CVE-2026-11976

MonsterInsights Pro updates 10.2.0 and 10.2.2 were distributed from the official update bucket and contain a malicious file, class-system-check.php, due to a compromised AWS S3 bucket. Three distinct variants were observed on 2026-06-11, all using the same AES-256-GCM key, indicating a single thr...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: verticadb-operator, gostatsd, coredns, cosign, tigera-operator, flux-image-automation-controller, harbor-cli, knative-client, vault-benchmark, litefs, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-azure, polaris, task, dkron,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: verticadb-operator, gostatsd, coredns, cosign, tigera-operator, flux-image-automation-controller, harbor-cli, knative-client, vault-benchmark, litefs, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-azure, polaris, task, dkron,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: verticadb-operator, gostatsd, coredns, cosign, tigera-operator, flux-image-automation-controller, harbor-cli, knative-client, vault-benchmark, litefs, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-azure, polaris, task, dkron,...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: gostatsd, coredns, elvish, cosign, gosu, litefs, task, helm-set-status, sriov-network-device-plugin, contour, kube-logging-operator-custom-runner, undock, docker-credential-acr-env, dynamic-localpv-provisioner, sigstore-scaffolding, glow, mage, vertical-pod-autoscale...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: gostatsd, coredns, elvish, cosign, gosu, litefs, task, helm-set-status, sriov-network-device-plugin, contour, kube-logging-operator-custom-runner, undock, docker-credential-acr-env, dynamic-localpv-provisioner, sigstore-scaffolding, glow, mage, vertical-pod-autoscale...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, rancher-machine, boring-registry, grpcurl, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets, trillian,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: iptables-wrappers, gostatsd, aws-signer-notation-plugin, azure-ipam, metrics-server, grafana-pyroscope, elvish, gosu, rancher-machine, boring-registry, grpcurl, nodetaint, capslock, litefs, tfsec, cert-manager-cmctl, spicedb-operator, ip-masq-agent, sealed-secrets,...