GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: jaeger, grafana, fluent-bit-plugin-loki, minio-object-browser, metrics-server, amazon-cloudwatch-agent-operator, karma, k8sgpt, datadog-agent, cloud-sql-proxy, prometheus-pushgateway, node-problem-detector, aws-otel-collector, opentelemetry-operator,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: grafana-fips, istio-fips, mcp-grafana, grafana, opentelemetry-operator-fips, opentelemetry-operator, fluent-bit-plugin-loki, ld-relay-fips, metrics-server-fips, minio-fips, cloudzero-agent-fips, loki-fips, ld-relay, mcp-grafana-fips, metrics-server, prometheus-fips,...

EUVD-2026-25846

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skiptlsvalidation by default it is...

PT-2026-35413

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.skip tls validation by default it is...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: db-operator, knative-client, kpt, pulumi-language-java, task, grafana-agent-operator, kubernetes-dashboard-api, snyk-cli, grafana, tetragon, rancher-agent, terraform-provider-pagerduty, k8s-device-plugin, cadvisor, aws-flb-firehose, cert-manager-csi-driver,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: dfc, flagger, teleport-operator-fips, act, nri-rabbitmq-fips, virt-controller-fips, etcd-fips, crossplane-provider-aws-wafv2-fips, podman-fips, step-kms-plugin, crossplane-provider-aws-acm-fips, nerdctl, kapp, gatus, docker-cli, s5cmd-fips, nri-rabbitmq,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: logstash-exporter, sriov-network-device-plugin, argo-cd, dfc, aws-ebs-csi-driver-fips, cilium-envoy, kubevirt-cdi-apiserver, runc, kubernetes-csi-external-attacher, flagger, seaweedfs, vale, migrate, teleport-operator-fips, act, kwok, nri-rabbitmq-fips, rancher-fleet...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: traefik, task, velero-plugin-for-aws, grafana, tetragon, terraform-provider-pagerduty, cadvisor, aws-flb-firehose, crossplane-provider-aws-firehose, harbor-scanner-trivy, wave, go-md2man, tkn, spqr, vt-cli, iptables-wrappers, k8sgpt, oras, shfmt, manifest-tool, fulci...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: traefik, task, velero-plugin-for-aws, grafana, tetragon, terraform-provider-pagerduty, cadvisor, aws-flb-firehose, crossplane-provider-aws-firehose, harbor-scanner-trivy, wave, go-md2man, tkn, spqr, vt-cli, iptables-wrappers, k8sgpt, oras, shfmt, manifest-tool, fulci...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: traefik, task, velero-plugin-for-aws, grafana, tetragon, terraform-provider-pagerduty, cadvisor, aws-flb-firehose, crossplane-provider-aws-firehose, harbor-scanner-trivy, wave, tkn, spqr, vt-cli, oras, k8sgpt, manifest-tool, fulcio, rootlesskit,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: traefik, task, velero-plugin-for-aws, grafana, tetragon, terraform-provider-pagerduty, cadvisor, aws-flb-firehose, crossplane-provider-aws-firehose, harbor-scanner-trivy, wave, tkn, spqr, vt-cli, oras, k8sgpt, manifest-tool, fulcio, rootlesskit,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: timoni, runc, kube-state-metrics-fips, smarter-device-manager-fips, secrets-store-csi-driver, pulumi-language-dotnet, flux-helm-controller, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, kaf, wireguard-go, prometheus-adapter,...

Malicious code in stackdriver-pushgateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ced9f87756bed39e7f18172a9b6b7756622f38898cdf15d826d591344b89c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6286 Malicious code in stackdriver-pushgateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ced9f87756bed39e7f18172a9b6b7756622f38898cdf15d826d591344b89c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...