GO-2024-2994 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, argocd-image-updater, kubeflow-pipelines, spark-operator, ip-masq-agent, kubernetes-csi-driver-hostpath, k8s-device-plugin, local-static-provisioner, cri-tools, kubernetes-dns-node-cache...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, kubeflow-pipelines, argocd-image-updater, ip-masq-agent, k8s-device-plugin, local-static-provisioner, kubernetes-dns-node-cache...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argocd-image-updater, zot, portieris, gitness, kots...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argocd-image-updater, zot, portieris, gitness, kots...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, cerbos, argocd-image-updater, apko, kubescape, guac, zarf, teleport, external-secrets-operator, snyk-cli, dagger, skaffold, gomplate, kaniko, gptscript, witness, pulumi-language-yaml, pulumi-kubernetes-operator, trivy, zot,...

GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3720 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, q, gitlab-pages, crossplane-provider-aws-memorydb, neuvector-scanner, crossplane-provider-aws-sns, kubescape, conftest, crossplane-provider-aws-cloudfront, cri-tools, nri-apache, sigstore-scaffolding,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: aactl, kubernetes-dashboard, argocd-image-updater, bom, kpt...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: kaf, crossplane-provider-azure-storage, gitlab-pages, crossplane-provider-aws-memorydb, crossplane-provider-aws-sns, kubescape, crossplane-provider-aws-cloudfront, loki, crossplane-provider-azure-authorization, falcoctl, prometheus, pulumi-language-dotnet,...

CVE-2026-70398

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...

CVE-2026-72526

A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource CR without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to...

CVE-2026-70398 Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...

CVE-2026-70398 Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace

A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer...