GHSA-W6R9-248C-FRG8 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, krakend, guac, bento, telegraf, trufflehog-fips, keda, trufflehog, keda-fips, argo-events, argo-events-fips, krakend-fips, bento-fips, falcosidekick...

CVE-2026-107386 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, krakend, guac, bento, telegraf, trufflehog-fips, keda, trufflehog, keda-fips, argo-events, argo-events-fips, krakend-fips, bento-fips, falcosidekick...

GHSA-W6R9-248C-FRG8 vulnerabilities

Vulnerabilities for packages: bento, trufflehog, guac, telegraf, falcosidekick, keda, argo-events...

CVE-2026-107386 vulnerabilities

Vulnerabilities for packages: bento, trufflehog, guac, telegraf, falcosidekick, keda, argo-events...

CLEANSTART-2026-JF99427 Security fix for GHSA-m425-mq94-257g applied in: argo-events 1.6.3-r1, cert-manager-webhook-pdns-fips 2.3.0-r0, cloudprober 0.12.9-r0, local-static-provisioner 2.6.0-r1, local-static-provisioner-fips 2.6.0-r1, metrics-server-fips 0.5.2-r3, multus-cni-fips 3.9.3-r2, multus-cni-fips 4.0.2-r2

GHSA-m425-mq94-257g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PI41655 Security fix for CVE-2022-1996 applied in: argo-events 1.6.3-r1, cert-manager-webhook-pdns-fips 2.3.0-r0, kserve-modelmesh-serving 0.9.0-r1, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r2

CVE-2022-1996 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GY43798 Security fix for ghsa-r48q-9g5r-8q2h applied in: argo-events 1.6.3-r1, kserve-modelmesh-serving 0.9.0-r1

ghsa-r48q-9g5r-8q2h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2023-1930 vulnerabilities

Vulnerabilities for packages: argo-events, argo-events-fips...

GO-2025-3608 vulnerabilities

Vulnerabilities for packages: argo-events-fips...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: k9s, tfsec, bom, timoni, nemo, argo-workflows-fips, flux, kaniko-fips, argo-events, flux-image-automation-controller-fips, kaniko, guac, pulumi-language-java, pulumi-language-yaml, chezmoi, grype, k8sgpt, zarf, argocd-image-updater-fips, tekton-pipelines, gptscript,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: telegraf, opentelemetry-collector-contrib, argo-events, dapr, jitsucom-bulker, amazon-cloudwatch-agent, dapr-fips, cluster-api-aws-controller-fips, bento, amazon-cloudwatch-agent-fips, vault, grafana-alloy, sqlexporter-fips, cluster-api-aws-controller,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, mlrun-log-collector-fips, perses-fips, kcp, crossplane-provider-aws-rds-fips, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler, crossplane-provider-aws-organizations,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: task, pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, syft, pulumi-language-java, flux-image-automation-controller, argo-events, zarf, kubescape, gitsign, grafana-alloy, trivy, argo-workflows, chezmoi, scorecard,...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: argo-cd, containerd, mattermost, falco-no-driver, terragrunt, guac, helm, telegraf, kyverno, istio, k3s, opentofu, argo-events, prometheus, external-secrets-operator, argocd-image-updater, gitsign...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: argo-cd, bento, kubernetes-event-exporter, goreleaser, argo-rollouts, atlantis, kyverno-policy-reporter, kubewatch, argo-events...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: task, pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, syft, pulumi-language-java, flux-image-automation-controller, argo-events, zarf, kubescape, gitsign, grafana-alloy, trivy, argo-workflows, chezmoi, scorecard,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, external-secrets-operator, kubescape, gitsign, grafana-alloy,...

GO-2023-1930 vulnerabilities

Vulnerabilities for packages: argo-events...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bento, opentelemetry-collector-contrib, splunk-otel-collector, amazon-cloudwatch-agent, sqlexporter, cluster-api-aws-controller, argo-events, grafana-alloy...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: harbor-registry, druid, buildkitd, rekor, sops, py3-azure-identity, ksops, cortex, tkn, argo-events, zarf, fulcio, cosign, kubescape, trivy, argo-workflows, chezmoi, opentelemetry-collector-contrib, policy-controller, py3-cassandra-medusa, rook, thanos,...