GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, external-secrets-fips, vexctl, cosign-fips, falcoctl, mc, kubescape, gitsign, spire-server-fips, minio, falcoctl-fips, spire-server, tekton-chains...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: boring-registry, external-secrets-fips, mc-fips, minio-fips, falcoctl, mc, boring-registry-fips, spire-server-fips, minio, falcoctl-fips, spire-server...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: k9s-fips, zitadel, ratify-fips, gitlab-cng-fips, pluto-fips, bank-vaults, beats, istio-fips, gitlab-cng, rancher-security-scan, grafana-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface-fips, boring-registry-fips, beats-fips, kyverno, jitsucom-bulker,...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: boring-registry, falcoctl, minio, spire-server, mc...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, falcoctl, minio, vexctl, tekton-chains, spire-server, kubescape, mc, gitsign...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: boring-registry, hugo, zot, bank-vaults, druid, rekor, sops, argo-events, tekton-chains, flyte, spire-server, py3-cassandra-medusa, zarf, thanos, terragrunt, falcoctl, timestamp-authority, nuclei, opentelemetry-collector-contrib, tempo, tkn, flux-source-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, newrelic-nri-statsd, kube-bench, hydra, bank-vaults, cluster-autoscaler, nfs-subdir-external-provisioner, gobuster, kserve-modelmesh-serving, octo-sts, crossplane-provider-aws-cloudformation, ingress-nginx-controller,...

CLEANSTART-2026-VU50374 Security fixes in boring-registry-fips 0.15.5-r1

Package boring-registry-fips version 0.15.5-r1 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...

CLEANSTART-2026-OD61763 Security fixes in boring-registry-fips 0.15.5-r2

Package boring-registry-fips version 0.15.5-r2 fixes 2 vulnerabilities: CVE-2025-30204, ghsa-mh63-6h87-95cp...

CLEANSTART-2026-LG82948 Security fixes in boring-registry 0.17.0-r0

Package boring-registry version 0.17.0-r0 fixes 6 vulnerabilities: CVE-2026-33186, CVE-2026-34986, CVE-2026-29181, CVE-2026-39883, CVE-2026-1229...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, gatus-fips, goreleaser, image-factory, yunikorn-k8shim, prometheus-alertmanager, policy-controller, kube-mgmt-fips, grype, crossplane-fips, vault-fips, juicefs, policy-controller-fips, kube-arangodb, consul-k8s, clickhouse-operator,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: helm-fips, flux-kustomize-controller, livekit-cli, crossplane-provider-aws-lambda, goreleaser, image-factory, flux-kustomize-controller-fips, syft-fips, crossplane-provider-aws-rds, crossplane-provider-aws-rds-fips, grype-db, kyverno-policy-reporter-plugins-kyverno,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: k9s-fips, zitadel, ratify-fips, gitlab-cng-fips, pluto-fips, bank-vaults, beats, istio-fips, gitlab-cng, rancher-security-scan, grafana-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface-fips, boring-registry-fips, beats-fips, kyverno, jitsucom-bulker,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nfpm, aws-nuke, gobuster, kind, metrics-server, kpt, kubernetes-csi-livenessprobe, nvidia-container-toolkit, newrelic-fluent-bit-output, http-echo, kubescape, k8sgateway, rancher-machine, kubeflow-katib, ko, rabbitmq-default-user-credential-updater,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: nfpm, gobuster, cluster-api-provider-vsphere, kind, gcsfuse, metrics-server, wazero, kpt, kubernetes-csi-livenessprobe, http-echo, k8sgateway, mc, rancher-machine, kubeflow-katib, ko, pulumi-language-java, checksec, terraform-provider-sendgrid, metacontroller, stern,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: atlantis, kubernetes-csi-node-driver-registrar, kube-bench, harbor, newrelic-nri-statsd, age, hydra, chartmuseum, nfs-subdir-external-provisioner, spiffe-helper, gobuster, nri-prometheus, octo-sts, pulumi-kubernetes-operator, rootlesskit, terraform-provider-azuread,...