225 matches found
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: chartmuseum, argo-cd, sftpgo-plugin-auth, helm-set-status, cloud-provider-vsphere, crossplane-provider-azure-managedidentity, kubernetes-dashboard, fuse-overlayfs-snapshotter, karpenter, cilium, kube-state-metrics, nuclei, kargo, redka, crossplane-provider-keycloak,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ssm, dive, podinfo-fips, authservice, crossplane-provider-aws-wafv2, spilo, thanos-receive-controller-fips, cortex, terraform-provider-databricks, crane, fleet-server-fips, kargo, argo-events-fips, cloud-sql-proxy-fips, net-kourier,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ssm, dive, podinfo-fips, authservice, crossplane-provider-aws-wafv2, spilo, thanos-receive-controller-fips, cortex, terraform-provider-databricks, crane, fleet-server-fips, kargo, argo-events-fips, cloud-sql-proxy-fips, net-kourier,...
CLEANSTART-2026-TO88856 Security fixes for CVE-2023-7256, CVE-2024-7598, CVE-2024-8006, CVE-2025-1767, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-67499, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.31.2-r0, 3.31.2-r1, 3.31.2-r2
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VI42371 Security fixes for CVE-2025-13281, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.28.5-r2, 3.28.5-r4
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, wire-go, kube-logging-operator, fuse-overlayfs-snapshotter, kuberlr, aws-sigv4-proxy, local-static-provisioner, redka, src-fingerprint, crossplane-provider-aws-cloudformation, azure-service-operator, crossplane-provider-aws-dynamodb,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, helm-set-status, cloud-provider-vsphere, kubernetes-dashboard, chisel, gptscript, fuse-overlayfs-snapshotter, kuberlr, grafana-operator, aws-sigv4-proxy, local-static-provisioner, crossplane-provider-aws-rds, redka,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, kube-logging-operator, helm-set-status, cloud-provider-vsphere, kubernetes-dashboard, chisel, gptscript, fuse-overlayfs-snapshotter, kuberlr, grafana-operator, aws-sigv4-proxy, local-static-provisioner, crossplane-provider-aws-rds, redka,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, wire-go, kube-logging-operator, fuse-overlayfs-snapshotter, kuberlr, aws-sigv4-proxy, local-static-provisioner, redka, src-fingerprint, crossplane-provider-aws-cloudformation, azure-service-operator, crossplane-provider-aws-dynamodb,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, wire-go, kube-logging-operator, fuse-overlayfs-snapshotter, kuberlr, aws-sigv4-proxy, local-static-provisioner, redka, src-fingerprint, crossplane-provider-aws-cloudformation, azure-service-operator, crossplane-provider-aws-dynamodb,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, helm-set-status, cloud-provider-vsphere, kubernetes-dashboard, chisel, gptscript, fuse-overlayfs-snapshotter, kuberlr, grafana-operator, aws-sigv4-proxy, local-static-provisioner, crossplane-provider-aws-rds, redka,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, kube-logging-operator, helm-set-status, cloud-provider-vsphere, kubernetes-dashboard, chisel, gptscript, fuse-overlayfs-snapshotter, kuberlr, grafana-operator, aws-sigv4-proxy, local-static-provisioner, crossplane-provider-aws-rds, redka,...
CVE-2025-67499 vulnerabilities
Vulnerabilities for packages: calico-fips, nerdctl-fips, nerdctl, rke2-runtime, buildkitd-fips, datadog-agent, rootlesskit-fips, amazon-k8s-cni-fips, buildkitd, containerd-fips, flannel, docker-fips, azure-ipam, rootlesskit, istio-fips, docker, datadog-agent-fips, podman, multus-cni, istio,...
GHSA-JV3W-X3R3-G6RM vulnerabilities
Vulnerabilities for packages: calico-fips, nerdctl-fips, nerdctl, rke2-runtime, buildkitd-fips, datadog-agent, rootlesskit-fips, amazon-k8s-cni-fips, buildkitd, containerd-fips, flannel, docker-fips, azure-ipam, rootlesskit, istio-fips, docker, datadog-agent-fips, podman, multus-cni, istio,...
EUVD-2022-54538
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...
EUVD-2022-1122
Malicious code in bioql PyPI...
EUVD-2022-6001
Malicious code in bioql PyPI...
EUVD-2023-2890
Malicious code in bioql PyPI...