GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-source-controller, dkron, librechat, flux-image-automation-controller, localstack, aws-load-balancer-controller-fips, loki-fips, victorialogs, aws-ebs-csi-driver, pluto, victorialogs-fips, flux-operator-fips, polaris, victoriametrics-cluster-fips,...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: flux-source-controller, dkron, librechat, flux-image-automation-controller, localstack, aws-load-balancer-controller-fips, loki-fips, victorialogs, aws-ebs-csi-driver, pluto, victorialogs-fips, flux-operator-fips, polaris, victoriametrics-cluster-fips,...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: flux-source-controller, dkron, librechat, flux-image-automation-controller, localstack, aws-load-balancer-controller-fips, loki-fips, victorialogs, aws-ebs-csi-driver, pluto, victorialogs-fips, flux-operator-fips, polaris, victoriametrics-cluster-fips,...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: calico-fips, istio, rke2-runtime, nerdctl-fips, multus-cni, podman, nerdctl, flannel, amazon-k8s-cni-fips, calico, docker, rootlesskit-fips, datadog-agent, buildkitd-fips, buildkitd, istio-fips, kuma, containerd-fips, flannel-fips, buildah, containerd, k3s,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: vgpu-util, gitlab-cng, flux-source-controller-fips, aws-privateca-issuer-fips, rke2-runtime, trillian, promxy-fips, velero-fips, kubernetes-dashboard-api, wave-fips, fuse-overlayfs-snapshotter, ytt, kubo-fips, crossplane-provider-azure-sql, cilium-fips, nri-mysql,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: buildah, envoy-ratelimit, nfs-subdir-external-provisioner, spire-server, vault-secrets-webhook, vault-env, rancher-telemetry, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, step-ca, crossplane-provider-family-aws, vault-benchmark,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, terraform-provider-azurerm, flux-source-controller-fips, crossplane-provider-aws-sns, aws-privateca-issuer-fips, fluent-operator, crossplane-provider-aws-cloudwatchlogs, velero-fips, kubernetes-dashboard-api, temporal-server, wave-fips,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: buildah, spire-server, nfs-subdir-external-provisioner, kubernetes-csi-livenessprobe, authservice, terraform-provider-tls, vault-k8s, kapp, kube-metrics-adapter, licenseclassifier, docker-cli, addon-resizer, overmind, grype, bom, trust-manager, pdfcpu, rootlesskit,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: buildah, spire-server, nfs-subdir-external-provisioner, kubernetes-csi-livenessprobe, authservice, terraform-provider-tls, vault-k8s, kapp, kube-metrics-adapter, licenseclassifier, docker-cli, addon-resizer, overmind, grype, bom, trust-manager, pdfcpu, rootlesskit,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: spire-server, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, vault-benchmark, aws-load-balancer-controller, vault-k8s, kapp, kube-metrics-adapter, nats, overmind, bom, trust-manager, kustomize, pdfcpu, flannel, harbor-registry, trillian,...