CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: keda, fluent-bit-plugin-loki, opentelemetry-collector-contrib, mcp-grafana, k8sgpt, jaeger, metrics-server, minio-operator, amazon-cloudwatch-agent-operator, opentelemetry-collector, cloud-sql-proxy, minio, mc, tempo, karma, telegraf, loki, datadog-agent,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: keda, fluent-bit-plugin-loki, opentelemetry-collector-contrib, mcp-grafana, k8sgpt, jaeger, metrics-server, minio-operator, amazon-cloudwatch-agent-operator, opentelemetry-collector, cloud-sql-proxy, minio, mc, tempo, karma, telegraf, loki, datadog-agent,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, certificate-transparency, cloudzero-agent, google-cloud-otel-ops-collector, minio-operator-fips, opentelemetry-collector-contrib-fips, mcp-grafana-fips, amazon-cloudwatch-agent-operator-fips, cloudzero-agent-fips, mcp-grafana,...

EUVD-2026-25846

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skiptlsvalidation by default it is...

PT-2026-35413

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skip tls validation by default it is...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: cosign, terraform-provider-kubernetes, grpc-health-probe, kubernetes-csi-external-health-monitor, golangci-lint, helm, secrets-store-csi-driver, gitlab-pages, syft, cilium-envoy, argo-events, cilium, dask-gateway, rabbitmq-messaging-topology-operator, osv-scanner,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nri-haproxy-fips, argo-cd, kube-vip-cloud-provider, kyverno-policy-reporter-plugins-trivy, teleport-operator-fips, jitsucom-bulker, syncthing-fips, cloudnative-pg-fips, beats, cue-fips, jobset-fips, rancher, docker-credential-gcr-fips, crossplane-provider-aws-acm-fip...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-haproxy-fips, argo-cd, kube-vip-cloud-provider, kyverno-policy-reporter-plugins-trivy, teleport-operator-fips, jitsucom-bulker, syncthing-fips, cloudnative-pg-fips, beats, cue-fips, jobset-fips, rancher, docker-credential-gcr-fips, crossplane-provider-aws-acm-fip...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: nri-haproxy-fips, argo-cd, kube-vip-cloud-provider, kyverno-policy-reporter-plugins-trivy, teleport-operator-fips, jitsucom-bulker, syncthing-fips, cloudnative-pg-fips, beats, cue-fips, jobset-fips, rancher, docker-credential-gcr-fips, crossplane-provider-aws-acm-fip...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-trivy, shfmt, teleport-operator-fips, beats, crossplane-provider-aws-acm-fips, nri-mysql, prometheus-statsd-exporter, nemo, kubernetes, keda, tofu-controller-fips, spegel, crossplane-provider-aws-cloudwatchlogs-fips, redis-operator,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: nri-haproxy-fips, argo-cd, kube-vip-cloud-provider, kyverno-policy-reporter-plugins-trivy, teleport-operator-fips, jitsucom-bulker, syncthing-fips, cloudnative-pg-fips, beats, cue-fips, jobset-fips, rancher, docker-credential-gcr-fips, crossplane-provider-aws-acm-fip...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, golangci-lint, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, cert-manager-istio-csr, op-geth, crossplane-provider-aws-cloudfront, glow,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, golangci-lint, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, cert-manager-istio-csr, op-geth, crossplane-provider-aws-cloudfront, glow,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, golangci-lint, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, cert-manager-istio-csr, op-geth, crossplane-provider-aws-cloudfront, glow,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, golangci-lint, kube-bench, nsc, sops, crossplane-provider-aws-cloudformation, amazon-cloudwatch-agent-operator, cert-manager-cmctl, cert-manager-istio-csr, op-geth, crossplane-provider-aws-cloudfront, glow,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: weaviate, slsa-verifier, pulumi-kubernetes-operator, ollama, timoni, terraform-provider-sendgrid-fips, prometheus-pushgateway-fips, atlantis-fips, kube-fluentd-operator, atlantis, kube-oidc-proxy, haproxy-ingress, kube-logging-operator, prometheus-statsd-exporter,...

Malicious code in stackdriver-pushgateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ced9f87756bed39e7f18172a9b6b7756622f38898cdf15d826d591344b89c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6286 Malicious code in stackdriver-pushgateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ced9f87756bed39e7f18172a9b6b7756622f38898cdf15d826d591344b89c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...