GO-2025-3900 vulnerabilities

Vulnerabilities for packages: zitadel, grafana, rancher-security-scan, mattermost-fips, kyverno, boring-registry-fips, ratify-fips, kyverno-notation-aws-fips, gitlab-cng-fips, istio-fips, neuvector-sigstore-interface-fips, docker-compose-fips, beats-fips, pluto-fips, jitsucom-bulker, beats,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: dex-fips, fulcio-fips, neuvector-fips, grpc-health-probe, kargo, kots, terragrunt, caddy-fips, cloudflared, frp, guac, skaffold, spire-server-fips, gomplate, kube-rbac-proxy, zot, kubernetes-dashboard, kube-rbac-proxy-fips, kubescape, policy-controller,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: boring-registry, policy-controller, airflow, chezmoi, falcoctl, secrets-store-csi-driver-provider-azure, argo-events, rekor, flux-kustomize-controller, cortex, opentelemetry-collector-contrib, k8sgpt, spire-server, trino, buildkitd, py3-cassandra-medusa,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, policy-controller, src-fingerprint, falcoctl, actions-runner-controller, k3s, gh, kargo, scorecard, argo-events, rekor, flux-kustomize-controller, opentelemetry-collector-contrib, slsa-verifier, spire-server, pulumi-kubernetes-operator,...

CLEANSTART-2026-DW12764 Security fixes in bank-vaults 1.32.1-r1

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, cloudprober, dex-fips, kargo, rook-fips, cloudflared, grafana-alloy-fips, headlamp, spicedb-fips, falcosidekick-fips, istio-fips, kaniko, skaffold, consul-k8s-fips, cephcsi-fips, step-issuer, vault-benchmark, syft, cert-manager-istio-csr, zot,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, teleport-operator-fips, cloudprober, eck-operator-fips, headlamp, spicedb-fips, azuredisk-csi-fips, falcosidekick-fips, istio-fips, kubernetes-csi-external-health-monitor, kaniko, skaffold, cass-operator-fips, syft,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: zitadel, grafana, rancher-security-scan, mattermost-fips, kyverno, boring-registry-fips, ratify-fips, kyverno-notation-aws-fips, gitlab-cng-fips, istio-fips, neuvector-sigstore-interface-fips, docker-compose-fips, beats-fips, pluto-fips, jitsucom-bulker, beats,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kube-vip-cloud-provider, hydra, logstash-exporter, cluster-api-helm-controller, hivemind, gops, apisix-ingress-controller, cert-exporter, kubeflow, nodetaint, skopeo, helm-mapkubeapis, pguser, kafka-proxy, protoc-gen-go-grpc, supercronic, php-fpmexporter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, kube-vip-cloud-provider, custom-pod-autoscaler-operator, gostatsd, shfmt, nats, linkerd2-proxy-init, rancher-machine, kube-vip, docker-credential-ecr-login, hivemind, newrelic-nri-statsd, cloud-provider-aws, ctop, pvc-autoresizer, local-path-provisioner,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: git-lfs, kube-vip-cloud-provider, custom-pod-autoscaler-operator, gostatsd, shfmt, nats, linkerd2-proxy-init, rancher-machine, kube-vip, docker-credential-ecr-login, hivemind, newrelic-nri-statsd, cloud-provider-aws, ctop, pvc-autoresizer, local-path-provisioner,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: boring-registry, policy-controller, airflow, chezmoi, falcoctl, secrets-store-csi-driver-provider-azure, argo-events, rekor, flux-kustomize-controller, cortex, opentelemetry-collector-contrib, k8sgpt, spire-server, trino, buildkitd, py3-cassandra-medusa,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, cloudflared, nerdctl, policy-controller, skaffold, temporal, falcoctl, k3s, dgraph, kargo, rekor, flux-kustomize-controller, dex, kubernetes-dashboard, slsa-verifier, spire-server, minio, ko, grpc-health-probe, gomplate, goreleaser, terragrunt, guac,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, prometheus-adapter-fips, prometheus-stackdriver-exporter, vault-csi-provider, dynamic-localpv-provisioner-fips, dgraph, kiam, conftest-fips, cortex, src, bank-vaults-fips, scorecard, slsa-verifier, timestamp-authority-fips, smarter-device-manager-fip...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: haproxy-ingress, aws-ebs-csi-driver, kube-logging-operator, mc, dive, grpcurl, kots, cue, stakater-reloader, kaf, frp, smarter-device-manager-fips, nfs-subdir-external-provisioner-fips, bom, atlantis, skaffold, trillian, volume-modifier-for-k8s-fips, metrics-server,...