GO-2022-1130 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, kube-state-metrics, prometheus-pushgateway...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, jaeger, opentelemetry-operator-fips, metrics-server, prometheus-fips, ops-agent, minio-operator-fips, prometheus-pushgateway, agentbeat, opentelemetry-collector-contrib-fips, cloud-sql-proxy, fluent-bit-plugin-loki,...

GO-2026-5710 vulnerabilities

Vulnerabilities for packages: commercial-grafana, opentelemetry-collector-fips, jaeger, prometheus-fips, metrics-server, ops-agent, minio-operator-fips, prometheus-pushgateway, agentbeat, cloud-sql-proxy, fluent-bit-plugin-loki, grafana, karma, aws-otel-collector-fips, cloudzero-agent-fips,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: commercial-grafana, opentelemetry-collector-fips, jaeger, prometheus-fips, metrics-server, ops-agent, minio-operator-fips, prometheus-pushgateway, agentbeat, cloud-sql-proxy, fluent-bit-plugin-loki, splunk-otel-collector, grafana, karma, aws-otel-collector-fips,...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: istio, certificate-transparency, keda, mc, telegraf, karma, minio-object-browser, cloud-sql-proxy, trillian, minio-operator, grafana-pyroscope, tempo, minio, jaeger, mcp-grafana, prometheus-pushgateway, aws-otel-collector, splunk-otel-collector, loki, datadog-agent...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: prometheus, istio, amazon-cloudwatch-agent-operator, certificate-transparency, keda, node-problem-detector, mc, karma, cloud-sql-proxy, fluent-bit-plugin-loki, k8sgpt, trillian, minio-operator, tempo, metrics-server, prometheus-operator, minio, jaeger,...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: istio, amazon-cloudwatch-agent-operator, certificate-transparency, keda, node-problem-detector, mc, telegraf, karma, opentelemetry-operator, minio-object-browser, cloud-sql-proxy, fluent-bit-plugin-loki, opentelemetry-collector-contrib, k8sgpt, trillian,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: istio, amazon-cloudwatch-agent-operator, certificate-transparency, keda, node-problem-detector, mc, telegraf, karma, opentelemetry-operator, minio-object-browser, cloud-sql-proxy, fluent-bit-plugin-loki, opentelemetry-collector-contrib, k8sgpt, trillian,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-fips, jaeger, opentelemetry-operator-fips, metrics-server, prometheus-fips, ops-agent, minio-operator-fips, prometheus-pushgateway, agentbeat, opentelemetry-collector-contrib-fips, cloud-sql-proxy, fluent-bit-plugin-loki,...

EUVD-2026-25846

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skiptlsvalidation by default it is...

PT-2026-35413

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skip tls validation by default it is...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: rancher-agent, prometheus, kubernetes, kube-vip, step, docker-cli-buildx, kubeflow-katib, crossplane-provider-keycloak, certificate-transparency, harbor, knative-serving, knative-operator, opencost, telegraf, bom, cilium, gitlab-kas, polaris, flux-source-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kine, git-sync-fips, sftpgo-plugin-pubsub, cert-manager-openshift-routes, emqx-exporter, kubernetes-dashboard-api-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, snyk-cli, task, crossplane-provider-aws-acm, vexctl, kubescape-operator-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kine, git-sync-fips, sftpgo-plugin-pubsub, cert-manager-openshift-routes, emqx-exporter, kubernetes-dashboard-api-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, snyk-cli, task, crossplane-provider-aws-acm, vexctl, kubescape-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, emqx-exporter, harbor, snyk-cli, task, cloudnative-pg, prometheus-process-exporter-fips, dive, consul, kubevirt-cdi-apiserver, jfrog-cli, gitaly, azure-container-networking, kubernetes-release-fips, cilium-cli, crossplane-provider-aws-iam-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kine, git-sync-fips, sftpgo-plugin-pubsub, cert-manager-openshift-routes, emqx-exporter, kubernetes-dashboard-api-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, snyk-cli, task, crossplane-provider-aws-acm, vexctl, kubescape-operator-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kine, git-sync-fips, sftpgo-plugin-pubsub, cert-manager-openshift-routes, emqx-exporter, kubernetes-dashboard-api-fips, oras-fips, terraform-provider-sendgrid-fips, harbor, snyk-cli, task, crossplane-provider-aws-acm, vexctl, kubescape-operator-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: prometheus, nri-prometheus, nova, crossplane-provider-keycloak, local-static-provisioner, dfc, kiali, flux-source-controller, kubernetes-csi-node-driver-registrar, tetragon, doppler-kubernetes-operator, oauth2-proxy, mariadb-operator, nri-kafka, coredns,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: prometheus, nri-prometheus, nova, crossplane-provider-keycloak, local-static-provisioner, dfc, kiali, flux-source-controller, kubernetes-csi-node-driver-registrar, tetragon, doppler-kubernetes-operator, oauth2-proxy, go-bindata, mariadb-operator, nri-kafka, coredns,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: prometheus, nri-prometheus, nova, crossplane-provider-keycloak, local-static-provisioner, dfc, kiali, flux-source-controller, kubernetes-csi-node-driver-registrar, tetragon, doppler-kubernetes-operator, oauth2-proxy, go-bindata, mariadb-operator, nri-kafka, coredns,...