GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kpt, guac, prometheus-blackbox-exporter, crossplane-provider-aws-memorydb, grafana-agent-operator, cluster-api-gcp-controller, manifest-tool, ko, maru, cert-manager-webhook-pdns, pgpool2exporter, tekton-chains, kube-vip-cloud-provider, percona-server-mongodb-operator...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, coder-fips, kubernetes-dashboard, calico-fips, traefik, zarf-fips, argo-cd, argo-workflows-fips, reports-server, knative-serving-fips, aactl, mattermost-fips, rancher-agent, k9s, argo-workflows, spire-server, traefik-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux, fscrypt, kubernetes-dashboard, k9s, argocd-image-updater, loki, mattermost, argo-cd, zarf, containerd, knative-serving, minio, trivy-operator, trivy, skaffold, flux-image-automation-controller, opentelemetry-collector, rancher, helm, cloud-provider-aws, kots,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: guac, glab, crossplane-provider-azure-storage, tflint, terraform-provider-tls, cluster-api-azure-controller, ko, step, opentelemetry-collector, pulumi-language-yaml, cloud-provider-aws, spire-server, kaf, mods, nfpm, ksops, go-discover, tekton-chains,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: guac, crossplane-provider-aws-memorydb, glab, crossplane-provider-keycloak, crossplane-provider-azure-storage, crossplane-provider-aws-iam, tflint, terraform-provider-tls, cluster-api-azure-controller, ko, crossplane-provider-family-aws, step, opentelemetry-collector...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: flux, fscrypt, teleport, kubernetes-dashboard, loki, mattermost, argo-cd, containerd, knative-serving, minio, docker-cli-buildx, opentelemetry-collector, rancher, helm, cloud-provider-aws, kots, buildah, spire-server, kaf, prometheus-operator, kubernetes, cert-manage...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: guac, step, opentelemetry-collector, pulumi-language-yaml, cloud-provider-aws, spire-server, kaf, nfpm, go-discover, dagger, snyk-cli, istio, openbao, step-issuer, aactl, rancher, flux-source-controller, flux, mattermost, syft, trivy, skaffold, pulumi-language-java,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux, fscrypt, kubernetes-dashboard, k9s, argocd-image-updater, loki, mattermost, argo-cd, zarf, containerd, knative-serving, minio, trivy-operator, trivy, skaffold, flux-image-automation-controller, opentelemetry-collector, rancher, helm, cloud-provider-aws, kots,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, tfsec, tempo-fips, newrelic-k8s-metrics-adapter-fips, net-kourier, gitlab-kas-fips, dapr-fips, crossplane-provider-azure-powerbidedicated, databricks-cli-fips, packer, zarf-fips, argo-events-fips, argo-cd, chainctl-fips, cerbos,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, tfsec, tempo-fips, newrelic-k8s-metrics-adapter-fips, net-kourier, gitlab-kas-fips, dapr-fips, crossplane-provider-azure-powerbidedicated, databricks-cli-fips, packer, zarf-fips, argo-events-fips, argo-cd, chainctl-fips, cerbos,...

CLEANSTART-2026-MO16862 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-pjcq-xvwq-hhpj applied in versions: 1.20.2-r0

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9. A patched version of the package is available...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, crossplane-provider-aws-memorydb, trino, crossplane-provider-azure-storage, kube-fluentd-operator, nri-discovery-kubernetes, kube-vip, crossplane-provider-family-aws, cert-exporter, amazon-cloudwatch-agent-operator, spire-server,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, crossplane-provider-aws-memorydb, trino, crossplane-provider-azure-storage, kube-fluentd-operator, nri-discovery-kubernetes, kube-vip, crossplane-provider-family-aws, cert-exporter, amazon-cloudwatch-agent-operator, spire-server,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, guac, bank-vaults, aws-efs-csi-driver, crossplane-provider-aws-memorydb, glab, trino, crossplane-provider-azure-storage, kube-fluentd-operator, dbmate, croc, nri-apache, nri-discovery-kubernetes, kube-vip, manifest-tool, octo-sts,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, guac, bank-vaults, aws-efs-csi-driver, crossplane-provider-aws-memorydb, glab, trino, crossplane-provider-azure-storage, kube-fluentd-operator, dbmate, croc, nri-apache, nri-discovery-kubernetes, kube-vip, manifest-tool, octo-sts,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, guac, bank-vaults, aws-efs-csi-driver, crossplane-provider-aws-memorydb, glab, trino, crossplane-provider-azure-storage, kube-fluentd-operator, dbmate, croc, nri-apache, nri-discovery-kubernetes, kube-vip, manifest-tool, octo-sts,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, guac, bank-vaults, aws-efs-csi-driver, crossplane-provider-aws-memorydb, glab, trino, crossplane-provider-azure-storage, kube-fluentd-operator, dbmate, croc, nri-apache, nri-discovery-kubernetes, kube-vip, manifest-tool, octo-sts,...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, crossplane-provider-aws-appflow-fips, crossplane-provider-aws-lightsail-fips, net-kourier, gitlab-kas-fips, virt-operator-fips, crossplane-provider-azure-powerbidedicated, argo-events-fips, argo-cd, vault-k8s,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, crossplane-provider-aws-appflow-fips, crossplane-provider-aws-lightsail-fips, net-kourier, gitlab-kas-fips, virt-operator-fips, crossplane-provider-azure-powerbidedicated, argo-events-fips, argo-cd, vault-k8s,...