GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: caddy, dataplaneapi, pulumi-language-dotnet, kots, vexctl, glab, redka, docker, docker-cli-buildx, prometheus, grafana-operator, kine, grype, snyk-cli, src, apko, melange, istio, pulumi, fuse-overlayfs-snapshotter, cloud-sql-proxy, undock, zarf, grafana, opentofu,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: k8s-agents-operator-fips, cluster-api-gcp-controller, kaniko, rekor, cert-manager-csi-driver-fips, gitlab-kas-fips, crossplane-provider-aws-kafka, tkn, crossplane-provider-azure-resources, envoy-gateway-fips, kubeflow-pipelines, opentelemetry-ebpf-instrumentation-fip...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: k8s-agents-operator-fips, cluster-api-gcp-controller, kaniko, rekor, cert-manager-csi-driver-fips, gitlab-kas-fips, crossplane-provider-aws-kafka, tkn, crossplane-provider-azure-resources, envoy-gateway-fips, kubeflow-pipelines, opentelemetry-ebpf-instrumentation-fip...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: rclone, teleport, rancher-fleet, syft, argo-cd, telegraf, cerbos, terragrunt, scorecard, gitaly...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: rclone, teleport, rancher-fleet, syft, argo-cd, telegraf, cerbos, terragrunt, scorecard, gitaly...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: cerbos, rclone, rclone-fips, upwind-agent, skaffold-fips, gitlab-rails-ce, chainloop-cli-fips, rancher-fleet-fips, packer-fips, chainloop-cli, amazon-ssm-agent, terragrunt, gitlab-rails-ce-fips, gitaly, telegraf, syft, seaweedfs-rocksdb-fips, syft-fips, argo-cd, nemo...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: cerbos, rclone, rclone-fips, upwind-agent, skaffold-fips, gitlab-rails-ce, chainloop-cli-fips, rancher-fleet-fips, packer-fips, chainloop-cli, amazon-ssm-agent, terragrunt, gitlab-rails-ce-fips, gitaly, telegraf, syft, seaweedfs-rocksdb-fips, syft-fips, argo-cd, nemo...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cerbos, kaniko, argocd-image-updater, kots, kubescape, trivy-operator-fips, wolfictl, trufflehog-fips, packer-fips, steampipe, amazon-ssm-agent, gitsign, osv-scanner, crossplane, argo-workflows, gitlab-rails-ce-fips, trufflehog, pulumi-language-dotnet, xeol-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: cerbos, sftpgo-plugin-eventsearch, kots, gitlab-kas-fips, temporal-server, bento-fips, envoy-gateway-fips, kubeflow-pipelines, hydra-fips, pgtimetable, commercial-chainloop-backend, steampipe, gitlab-cng-fips, commercial-grafana, step-fips, rke2-cloud-provider-fips,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, envoy-gateway, helm-mapkubeapis, kubescape, kube-arangodb, rancher-fleet, teleport, kots, harbor, linkerd2, helm-operator, chartmuseum, headlamp, zot, flux-source-controller, istio, cert-manager-cmctl, eksctl, helm-set-status, zarf, tw,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, envoy-gateway, helm-mapkubeapis, kubescape, kube-arangodb, rancher-fleet, teleport, kots, harbor, linkerd2, helm-operator, chartmuseum, headlamp, zot, flux-source-controller, istio, cert-manager-cmctl, eksctl, helm-set-status, zarf, tw,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cerbos, cluster-api-helm-controller, tigera-operator, kubescape-server-fips, zarf, kubescape-server, kots, flux-fips, helm-docs, kubescape, chartmuseum, flux-source-controller-fips, cilium-cli, envoy-gateway, flux, harbor, tw, eksctl, cloudbeat, helm-exporter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: atlantis, nri-f5, aws-eks-pod-identity-agent, cortex, nodetaint, dbmate, witness, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, apko, pgpool2exporter, boring-registry, helm-set-status, cloudnative-pg, hugo, k8s-device-plugin...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: gitlab-kas-fips, kaf, tkn, aws-flb-cloudwatch, commercial-chainloop-cli, kbld, libnvidia-container, sonobuoy, commercial-grafana, kubernetes, crossplane, mesosphere-vsphere-csi-fips, ingress-nginx-controller, traefik-fips, xeol-fips, crossplane-fips, k9s-fips, task,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: onepassword-operator, kubeflow-katib, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, kaf, kubernetes-dashboard-api, tkn, secrets-store-csi-driver-provider-aws, aws-flb-cloudwatch, oauth2-proxy, commercial-chainloop-cli, cue-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: gitlab-kas-fips, kaf, tkn, aws-flb-cloudwatch, commercial-chainloop-cli, kbld, libnvidia-container, sonobuoy, commercial-grafana, kubernetes, crossplane, mesosphere-vsphere-csi-fips, ingress-nginx-controller, traefik-fips, xeol-fips, crossplane-fips, k9s-fips, task,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, onepassword-operator, yunikorn-web, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, kubeflow-katib, onepassword-operator, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, yunikorn-web, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, kubeflow-katib, onepassword-operator, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, yunikorn-web, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: yunikorn-web, cluster-api-provider-vsphere, nri-f5-fips, kubescape-http-request-fips, spire-controller-manager, commercial-grafana, emissary, cluster-api-ipam-provider-in-cluster, mesosphere-vsphere-csi-fips, step-issuer, prometheus-redis-exporter, crossplane-fips,...