GO-2025-3802 vulnerabilities

Vulnerabilities for packages: kargo, cilium-cli, cert-manager-cmctl, kots, trivy, rancher-fleet, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, k9s, helm-docs, chartmuseum, envoy-gateway, zarf, flux-source-controller, linkerd2, cerbos, tw, zot, istio, chart-testing,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: teleport, gitaly, syft, rancher-fleet, telegraf, scorecard, external-secrets-operator, cerbos, argo-cd, terragrunt, rclone...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: teleport, gitaly, syft, rancher-fleet, telegraf, scorecard, flux, external-secrets-operator, cerbos, argo-cd, terragrunt, rclone...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: bom, teleport, chezmoi, kargo, pulumi, tfsec, kyverno, pulumi-language-java, flux, external-secrets-operator, argocd-image-updater, guac, kots, melange, src-fingerprint, trivy, rancher-fleet, argo-events, kaniko, skaffold, wolfictl, pulumi-language-dotnet, crossplane...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kubernetes-dashboard-api, nri-f5, tempo, rancher-system-agent, mockgen, cilium-cli, gobump, ini-file, cis-operator, flux, terraform-mcp-server, ko, polaris, falcoctl, timescaledb-tune, kpt, src, kubernetes-dashboard-auth, eksctl, controller-gen...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, buildah, telegraf, dask-gateway, pulumi, kyverno, prometheus, cilium-cli, prometheus-operator, flux, k3s, kots, melange, kine, src, pulumi-language-dotnet, docker-cli-buildx, caddy, k8s-device-plugin, traefik, scorecard, docker, redka,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, crossplane-provider-aws-networkmanager-fips, node-feature-discovery, crossplane-provider-azure-synapse, harbor-registry-fips, crossplane-provider-azure-signalrservice, spicedb-fips, crossplane-provider-aws-firehose,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, crossplane-provider-aws-networkmanager-fips, node-feature-discovery, crossplane-provider-azure-synapse, harbor-registry-fips, crossplane-provider-azure-signalrservice, spicedb-fips, crossplane-provider-aws-firehose,...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: teleport, gitaly, syft, rancher-fleet, telegraf, scorecard, external-secrets-operator, cerbos, argo-cd, terragrunt, rclone...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: teleport, gitaly, syft, rancher-fleet, telegraf, scorecard, external-secrets-operator, cerbos, argo-cd, terragrunt, rclone...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: telegraf, gitlab-rails-ce-fips, rclone, cerbos, packer-fips, rancher-fleet-fips, kyverno-fips, argo-cd, gitaly, chainloop-cli-fips, chainloop-cli, grafana-fips, seaweedfs-rocksdb-fips, seaweedfs-rocksdb, external-secrets-operator, flux, rancher-fleet, cerbos-fips,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: telegraf, gitlab-rails-ce-fips, rclone, cerbos, packer-fips, rancher-fleet-fips, kyverno-fips, argo-cd, gitaly, chainloop-cli-fips, chainloop-cli, grafana-fips, seaweedfs-rocksdb-fips, seaweedfs-rocksdb, external-secrets-operator, flux, rancher-fleet, cerbos-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: apko-fips, gitsign, rancher-fleet-fips, flux-source-controller, gitaly-fips, trufflehog, coder, bom, flux, gitea, grype-db, kyverno, nemo, syft, grype-fips, terragrunt-fips, pulumi-kubernetes-operator, argo-workflows-fips, crossplane-fips, trufflehog-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: ldap2pg, authentik, spicedb-fips, cloudnative-pg, gitlab-cng-fips, step-issuer-fips, commercial-grafana, seaweedfs, gitaly-fips, opentelemetry-collector-contrib, rke2-runtime, falcosidekick, hydra, temporal, step, azure-service-operator-fips, peerdb-flow,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-set-status, kube-arangodb, flux, cert-manager-cmctl, headlamp, harbor, kots, trivy, rancher-fleet, nova, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, trivy-operator, helm-mapkubeapis, helm-docs, k9s, chartmuseum, envoy-gatewa...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-set-status, kube-arangodb, flux, cert-manager-cmctl, headlamp, harbor, kots, trivy, rancher-fleet, nova, cluster-api-helm-controller, k8ssandra-client, helm-operator, eksctl, trivy-operator, helm-mapkubeapis, helm-docs, k9s, chartmuseum, envoy-gatewa...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-exporter, helm-exporter-fips, helm-push, helm-operator, kuma, consul-k8s, nova, trivy-fips, headlamp-fips, harbor, cerbos, chaos-mesh-fips, jfrog-cli, trivy-operator, zarf, linkerd2, envoy-gateway, kots, rancher-fleet-fips, trivy, helm-docs,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-f5, pulumi, rook, cert-manager-csi-driver, cilium-cli, kubernetes-dashboard-metrics-scraper, cis-operator, flux, argocd-image-updater, polaris, vertical-pod-autoscaler, filebrowser, cluster-api-ipam-provider-in-cluster, custom-pod-autoscaler-operator,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: apko-fips, omni-fips, nats, rancher-fleet-fips, crane-fips, flux-operator, paranoia, spegel, commercial-chainloop-cli, qemu-guesthelper, rclone-fips, crossplane-fips, elastic-agent, prometheus-elasticsearch-exporter, cilium-envoy, rancher-machine, dgraph, harbor,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: lvm-driver, harbor-registry-fips, apko-fips, omni-fips, mcp-grafana, terraform-provider-random-fips, cloud-provider-gcp-cloud-controller-manager-fips, crossplane-provider-aws-servicediscovery-fips, rancher-fleet-fips, aws-efs-csi-driver, blob-csi,...