GO-2024-2632 vulnerabilities

Vulnerabilities for packages: minio, external-secrets-fips, spire-server-fips, falcoctl-fips, boring-registry, spire-server, minio-fips, mc-fips, boring-registry-fips, mc, falcoctl...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: gitsign, minio, external-secrets-fips, tekton-chains, spire-server-fips, falcoctl-fips, boring-registry, spire-server, vexctl, mc, kubescape, cosign-fips, falcoctl...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: bank-vaults, rancher-security-scan, beats, jitsucom-bulker, gitlab-cng-fips, grafana-fips, neuvector-sigstore-interface-fips, gitlab-cng, k9s-fips, zitadel, kyverno, boring-registry-fips, grafana, istio-fips, beats-fips, mattermost-fips, ratify-fips, pluto-fips,...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: falcoctl, minio, spire-server, mc, boring-registry...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: falcoctl, kubescape, minio, spire-server, mc, gitsign, vexctl, boring-registry, tekton-chains...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: up, policy-controller, rclone, cortex, flux-image-reflector-controller, tekton-chains, spire-server, buildkitd, flux-source-controller, nuclei, opentelemetry-collector, guac, hugo, k8sgpt, kubescape, fluent-bit-plugin-loki, harbor-registry, druid,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, whereabouts, postgres-operator,...

CLEANSTART-2026-VU50374 Security fixes in boring-registry-fips 0.15.5-r1

Package boring-registry-fips version 0.15.5-r1 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...

CLEANSTART-2026-OD61763 Security fixes in boring-registry-fips 0.15.5-r2

Package boring-registry-fips version 0.15.5-r2 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...

CLEANSTART-2026-LG82948 Security fixes in boring-registry 0.17.0-r0

Package boring-registry version 0.17.0-r0 fixes 6 vulnerabilities: CVE-2026-33186, CVE-2026-34986, CVE-2026-29181, CVE-2026-39883, CVE-2026-1229...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: spire-server-fips, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-orbital, crossplane-function-patch-and-transform, crossplane-provider-aws-s3-fips, scorecard, k8s-image-swapper-fips, terraform-fips, coredns, vertical-pod-autoscaler,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: q, argo-events, flux-image-automation-controller, crossplane-provider-aws-cognitoidentity-fips, helm-push, sops-fips, crossplane-provider-aws-s3, helm-diff-fips, pulumi-language-yaml, gitlab-rails-ce-fips, crossplane-provider-aws-efs, crossplane-provider-aws-s3-fips,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, rancher-security-scan, beats, jitsucom-bulker, gitlab-cng-fips, grafana-fips, neuvector-sigstore-interface-fips, gitlab-cng, k9s-fips, zitadel, kyverno, boring-registry-fips, grafana, istio-fips, beats-fips, mattermost-fips, ratify-fips, pluto-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: dive, flannel-cni-plugin, kargo, nri-kubernetes, sbom-convert, postgres-operator, smarter-device-manager, hugo-extended, k6, rancher-webhook, gitea, kserve-rest-proxy, steampipe, kube-logging-operator, haproxy-ingress, kuma, nri-haproxy, gitlab-pages, gitlab-kas, kpt...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: dive, cortex, crane, sbom-convert, age, smarter-device-manager, container-object-storage-interface, k6, rancher-webhook, xcover, timoni, atlantis, kube-logging-operator, velero-plugin-for-microsoft-azure, cargobump, sbom-scorecard, kpt, kube-bench, wave, hey, s5cmd,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: dive, policy-controller, gcsfuse, kubelet-csr-approver, kaf, crane, kube-state-metrics, logstash-exporter, lazydocker, juicefs, terraform-provider-azapi, falco-exporter, docker-machine-driver-harvester, vendir, spire-controller-manager, trivy-operator, yunikorn-web,...