-handler, crossplane-provider-azure-authorization, ingress-nginx-controller, cluster-api-provider-vsphere,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: agentbeat, nri-discovery-kubernetes, aws-sigv4-proxy-fips, nri-discovery-kubernetes-fips, extism, tw, jupyterhub-k8s-image-awaiter-fips, podman, terraform-provider-sendgrid, k8ssandra-operator-fips, grafana-rollout-operator, ipfs-cluster, wave, gotestsum,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: agentbeat, nri-discovery-kubernetes, zot, aws-sigv4-proxy-fips, cilium-certgen, extism, nri-discovery-kubernetes-fips, rancher-support-bundle-kit, minio-object-browser-fips, jupyterhub-k8s-image-awaiter-fips, nova-fips, podman, terraform-provider-sendgrid,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: agentbeat, nri-discovery-kubernetes, zot, aws-sigv4-proxy-fips, cilium-certgen, extism, nri-discovery-kubernetes-fips, rancher-support-bundle-kit, minio-object-browser-fips, jupyterhub-k8s-image-awaiter-fips, nova-fips, podman, terraform-provider-sendgrid,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: agentbeat, nri-discovery-kubernetes, zot, aws-sigv4-proxy-fips, cilium-certgen, extism, nri-discovery-kubernetes-fips, rancher-support-bundle-kit, minio-object-browser-fips, jupyterhub-k8s-image-awaiter-fips, nova-fips, podman, terraform-provider-sendgrid,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: agentbeat, nri-discovery-kubernetes, zot, aws-sigv4-proxy-fips, cilium-certgen, extism, nri-discovery-kubernetes-fips, rancher-support-bundle-kit, minio-object-browser-fips, jupyterhub-k8s-image-awaiter-fips, nova-fips, podman, terraform-provider-sendgrid,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, postgres-operator, grafana-alloy, kube-rbac-proxy, kargo, dataplaneapi, kine, falco-no-driver, kyverno-policy-reporter, terraform-provider-azapi, aws-flb-kinesis, polaris, prometheus-alertmanager, bazelisk, aws-sigv4-proxy, kots,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, postgres-operator, grafana-alloy, kube-rbac-proxy, kargo, dataplaneapi, kine, falco-no-driver, kyverno-policy-reporter, terraform-provider-azapi, aws-flb-kinesis, polaris, prometheus-alertmanager, bazelisk, aws-sigv4-proxy, kots,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: gops, crossplane-provider-aws-kinesis, postgres-operator, grafana-alloy, kube-rbac-proxy, kargo, dataplaneapi, kine, falco-no-driver, kyverno-policy-reporter, terraform-provider-azapi, aws-flb-kinesis, wire-go, polaris, prometheus-alertmanager, bazelisk,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gops, crossplane-provider-aws-kinesis, postgres-operator, grafana-alloy, kube-rbac-proxy, kargo, dataplaneapi, kine, falco-no-driver, kyverno-policy-reporter, terraform-provider-azapi, aws-flb-kinesis, wire-go, polaris, prometheus-alertmanager, bazelisk,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: zot, src, metrics-server, prometheus-postgres-exporter, skaffold, cue, terraform-provider-sendgrid, terraform, kube-logging-operator, dynamic-localpv-provisioner-fips, kubernetes-csi-external-provisioner, apko, kubernetes-ingress-defaultbackend, sigstore-scaffolding,...

Malicious code in stackdriver-pushgateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ced9f87756bed39e7f18172a9b6b7756622f38898cdf15d826d591344b89c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6286 Malicious code in stackdriver-pushgateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ced9f87756bed39e7f18172a9b6b7756622f38898cdf15d826d591344b89c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...