GO-2025-3900 vulnerabilities

Vulnerabilities for packages: zitadel, istio-fips, neuvector-sigstore-interface-fips, rancher-security-scan, bank-vaults, grafana-fips, kyverno, beats, k9s-fips, kyverno-notation-aws-fips, tkn-fips, mattermost-fips, beats-fips, jitsucom-bulker, ratify-fips, boring-registry-fips, pluto-fips,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: kargo, sops, cosign, neuvector, temporal-ui-server-fips, temporal-ui-server, minio, kube-rbac-proxy, zot, flux-source-controller, external-secrets-fips, rook, goreleaser, k3s, sigstore-scaffolding, argo-workflows-fips, tkn, oauth2-proxy, gomplate, kots, fulcio-fips,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: k8sgpt, spire-server, druid, falcoctl, hugo, tekton-chains, thanos, zot, bank-vaults, boring-registry, sqlpad, cortex, fluent-bit-plugin-loki, ksops, terragrunt, sops, kubescape, buildkitd, py3-cassandra-medusa, guac, harbor-registry, airflow, flux, goreleaser, up,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, crossplane-provider-azure-managedidentity, spire-server, falcoctl, tekton-chains, zot, bank-vaults, flux-image-automation-controller, terragrunt, ksops, sops, kubescape, kubernetes-event-exporter, buildkitd, actions-runner-controller, gomplate,...

CLEANSTART-2026-DW12764 Security fixes in bank-vaults 1.32.1-r1

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85856

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: authentik, chainloop-cli-fips, kargo, syft, google-guest-agent-manager, prometheus-podman-exporter, sops, dagdotdev, amazon-ssm-agent-fips, kubo, gotrue, spicedb, clickhouse-backup-fips, terraform-provider-google-fips, gitaly-fips, witness,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: syft, sops, dagdotdev, spicedb, helm-operator-fips, terraform-provider-google-fips, gitaly-fips, prometheus-alertmanager, witness, percona-server-mongodb-operator, sftpgo-plugin-pubsub, kyverno, kaniko-fips, cass-operator, prometheus-adapter, argocd-image-updater,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: zitadel, istio-fips, neuvector-sigstore-interface-fips, rancher-security-scan, bank-vaults, grafana-fips, kyverno, beats, k9s-fips, kyverno-notation-aws-fips, tkn-fips, mattermost-fips, beats-fips, jitsucom-bulker, ratify-fips, boring-registry-fips, pluto-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, azure-workload-identity-webhook, kubescape-operator, rancher-telemetry, cluster-api-gcp-controller, kubernetes-dashboard-web, cluster-api-provider-vsphere, undock, prometheus-alertmanager, hivemind, terraform-provider-kubernetes, velero,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: dagdotdev, bank-vaults, rancher-machine, blobfuse2, linkerd2-proxy-init, gostatsd, php-fpmexporter, vexctl, kube-vip, vault-benchmark, cloud-provider-aws, local-path-provisioner, shfmt, addon-resizer, kuberay-operator, custom-pod-autoscaler-operator, git-lfs,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: dagdotdev, bank-vaults, rancher-machine, blobfuse2, linkerd2-proxy-init, gostatsd, php-fpmexporter, vexctl, kube-vip, vault-benchmark, cloud-provider-aws, local-path-provisioner, shfmt, addon-resizer, kuberay-operator, custom-pod-autoscaler-operator, git-lfs,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: k8sgpt, spire-server, druid, falcoctl, hugo, tekton-chains, thanos, zot, bank-vaults, boring-registry, sqlpad, cortex, fluent-bit-plugin-loki, ksops, terragrunt, sops, kubescape, buildkitd, py3-cassandra-medusa, guac, harbor-registry, airflow, flux, goreleaser, up,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: kots, falcoctl, spire-server, tekton-chains, zot, bank-vaults, terragrunt, grpc-health-probe, sops, kubescape, vexctl, gomplate, weaviate, oauth2-proxy, guac, k3s, skopeo, goreleaser, aactl, wolfictl, tkn, kube-rbac-proxy, fulcio, cosign, step,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, buildkitd, falcoctl-fips, up, slsa-verifier, terraform-provider-sendgrid, bank-vaults-fips, kiam, kube-oidc-proxy, kubescape, kubeflow-fips, plutono-fips, spark-operator, src, prometheus-adapter-fips, dynamic-localpv-provisioner-fips,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: trillian, pulumi, k8sgpt-operator, metacontroller, cosign, hey, flux-notification-controller, prometheus-elasticsearch-exporter-fips, minio, zot, flux-image-automation-controller, flux-source-controller, kiam, bom, prometheus-alertmanager,...