GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: redpanda-operator, chaos-mesh, drone, k8ssandra-client-fips, gitlab-operator, headlamp-fips, cluster-api-helm-controller, kyverno, chartmuseum, xeol, opentofu-fips, rancher-helm, kyverno-fips, ocm-kubernetes-controller-fips, conftest-fips, helm-operator, helm-push,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-serving, omnictl-multiarch-fips, loki, drone, gitea, cert-manager, kyverno, tekton-pipelines-fips, opentofu-fips, kyverno-fips, coder, seaweedfs-rocksdb, cloud-provider-aws, elastic-agent-fips, gitlab-kas, grafana-fips, harbor, external-secrets-operator,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-compose, syft, datadog-agent-fips, redpanda-operator, chaos-mesh, headlamp-fips, cluster-api-helm-controller, buildkitd-fips, packer, chartmuseum, xeol, rancher-helm, kubevela, kaniko-fips, livekit-cli, helm-operator, datadog-agent, helm-push, chartmuseum-fips...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: containerd, opa, docker, osv-scanner, tigera-operator, wolfictl, rancher-agent, gatekeeper, neuvector-scanner, rancher-helm, scorecard, linkerd2, zarf, headlamp, envoy-gateway, kubescape, helm-mapkubeapis, eksctl, kube-arangodb, zot, helm-set-status, steampipe, spege...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: containerd, opa, docker, osv-scanner, tigera-operator, wolfictl, rancher-agent, gatekeeper, neuvector-scanner, rancher-helm, scorecard, linkerd2, zarf, headlamp, envoy-gateway, kubescape, helm-mapkubeapis, eksctl, kube-arangodb, zot, helm-set-status, steampipe, spege...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, opentelemetry-collector-contrib-fips, neuvector-sigstore-interface, syft, qemu-guesthelper, consul, flannel-fips, pvc-autoresizer-fips, chaos-mesh, kyverno-policy-reporter-kyverno-plugin, regclient-fips, temporal-fips, yunikorn-k8shim,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, nfs-subdir-external-provisioner, tetragon, vault-secrets-webhook, vault-env, rancher-telemetry, mongodb-kubernetes-operator, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, step-ca, crossplane-provider-family-aws, falco-no-driver,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, nfs-subdir-external-provisioner, tetragon, vault-secrets-webhook, vault-env, rancher-telemetry, mongodb-kubernetes-operator, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, step-ca, crossplane-provider-family-aws, falco-no-driver,...

CLEANSTART-2026-RB28539 Within HostnameError

Security vulnerability affects the tigera-operator package. Within HostnameError...

CLEANSTART-2025-YJ25356 Security fixes for CVE-2025-61729 applied in versions: 1.40.2-r0

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for CVE details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: consul, temporal-fips, logstash-exporter-fips, aws-signer-notation-plugin-fips, k8ssandra-client-fips, kubeflow-fips, rke2-cloud-provider, spicedb-operator, cilium-envoy-fips, nri-rabbitmq, go-discover-fips, eks-distro-fips, aws-sigv4-proxy-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: gotestsum, opentelemetry-collector-contrib-fips, qemu-guesthelper, consul, temporal-fips, yunikorn-k8shim, fq, authservice, aws-signer-notation-plugin-fips, k8ssandra-client-fips, gh, rke2-cloud-provider, prometheus-podman-exporter, cilium-envoy-fips, nri-rabbitmq,...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, tigera-operator...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, tigera-operator...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, delve, actions-runner-controller, flannel-cni-plugin, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, aws-load-balancer-controller, nri-mysql, pulumi, wazero,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, delve, actions-runner-controller, flannel-cni-plugin, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, aws-load-balancer-controller, nri-mysql, pulumi, wazero,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, spire-server, gitsign, actions-runner-controller, zarf, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, step-ca, rclone, crossplane-provider-family-aws,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, delve, actions-runner-controller, flannel-cni-plugin, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, aws-load-balancer-controller, nri-mysql, pulumi, wazero,...