GO-2025-3900 vulnerabilities

Vulnerabilities for packages: mattermost-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface-fips, beats, grafana-fips, zitadel, istio-fips, bank-vaults, docker-compose-fips, ratify-fips, kyverno, k9s-fips, pluto-fips, tkn-fips, rancher-security-scan, jitsucom-bulker,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy-fips, melange, goreleaser, kots, timestamp-authority-fips, step, argo-workflows-fips, gitsign, aactl, slsa-verifier, vault-csi-provider, guac, cosign, tekton-chains, skaffold, dex-fips, neuvector, step-ca, kubescape, policy-controller-fips, sops, k3s,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: step, argo-events, secrets-store-csi-driver-provider-azure, flux-kustomize-controller, fulcio, hugo-extended, ksops, falcoctl, spire-server, argo-workflows, prometheus-operator, guac, flux-image-reflector-controller, flux, bank-vaults, policy-controller, restic,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: argo-events, src-fingerprint, flux-kustomize-controller, flux-notification-controller, fulcio, neuvector-sigstore-interface, kargo, gh, ksops, falcoctl, spire-server, guac, aactl, crossplane-provider-azure, flux-image-reflector-controller, flux, k3d, slsa-verifier,...

CLEANSTART-2026-DW12764 Security fixes in bank-vaults 1.32.1-r1

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: melange, goreleaser, harbor-registry-fips, timestamp-authority-fips, kaniko-fips, step, syft-fips, gogatekeeper, tempo-fips, hydra-fips, keda, authentik, sftpgo-plugin-kms, spiffe-helper-fips, cloudprober-fips, seaweedfs-fips, consul, splunk-otel-collector-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: flux-notification-controller-fips, metrics-server, kaniko-fips, syft-fips, cloud-provider-azure-fips, cluster-api-provider-vsphere, gogatekeeper, argo-rollouts-fips, hydra-fips, knative-net-istio-fips, keda, sftpgo-plugin-kms, cloudprober-fips, aws-ebs-csi-driver-fip...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: mattermost-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface-fips, beats, grafana-fips, zitadel, istio-fips, bank-vaults, docker-compose-fips, ratify-fips, kyverno, k9s-fips, pluto-fips, tkn-fips, rancher-security-scan, jitsucom-bulker,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: spiffe-helper, delve, promxy, ipfs-cluster, restic, atlantis, kubernetes-csi-external-attacher, swagger, velero-plugin-for-csi, docker-machine-driver-harvester, mage, nri-prometheus, gobuster, vault-k8s, dive, ctop, rootlesskit, timestamp-authority,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vault-benchmark, dagdotdev, newrelic-fluent-bit-output, php-fpmexporter, vault-k8s, kuberay-operator, confluent-common-docker, ctop, gostatsd, octo-sts, bank-vaults, nats, sftpgo-plugin-pubsub, cloud-provider-aws, blobfuse2, sftpgo-plugin-geoipfilter, vexctl, gitsign...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: vault-benchmark, dagdotdev, newrelic-fluent-bit-output, php-fpmexporter, vault-k8s, kuberay-operator, confluent-common-docker, ctop, gostatsd, octo-sts, bank-vaults, nats, sftpgo-plugin-pubsub, cloud-provider-aws, blobfuse2, sftpgo-plugin-geoipfilter, vexctl, gitsign...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: step, argo-events, secrets-store-csi-driver-provider-azure, flux-kustomize-controller, fulcio, hugo-extended, ksops, falcoctl, spire-server, argo-workflows, prometheus-operator, guac, flux-image-reflector-controller, flux, bank-vaults, policy-controller, restic,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: step, flux-kustomize-controller, fulcio, kargo, falcoctl, minio, spire-server, argo-workflows, skaffold, temporal, guac, aactl, temporal-ui-server, cloudflared, slsa-verifier, bank-vaults, policy-controller, timestamp-authority, goreleaser, ko, rekor, rook, gitsign,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow-fips, prometheus-adapter-fips, plutono-fips, kube-oidc-proxy, prometheus-blackbox-exporter, kubescape, spark-operator, aws-efs-csi-driver-fips, smarter-device-manager-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, metrics-server, chartmuseum, kots, aws-efs-csi-driver-fips, terraform-provider-sendgrid, git-lfs, aactl, timoni, hugo, kube-logging-operator, grpcurl, nodetaint, fuse-overlayfs-snapshotter, cue, dive, slsa-verifier, vault-csi-provider, cosign,...