GO-2025-3900 vulnerabilities

Vulnerabilities for packages: beats-fips, pluto-fips, tkn-fips, istio-fips, kyverno, grafana-fips, ratify-fips, rancher-security-scan, kyverno-notation-aws-fips, zitadel, beats, boring-registry-fips, jitsucom-bulker, bank-vaults, mattermost-fips, neuvector-sigstore-interface-fips,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: cosign-fips, kubernetes-dashboard, slsa-verifier, weaviate, timestamp-authority-fips, vexctl, frp, gitsign, step, external-secrets-fips, rabbitmq-messaging-topology-operator, skaffold, sops, spire-server-fips, melange, kube-rbac-proxy, rook, terragrunt, tkn,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: argo-events, sigstore-scaffolding, fluent-bit-plugin-loki, flux-kustomize-controller, up, hugo-extended, spire-server, cosign, grafana-agent-operator, tkn, flyte, wal-g, thanos, harbor-registry, chezmoi, druid, grafana-mimir, zarf, timestamp-authority, guac,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, argo-events, flux-notification-controller, crossplane-provider-azure-managedidentity, k3s, gitsign, flux-kustomize-controller, rabbitmq-messaging-topology-operator, sigstore-scaffolding, flux-helm-controller,...

CLEANSTART-2026-DW12764 Security fixes in bank-vaults 1.32.1-r1

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-85856

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: pulumi, argo-cd, gotrue, cosign-fips, chainctl, seaweedfs-fips, flux-kustomize-controller-fips, kyverno-fips, frankenphp-8.4, step-kms-plugin, dapr, oauth2-proxy-fips, harbor, seaweedfs-operator, terraform-provider-acme, external-secrets-fips, chainctl-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubevela, flux-kustomize-controller-fips, blob-csi, kyverno-fips, metrics-server, azuredisk-csi, azure-service-operator, harbor, ansible-operator-fips, kubernetes-dns-node-cache-fips, cloud-provider-aws-fips, gitlab-rails-ce-fips, tekton-pipelines-fips,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: beats-fips, pluto-fips, tkn-fips, istio-fips, kyverno, grafana-fips, ratify-fips, rancher-security-scan, kyverno-notation-aws-fips, zitadel, beats, boring-registry-fips, jitsucom-bulker, bank-vaults, mattermost-fips, neuvector-sigstore-interface-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: elvish, manifest-tool, traefik, pulumi-language-java, k3d, terraform-provider-tls, trillian, gostatsd, dask-gateway, trivy-operator, fulcio, cloud-sql-proxy, falco-exporter, velero, kubernetes-event-exporter, kapp, kubernetes-csi-external-attacher, neuvector-dbgen,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: dagdotdev, kube-vip, gitsign, custom-pod-autoscaler-operator, octo-sts, confluent-common-docker, vault-k8s, cloud-provider-aws, php-fpmexporter, kube-vip-cloud-provider, kserve-rest-proxy, vault-benchmark, blobfuse2, container-object-storage-interface, git-lfs,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: dagdotdev, kube-vip, gitsign, custom-pod-autoscaler-operator, octo-sts, confluent-common-docker, vault-k8s, cloud-provider-aws, php-fpmexporter, kube-vip-cloud-provider, kserve-rest-proxy, vault-benchmark, blobfuse2, container-object-storage-interface, git-lfs,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: argo-events, sigstore-scaffolding, fluent-bit-plugin-loki, flux-kustomize-controller, up, hugo-extended, spire-server, cosign, grafana-agent-operator, tkn, flyte, wal-g, thanos, harbor-registry, chezmoi, druid, grafana-mimir, zarf, timestamp-authority, guac,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, melange, rabbitmq-messaging-topology-operator, k3s, sigstore-scaffolding, gitsign, flux-kustomize-controller, oauth2-proxy, minio, frp, nerdctl, cosign, spire-server, tkn, zarf, ko, guac, apko, timestamp-authority, weaviate, step-ca, temporal, kot...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, prometheus-blackbox-exporter, k3d, aws-efs-csi-driver-fips, spark-operator, prometheus-adapter-fips, kubevela, kubeflow, terraform-provider-sendgrid, kubernetes-csi-livenessprobe, cortex, slsa-verifier, smarter-device-manager-fips,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, kaf, pulumi, k8sgpt-operator, pulumi-language-yaml, spark-operator, kpt, prometheus-adapter-fips, kubevela, metrics-server, kubeflow, kubernetes-dashboard, slsa-verifier, kubernetes-ingress-defaultbackend, weaviate,...