GO-2025-3900 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, rancher-security-scan, zitadel, kyverno-notation-aws-fips, beats, tkn-fips, pluto-fips, grafana-fips, docker-compose-fips, mattermost-fips, jitsucom-bulker, istio-fips, kyverno, k9s-fips, bank-vaults, beats-fips, grafana, ratify-fips,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: grpc-health-probe, sigstore-scaffolding, flux-kustomize-controller, temporal-ui-server-fips, slsa-verifier, caddy, external-secrets-fips, kube-rbac-proxy-fips, skopeo, argo-workflows, nerdctl, kubescape, weaviate, spire-server, guac, falcoctl-fips, apko, falcoctl,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, flyte, flux, chezmoi, timestamp-authority, py3-cassandra-medusa, argo-events, sops, trivy, rekor, cortex, spire-server, py3-azure-identity, flux-source-controller, trino, restic, fluent-bit-plugin-loki, zarf, druid, argo-workflows,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: policy-controller, k3s, buildkitd, flux, rabbitmq-messaging-topology-operator, src-fingerprint, timestamp-authority, argo-events, sops, rekor, snyk-cli, crossplane-provider-azure-storage, spire-server, flux-source-controller, crossplane-provider-family-azure, zarf,...

CLEANSTART-2026-DW12764 Security fixes in bank-vaults 1.32.1-r1

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85856

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: argo-cd, vault-benchmark, falcosidekick, kserve, sigstore-scaffolding, splunk-otel-collector, trufflehog-fips, kubescape-operator-fips, vault-secrets-webhook, argo-workflows, tekton-pipelines, kubo, skopeo-fips, kyverno-policy-reporter-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, falcosidekick, kserve, cortex-fips, trufflehog-fips, ops-agent, kubescape-operator-fips, vault-secrets-webhook, kine, argo-workflows, tekton-pipelines, azurefile-csi-fips, kwok, verticadb-operator-fips, dagger, envoy-gateway-fips,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, rancher-security-scan, zitadel, kyverno-notation-aws-fips, beats, tkn-fips, pluto-fips, grafana-fips, docker-compose-fips, mattermost-fips, jitsucom-bulker, istio-fips, kyverno, k9s-fips, bank-vaults, beats-fips, grafana, ratify-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, crane, regclient, cortex, go-licenses, sbom-scorecard, q, timescaledb-tune, vault-secrets-webhook, nova, protoc-gen-go, petname, timoni, metacontroller, openbao-k8s, rancher-telemetry, mockgen, velero-plugin-for-aws, argo-rollouts,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, dagdotdev, kserve-rest-proxy, kuberay-operator, sftpgo-plugin-pubsub, k8sgpt-operator, terraform-provider-time, docker-credential-ecr-login, sftpgo-plugin-geoipfilter, checksec, local-path-provisioner, nats, confluent-common-docker,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: git-lfs, dagdotdev, kserve-rest-proxy, kuberay-operator, sftpgo-plugin-pubsub, k8sgpt-operator, terraform-provider-time, docker-credential-ecr-login, sftpgo-plugin-geoipfilter, checksec, local-path-provisioner, nats, confluent-common-docker,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, flyte, flux, chezmoi, timestamp-authority, py3-cassandra-medusa, argo-events, sops, trivy, rekor, cortex, spire-server, py3-azure-identity, flux-source-controller, trino, restic, fluent-bit-plugin-loki, zarf, druid, argo-workflows,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, policy-controller, k3s, rabbitmq-messaging-topology-operator, timestamp-authority, sops, rekor, apko, spire-server, grpc-health-probe, flux-source-controller, zarf, argo-workflows, nerdctl, weaviate, ko, fulcio, gitsign, sigstore-scaffolding, tempora...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, aws-efs-csi-driver-fips, kube-oidc-proxy, aactl, dgraph, plutono-fips, spark-operator, prometheus-stackdriver-exporter, kubeflow, kubernetes-csi-livenessprobe-fips, cortex, slsa-verifier, bank-vaults-fips, conftest-fips,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kube-logging-logging-operator, kubeflow-katib, crossplane-provider-azure, gke-gcloud-auth-plugin, sigstore-scaffolding, flux-helm-controller, flux-kustomize-controller, gitness, dynamic-localpv-provisioner, slsa-verifier, caddy, prometheus-mysqld-exporter,...