GO-2025-3802 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kargo, rancher-fleet, rancher-helm, cilium-cli, eksctl, helm-docs, flux-source-controller, kots, helm-operator, cluster-api-helm-controller, helm-push, k8ssandra-client, cert-manager-cmctl, k8sgpt, flux-helm-controller, zarf, trivy, k9s, tw, cerbos,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rclone, argo-cd, rancher-fleet, cerbos, teleport, scorecard, gitaly, syft, telegraf, terragrunt, flux...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, grafana-alloy, kargo, rancher-fleet, wolfictl, witness, apko, gitsign, grype, trivy-operator, flux-source-controller, gitlab-runner, nuclei, kots, kyverno, gptscript, guac, kubescape, crossplane, skaffold, dagger, kubevela, zarf,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rclone, argo-cd, rancher-fleet, cerbos, teleport, scorecard, gitaly, syft, telegraf, terragrunt...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: dive, aws-privateca-issuer, gcsfuse, swagger, kubernetes-dashboard-auth, lazydocker, terraform-provider-azapi, docker-machine-driver-harvester, spire-controller-manager, helm-push, terraform, rabbitmq-messaging-topology-operator, nri-mysql, azure-service-operator,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, src, undock, grafana-alloy, libnvidia-container, nerdctl, mattermost, cilium-cli, apko, grype, kube-fluentd-operator, vexctl, buildkitd, kubernetes-csi-node-driver-registrar, kots, grafana-operator, kine, pinact, rekor, dataplaneapi, telegraf,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: spire-server-fips, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-orbital, crossplane-function-patch-and-transform, crossplane-provider-aws-s3-fips, scorecard, k8s-image-swapper-fips, terraform-fips, coredns, vertical-pod-autoscaler,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: spire-server-fips, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-orbital, crossplane-function-patch-and-transform, crossplane-provider-aws-s3-fips, scorecard, k8s-image-swapper-fips, terraform-fips, coredns, vertical-pod-autoscaler,...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rclone, argo-cd, rancher-fleet, cerbos, teleport, scorecard, gitaly, syft, telegraf, terragrunt...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, rclone, argo-cd, rancher-fleet, cerbos, teleport, scorecard, gitaly, syft, telegraf, terragrunt...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, seaweedfs-rocksdb, chainloop-cli-fips, upwind-agent, telegraf, gitlab-rails-ce-fips, scorecard, terragrunt-fips, gitaly, grafana-fips, syft, rclone, terragrunt, external-secrets-operator, packer-fips, cerbos-fips, argo-cd, teleport,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, seaweedfs-rocksdb, chainloop-cli-fips, upwind-agent, telegraf, gitlab-rails-ce-fips, scorecard, terragrunt-fips, gitaly, grafana-fips, syft, rclone, terragrunt, external-secrets-operator, packer-fips, cerbos-fips, argo-cd, teleport,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: argo-events, flux-image-automation-controller, pulumi-language-yaml, gitlab-rails-ce-fips, scorecard, gitaly, kubevela, syft, flux-source-controller, argo-workflows, packer, argo-cd, chainctl, pulumi-language-java, teleport, rancher-fleet, kots, cloudbeat,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: kuma, goose, spire-server-fips, gitlab-kas, gitaly, vault-fips, argo-workflows, dapr, caddy, teleport, step-ca, chainloop-control-plane-fips, gitness, kots, grafana-alloy-fips, goose-fips, flyte, pgtimetable, commercial-chainloop-backend, openbao, src, temporal-fips,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: envoy-gateway, rancher-fleet, cilium-cli, trivy-operator, eksctl, helm-docs, flux-source-controller, kots, helm-operator, cluster-api-helm-controller, helm-push, k8ssandra-client, cert-manager-cmctl, kube-arangodb, kubescape, headlamp, tigera-operator, zarf, trivy,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: envoy-gateway, rancher-fleet, cilium-cli, trivy-operator, eksctl, helm-docs, flux-source-controller, kots, helm-operator, cluster-api-helm-controller, helm-push, k8ssandra-client, cert-manager-cmctl, kube-arangodb, kubescape, headlamp, tigera-operator, zarf, trivy,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kuma, helm-set-status, helm-push, helm-exporter-fips, helm-diff-fips, helm-mapkubeapis, kube-arangodb-fips, kubescape, jfrog-cli, cloudbeat-fips, cluster-api-helm-controller, chaos-mesh, eksctl, istio, tigera-operator-fips, gitlab-operator-fips, cilium-cli,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, crane, kargo, net-kourier, sbom-convert, postgres-operator, weaviate, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, hugo-extended, aws-application-networking-k8s, rancher-webhook, cilium,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: helm-diff-fips, scorecard, terraform-fips, coredns, regclient, tofu-controller-fips, gitness, buildkite-agent, kots, rancher-fleet-fips, kbld, crane-fips, mattermost-fips, kubernetes-csi-driver-nfs-fips, mesosphere-vsphere-csi, gitleaks, filebrowser, rancher-machine,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: helm-diff-fips, scorecard, terraform-fips, coredns, regclient, tofu-controller-fips, gitness, buildkite-agent, kots, rancher-fleet-fips, kbld, crane-fips, mattermost-fips, kubernetes-csi-driver-nfs-fips, mesosphere-vsphere-csi, gitleaks, filebrowser, rancher-machine,...