GO-2026-6094 vulnerabilities

Vulnerabilities for packages: telegraf, k3s, kube-rbac-proxy, gitlab-kas, kubernetes-csi-external-snapshotter, tetragon, descheduler, rancher-system-agent, openbao, opentelemetry-operator, apisix-ingress-controller, datadog-operator, argocd-image-updater, cluster-api, crossplane, tekton-chains,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: juicefs, vault-secrets-webhook, manifest-tool, speedtest-go, bazelisk, harbor-scanner-trivy, local-static-provisioner, sops, goreleaser, tempo, crossplane, falco-no-driver, contour, helm-docs, kubernetes, nats, undock, conftest, prometheus-operator, step, kots,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: juicefs, policy-controller, timoni, kor, manifest-tool, vault-secrets-webhook, wuzz, secrets-store-csi-driver-provider-aws, kustomize, rancher-system-agent, local-static-provisioner, docker-machine-driver-linode, opentofu, sops, goreleaser,...

CLEANSTART-2026-VP54958 Security fixes in kubernetes-csi-external-attacher-fips 4.10.0-r0

Package kubernetes-csi-external-attacher-fips version 4.10.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

CVE-2026-59948

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...

APM Java Agent Local Privilege Escalation

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...

PYSEC-2026-634 APM Java Agent Local Privilege Escalation

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: knative-net-istio-fips, timescaledb-parallel-copy, cfssl-fips, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, jaeger-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, nri-rabbitmq,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: knative-net-istio-fips, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, jaeger-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, crossplane-provider-aws-efs, newrelic-infrastructure-agent-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: juicefs, policy-controller, timoni, kor, manifest-tool, vault-secrets-webhook, wuzz, secrets-store-csi-driver-provider-aws, kustomize, rancher-system-agent, local-static-provisioner, docker-machine-driver-linode, opentofu, sops, goreleaser,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: manifest-tool, wuzz, terraform-docs, falco-no-driver, conftest, newrelic-fluent-bit-output, croc, bank-vaults, newrelic-infra-operator, kubelet-csr-approver, govulncheck, licenseclassifier, nginx-prometheus-exporter, vault-benchmark, ferretdb, verticadb-operator,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: manifest-tool, wuzz, terraform-docs, conftest, newrelic-fluent-bit-output, croc, bank-vaults, newrelic-infra-operator, kubelet-csr-approver, govulncheck, licenseclassifier, nginx-prometheus-exporter, vault-benchmark, ferretdb, rancher-machine, kapp-controller,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: juicefs, policy-controller, timoni, kor, manifest-tool, vault-secrets-webhook, wuzz, secrets-store-csi-driver-provider-aws, kustomize, rancher-system-agent, local-static-provisioner, docker-machine-driver-linode, opentofu, sops, goreleaser,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: manifest-tool, wuzz, terraform-docs, conftest, newrelic-fluent-bit-output, croc, bank-vaults, newrelic-infra-operator, kubelet-csr-approver, govulncheck, licenseclassifier, nginx-prometheus-exporter, vault-benchmark, ferretdb, rancher-machine, kapp-controller,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, nri-rabbitmq, wave, crossplane-provider-aws-efs, git-lfs-fips,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, nri-rabbitmq, wave, crossplane-provider-aws-efs, git-lfs-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, wave, crossplane-provider-aws-efs, git-lfs-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, jaeger-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, nri-rabbitmq, wave, crossplane-provider-aws-efs,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, jaeger-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, nri-rabbitmq, wave, crossplane-provider-aws-efs,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy, fleet-server, crossplane-provider-aws-eks-fips, crossplane-provider-kubernetes-fips, pvc-autoresizer-fips, jaeger-fips, prometheus-elasticsearch-exporter-fips, ingress-nginx-controller-fips, nri-rabbitmq, wave, crossplane-provider-aws-efs,...