GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: redis-operator, etcd, juicefs-csi-driver, kubernetes, cloudflared, infinispan-operator, kubevela, op-geth, amazon-cloudwatch-agent, jitsucom-bulker, emissary, guac, verticadb-operator, rancher-telemetry, aws-node-termination-handler...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp-fips, beats, crossplane-provider-gitlab-fips, cloudprober, gptscript, longhorn-manager-fips, crossplane-provider-aws-vpc-fips, ingress-nginx-controller, cortex, aws-fsx-csi-driver-fips, cloudflared-fips, crossplane-provider-aws-kafka,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp-fips, beats, crossplane-provider-gitlab-fips, cloudprober, gptscript, longhorn-manager-fips, crossplane-provider-aws-vpc-fips, ingress-nginx-controller, cortex, aws-fsx-csi-driver-fips, cloudflared-fips, crossplane-provider-aws-kafka,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-csi, opencost, crossplane-provider-aws-dynamodb, hey, cass-operator, crossplane-provider-aws-sns, kube-metrics-adapter, rancher-system-agent, zot, buildkitd, fluxcd-kustomize-mutating-webhook, tkn, flux-kustomize-controller, clickhouse-operator,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, longhorn-manager-fips, ingress-nginx-controller, local-path-provisioner, aws-fsx-csi-driver-fips, crossplane-provider-aws-kafka, container-object-storage-interface, jupyterhub-k8s-image-awaiter-fips, dex, k8sgateway-fips, kiali,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: rancher-fleet, kiali, linkerd2, vcluster, k8sgpt-operator, infinispan-operator, kargo, falcoctl, trivy, zarf, headlamp, k8sgpt, kube-arangodb, cloudnative-pg, rancher, postgres-operator, helm, velero, k9s, gitlab-runner, argocd-image-updater, consul-k8s, kwok,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: etcd, opencost, supercronic, newrelic-k8s-metadata-injection, kafka-proxy, neuvector-scanner, hey, envoy-ratelimit, sriov-network-device-plugin, zot, fluxcd-kustomize-mutating-webhook, tkn, hugo-extended, clickhouse-operator, ghaudit, kyverno-notation-aws,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: aws-otel-collector, k8sgateway, rabbitmq-messaging-topology-operator, kiali, etcd, openbao, openfga, falcoctl, opencost, opentofu, thanos, opentelemetry-collector, dex, prometheus-adapter, kubernetes-csi-node-driver-registrar, opentelemetry-operator, rancher,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: terragrunt, velero-plugin-for-gcp-fips, beats, crossplane-provider-gitlab-fips, cloudprober, longhorn-manager-fips, crossplane-provider-aws-emr, crossplane-provider-aws-vpc-fips, ingress-nginx-controller, crossplane-provider-aws-guardduty-fips, cortex, melange,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey, harbor-registry,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, kube-vip-cloud-provider, kwok, hey,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: mockgen, promxy, kubecolor, velero-plugin-for-csi, bom, etcd, minio-object-browser, falcoctl, ini-file, src-fingerprint, opentofu, sbom-convert, wgcf, kafka-proxy, prometheus-adapter, delve, contour, xcaddy, dagdotdev, gosu, kube-vip-cloud-provider, kwok, hey,...