GO-2026-5410 vulnerabilities

Vulnerabilities for packages: bento, ory-kratos, ory-kratos-fips, atlantis, argo-cd, argo-rollouts-fips, bento-fips, argo-events-fips, argo-rollouts, atlantis-fips, kyverno-policy-reporter, kubernetes-event-exporter, kubewatch, argo-cd-fips, argo-events, goreleaser, kubernetes-event-exporter-fips...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-fips, kargo, grafana-alloy-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector, opentelemetry-collector-fips, argo-cd, argo-rollouts-fips, grafana-alloy, keda, splunk-otel-collector, argo-workflows, argo-rollouts,...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, kubewatch, bento, goreleaser, argo-rollouts, atlantis, argo-cd, kubernetes-event-exporter, argo-events...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: grafana-alloy, amazon-cloudwatch-agent, argo-rollouts, kargo, tempo, kubeflow-pipelines, opentelemetry-collector-contrib, nats, splunk-otel-collector, k8sgpt, opentelemetry-collector, argo-workflows...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: ctop, containerd, emissary, external-secrets-operator, harbor, neuvector-scanner, prometheus-adapter, skopeo, cluster-api-helm-controller, libnvidia-container, crossplane-provider-aws-sns, gostatsd, crossplane-provider-aws-kms, node-problem-detector, spire-server,...

CLEANSTART-2026-SZ84105 Security fixes in argo-rollouts-fips 1.9.0-r0

Package argo-rollouts-fips version 1.9.0-r0 fixes 13 vulnerabilities: ghsa-93mq-9ffx-83m2, ghsa-cfpf-hrx2-8rv6, ghsa-gxhx-2686-5h9g, ghsa-mh63-6h87-95cp, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-IL70948 Security fixes in argo-rollouts 1.9.0-r0

Package argo-rollouts version 1.9.0-r0 fixes 13 vulnerabilities: ghsa-mh63-6h87-95cp, ghsa-p77j-4mvh-x3m3, ghsa-93mq-9ffx-83m2, ghsa-pc3f-x583-g7j2, ghsa-cfpf-hrx2-8rv6...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, headlamp-fips, kwok, cloudnative-pg-fips, k8sgpt-operator, longhorn-cli, trivy-fips, k3s, eksctl, k8ssandra-client, teleport-operator-fips, kubevela, kube-arangodb, k9s, postgres-operator, skaffold-fips, rancher, docker-cli-buildx-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, crossplane-provider-aws-iam, flux-helm-controller, crossplane-provider-aws-sns, crossplane-provider-aws-kms, flux, skaffold, flux-source-controller, gitaly, dagger, trivy, crossplane-provider-azure-storage, hydra, ksops,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: external-secrets-operator, crossplane-provider-aws-iam, flux-helm-controller, crossplane-provider-aws-sns, crossplane-provider-aws-kms, flux, skaffold, flux-source-controller, gitaly, dagger, trivy, crossplane-provider-azure-storage, hydra, ksops,...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps 1.16.1 security release

Errata advisory for Red Hat OpenShift GitOps 1.16.1 security release. The Red Hat OpenShift GitOps 1.16.1 release provides security updates to the Argo CD CLI, Argo Rollouts CLI and MicroShift GitOps. Security Fixes: openshift-gitops-1/argocd-rhel9: Improper URL Sanitization in Argo CD Repository...

GHSA-3F6R-QH9C-X6MM vulnerabilities

Vulnerabilities for packages: mods, karma, prometheus-adapter, sbomqs, velero-plugin-for-microsoft-azure, rabbitmq-messaging-topology-operator, spire-server, pdfcpu, hivemind, flux-source-controller, terraform, elvish, grpcurl, runc, smarter-device-manager, wazero, go-bindata, temporal,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: mods, karma, prometheus-adapter, sbomqs, velero-plugin-for-microsoft-azure, rabbitmq-messaging-topology-operator, spire-server, pdfcpu, hivemind, flux-source-controller, terraform, elvish, grpcurl, runc, smarter-device-manager, wazero, go-bindata, temporal,...

GHSA-29QP-CRVH-W22M vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws, terraform-provider-aws, crossplane-provider-aws-iam, openbao, crossplane-provider-aws-sns, crossplane-provider-azure-authorization, crossplane-provider-family-azure, crossplane-provider-aws-kms, tflint, velero-plugin-for-microsoft-azure,...