GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, cass-operator, cert-manager-istio-csr, cilium, rke2-cloud-provider, apisix-ingress-controller, datadog-operator, spicedb, descheduler, tkn, datadog-agent, gitlab-kas, telegraf, cert-manager, cluster-api-azure-controller,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, configmap-reload, dbmate, addon-resizer, hivemind, juicefs, libnvidia-container, flyte, harbor, telegraf, secrets-store-csi-driver-provider-azure, ini-file, ko, contour, k3d, local-static-provisioner, gke-gcloud-auth-plugin, karma, kubernetes...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, dbmate, juicefs, chisel, pguser, dockerize, nri-redis, traefik, cloud-provider-vsphere, kubernetes-dns-node-cache, crossplane-provider-aws-dynamodb, telegraf, volume-modifier-for-k8s, golangci-lint, rancher-machine, ip-masq-agent,...

CLEANSTART-2026-VP54958 Security fixes in kubernetes-csi-external-attacher-fips 4.10.0-r0

Package kubernetes-csi-external-attacher-fips version 4.10.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

CVE-2026-59948

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...

PYSEC-2026-634 APM Java Agent Local Privilege Escalation

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: chronyexporter-fips, azuredisk-csi, kube-arangodb-fips, kubelet-csr-approver-fips, elastic-agent, kubescape, nri-haproxy-fips, openbao-k8s, kyverno-policy-reporter-fips, step-ca, amazon-cloudwatch-agent-operator-fips, azcopy, grafana-operator, nri-consul-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: chronyexporter-fips, azuredisk-csi, kube-arangodb-fips, elastic-agent, kubescape, kyverno-policy-reporter-fips, step-ca, amazon-cloudwatch-agent-operator-fips, azcopy, prometheus-elasticsearch-exporter, snyk-cli, kubernetes-dashboard-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, dbmate, juicefs, chisel, pguser, dockerize, traefik, cloud-provider-vsphere, kubernetes-dns-node-cache, crossplane-provider-aws-dynamodb, telegraf, volume-modifier-for-k8s, golangci-lint, rancher-machine, ip-masq-agent,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: dbmate, chisel, golangci-lint, rancher-machine, authservice, aws-sigv4-proxy, docker-machine-driver-linode, cilium-cli, kuberay-operator, azure-workload-identity-webhook, rancher-system-agent, mc, rancher-loglevel, step-kms-plugin, aws-eks-pod-identity-agent,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: spire-controller-manager, dbmate, juicefs, chisel, pguser, dockerize, nri-redis, traefik, cloud-provider-vsphere, kubernetes-dns-node-cache, crossplane-provider-aws-dynamodb, telegraf, volume-modifier-for-k8s, golangci-lint, rancher-machine, ip-masq-agent,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: dbmate, chisel, golangci-lint, rancher-machine, authservice, aws-sigv4-proxy, docker-machine-driver-linode, cilium-cli, kuberay-operator, azure-workload-identity-webhook, rancher-system-agent, mc, rancher-loglevel, step-kms-plugin, aws-eks-pod-identity-agent,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: dbmate, chisel, golangci-lint, rancher-machine, authservice, aws-sigv4-proxy, docker-machine-driver-linode, cilium-cli, kuberay-operator, azure-workload-identity-webhook, rancher-system-agent, mc, rancher-loglevel, step-kms-plugin, aws-eks-pod-identity-agent,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azuredisk-csi, kube-arangodb-fips, elastic-agent, nri-haproxy-fips, openbao-k8s, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-operator-fips, azcopy, grafana-operator, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azuredisk-csi, kube-arangodb-fips, elastic-agent, nri-haproxy-fips, openbao-k8s, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-operator-fips, azcopy, grafana-operator, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azuredisk-csi, kube-arangodb-fips, elastic-agent, nri-haproxy-fips, openbao-k8s, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-operator-fips, azcopy, grafana-operator, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azuredisk-csi, kube-arangodb-fips, elastic-agent, nri-haproxy-fips, openbao-k8s, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-operator-fips, azcopy, grafana-operator, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azuredisk-csi, kube-arangodb-fips, elastic-agent, nri-haproxy-fips, openbao-k8s, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-operator-fips, azcopy, grafana-operator, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azuredisk-csi, kube-arangodb-fips, elastic-agent, openbao-k8s, kyverno-policy-reporter-fips, amazon-cloudwatch-agent-operator-fips, azcopy, grafana-operator, prometheus-elasticsearch-exporter, sonobuoy-fips, k3d, prometheus-process-exporter-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: hugo, terraform-provider-random, chisel, ko, rancher-machine, dfc, argocd-image-updater, kuberay-operator, nri-apache, rancher-system-agent, rancher-loglevel, harbor-scanner-trivy, govulncheck, gomplate, rabbitmq-default-user-credential-updater, seaweedfs,...