GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: oras, ocm-cli, kots, zarf-fips, vcluster, kube-arangodb, ocm-kubernetes-controller, k9s, rancher-agent, gitlab-operator-fips, consul-k8s, helm-mapkubeapis, rancher-helm, kubescape-operator, helm-exporter, cluster-api-helm-controller-fips, cert-manager-cmctl, trivy,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: oras, ocm-cli, kots, zarf-fips, vcluster, kube-arangodb, ocm-kubernetes-controller, k9s, rancher-agent, gitlab-operator-fips, consul-k8s, helm-mapkubeapis, rancher-helm, kubescape-operator, helm-exporter, cluster-api-helm-controller-fips, cert-manager-cmctl, trivy,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: etcd, prometheus-operator, kots, commercial-expanso-edge, zarf-fips, frankenphp-8.2, containerd, frankenphp-8.3, kubevela-fips, k9s, rancher-agent, knative-kafka-broker-fips, telegraf, kubernetes-dashboard, aactl, flux-fips, skaffold, harbor-fips, knative-serving-fip...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: packer, docker-compose-fips, buildkitd-fips, kots, zarf-fips, datadog-agent, kube-arangodb, kubevela-fips, k9s, kaniko, rancher-agent, harvester, packer-fips, spegel-fips, consul-k8s, helm-mapkubeapis, rancher-helm, kubescape-operator, helm-exporter,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: envoy-gateway, gogatekeeper, spegel, kubescape-operator, helm-mapkubeapis, fuse-overlayfs-snapshotter, kots, neuvector-scanner, k9s, rancher, ctop, kubevela, docker-compose, opa, buildkitd, trivy, zarf, kargo, newrelic-infrastructure-agent, wolfictl, xeol,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: envoy-gateway, gogatekeeper, spegel, kubescape-operator, helm-mapkubeapis, fuse-overlayfs-snapshotter, kots, neuvector-scanner, k9s, rancher, ctop, kubevela, docker-compose, opa, buildkitd, trivy, zarf, kargo, newrelic-infrastructure-agent, wolfictl, xeol,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, terraform-provider-databricks-fips, podman, packer, ipfs-cluster-fips, prometheus-mongodb-exporter-fips, crossplane-provider-aws-kinesis-fips, cloud-provider-gcp-cloud-controller-manager-fips, emqx-exporter,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, prometheus, ferretdb, azure-ipam, gogatekeeper, datadog-operator, step-ca, nats-top, spqr, crossplane-provider-aws-ec2, nri-redis, bank-vaults, docker-machine-driver-linode, newrelic-k8s-metadata-injection, nginx-prometheus-exporter, task, frp...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, prometheus, ferretdb, linkerd2-proxy-init, azure-ipam, gogatekeeper, datadog-operator, step-ca, nats-top, shfmt, spqr, crossplane-provider-aws-ec2, nri-redis, bank-vaults, velero, docker-machine-driver-linode, newrelic-k8s-metadata-injection,...

CLEANSTART-2026-RB28539 Within HostnameError

Security vulnerability affects the tigera-operator package. Within HostnameError...

CLEANSTART-2025-YJ25356 Security fixes for CVE-2025-61729 applied in versions: 1.40.2-r0

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for CVE details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, prometheus-podman-exporter-fips, promxy-fips, kyverno-policy-reporter-ui-fips, newrelic-nri-kube-events-fips, terraform-docs, kubernetes-dashboard-auth-fips, fleet-server, kubernetes-csi-node-driver-registrar-fips, bank-vaults-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: podman, packer, ipfs-cluster-fips, prometheus-podman-exporter-fips, promxy-fips, weaviate, containerd, kubevela-fips, step-issuer, kaniko, kube-logging-operator, kubernetes-release, kubernetes-csi-external-provisioner, aws-load-balancer-controller, rancher-helm,...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, tigera-operator...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, tigera-operator...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: capslock, flux-image-automation-controller, docker-cli, ferretdb, esbuild, go-licenses, aws-load-balancer-controller, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, shfmt, nri-redis, nri-mysql, velero, buildkitd, newrelic-infrastructure-agent, gh,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: capslock, flux-image-automation-controller, docker-cli, ferretdb, esbuild, go-licenses, aws-load-balancer-controller, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, shfmt, nri-redis, nri-mysql, velero, buildkitd, newrelic-infrastructure-agent, gh,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: buf, capslock, flux-image-automation-controller, guac, ferretdb, aws-load-balancer-controller, secrets-store-csi-driver-provider-gcp, step-ca, cilium-cli, certificate-transparency, flux-source-controller, hubble, fuse-overlayfs-snapshotter, pulumi-language-dotnet,...