GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, spicedb, kube-rbac-proxy, cloud-provider-gcp-cloud-controller-manager, kube-vip-cloud-provider, cluster-api, kubernetes, flux-helm-controller, metrics-server, cluster-api-azure-controller, zot, tetragon, kubescape, grafana,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: tempo, mesosphere-vsphere-csi, cni-plugins, flyte, certificate-transparency, sftpgo-plugin-pubsub, thanos, helm, lazydocker, victoriametrics, local-static-provisioner, pdfcpu, consul-k8s, ratify, kbld, kubernetes, cargobump, litefs, redpanda, metrics-server,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, whereabouts, kube-logging-operator-custom-runner, crossplane-provider-aws-iam, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, ctop, kubernetes-event-exporter, maru, sftpgo-plugin-pubsub,...

CLEANSTART-2026-VP54958 Security fixes in kubernetes-csi-external-attacher-fips 4.10.0-r0

Package kubernetes-csi-external-attacher-fips version 4.10.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

CVE-2026-59948

Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...

PYSEC-2026-634 APM Java Agent Local Privilege Escalation

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, lvm-driver-fips, neuvector, backup-restore-operator, boring-registry, gcp-compute-persistent-disk-csi-driver, tekton-chains-fips, docker-compose, azure-service-operator-fips, neuvector-sigstore-interface, istio, helm-diff-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, cert-exporter-fips, volume-modifier-for-k8s, addon-resizer, lvm-driver-fips, neuvector, backup-restore-operator, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: external-dns, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper, kbld, go-jsonnet, nri-f5, spire-server, kubernetes-csi-driver-nfs, cosign, falcosidekick, nginx-prometheus-exporter, dask-gateway, crossplane-provider-aws-ec2, dockerize,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, whereabouts, crossplane-provider-aws-iam, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, kubernetes-event-exporter, maru, sftpgo-plugin-pubsub, yace, azcopy, git-lfs, verticadb-operator,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: external-dns, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper, kbld, go-jsonnet, nri-f5, spire-server, kubernetes-csi-driver-nfs, cosign, falcosidekick, nginx-prometheus-exporter, dask-gateway, crossplane-provider-aws-ec2, dockerize,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, whereabouts, kube-logging-operator-custom-runner, crossplane-provider-aws-iam, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, ctop, kubernetes-event-exporter, maru, sftpgo-plugin-pubsub,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: external-dns, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper, kbld, go-jsonnet, nri-f5, spire-server, kubernetes-csi-driver-nfs, cosign, falcosidekick, nginx-prometheus-exporter, dask-gateway, crossplane-provider-aws-ec2, dockerize,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, neuvector, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, nfs-subdir-external-provisioner-fips, helm-operator, ipfs-cluster-fips, azure-service-operator-fips, kustomize,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, neuvector, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, nfs-subdir-external-provisioner-fips, helm-operator, ipfs-cluster-fips, azure-service-operator-fips, kustomize,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, neuvector, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, nfs-subdir-external-provisioner-fips, wazero-fips, helm-operator, ipfs-cluster-fips, azure-service-operator-fips, kustomize,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, neuvector, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, nfs-subdir-external-provisioner-fips, wazero-fips, helm-operator, ipfs-cluster-fips, azure-service-operator-fips, kustomize,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, neuvector, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, nfs-subdir-external-provisioner-fips, helm-operator, ipfs-cluster-fips, azure-service-operator-fips, kustomize,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: lvm-driver-fips, neuvector, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, nfs-subdir-external-provisioner-fips, wazero-fips, helm-operator, ipfs-cluster-fips, azure-service-operator-fips, kustomize,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, nsc, supercronic, external-dns, kubernetes-dashboard-metrics-scraper, kserve, spicedb, kbld, go-jsonnet, metrics-server, nri-f5, php-fpmexporter, prometheus-alertmanager, spire-server, kubernetes-csi-driver-nfs,...