CVE-2026-39821 vulnerabilities

Vulnerabilities for packages: knative-client, terraform-provider-google, trivy, terraform-provider-random, rancher-machine, container-object-storage-interface, distribution, kyverno-policy-reporter-ui, x509-certificate-exporter, policy-controller, cert-manager-csi-driver, kubernetes-dashboard-aut...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-sns, metrics-server, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, helm-push, cert-manager-webhook-pdns, container-object-storage-interface, db-operator, policy-controller, mattermost,...

CVE-2026-6846 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-C64W-HPM6-XX8W vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2025-69650 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-6M68-W836-P72W vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-63QM-V5PW-47H7 vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2025-69649 vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-sns, metrics-server, newrelic-infra-operator, crossplane-provider-aws-cloudwatchlogs, helm-push, cert-manager-webhook-pdns, container-object-storage-interface, db-operator, policy-controller, mattermost,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: continuity, crossplane-provider-aws-route53, crossplane-provider-aws-sns, metrics-server, newrelic-infra-operator, temporal-server, crossplane-provider-aws-cloudwatchlogs, ctop, helm-push, cert-manager-webhook-pdns, container-object-storage-interface, omnibump,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: continuity, crossplane-provider-aws-route53, crossplane-provider-aws-sns, metrics-server, newrelic-infra-operator, temporal-server, crossplane-provider-aws-cloudwatchlogs, ctop, helm-push, cert-manager-webhook-pdns, container-object-storage-interface, omnibump,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: continuity, crossplane-provider-aws-route53, crossplane-provider-aws-sns, metrics-server, newrelic-infra-operator, temporal-server, crossplane-provider-aws-cloudwatchlogs, ctop, helm-push, cert-manager-webhook-pdns, container-object-storage-interface, omnibump,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: continuity, crossplane-provider-aws-route53, crossplane-provider-aws-sns, metrics-server, newrelic-infra-operator, temporal-server, crossplane-provider-aws-cloudwatchlogs, ctop, helm-push, cert-manager-webhook-pdns, container-object-storage-interface, omnibump,...

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation

A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...

GHSA-WV26-88M5-6H59 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

CVE-2026-42876 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-FQ7H-9X26-6J22 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

CVE-2026-42875 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

CVE-2026-6846 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, temporal, terraform, crossplane-provider-aws-s3-fips, aws-flb-kinesis-fips, rancher-webhook-fips, redka, cluster-api-helm-controller-fips, aws-node-termination-handler, opentofu-fips, wavefront-collector-for-kubernetes,...