GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, k6, rclone, argo-cd, chartmuseum, kyverno-policy-reporter-ui, terragrunt, prometheus-adapter, spire-server, grafana-pyroscope, grafana-alloy, continuity, zarf, external-dns, headlamp, karpenter, grafana, temporal-ui-server, mesosphere-vsphere-csi,...

GO-2026-6600 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, grafana-image-renderer, kubernetes-csi-external-snapshotter, spire-server, zarf, cloud-provider-azure, gogatekeeper, temporal-ui-server, mcp-grafana, kubernetes-csi-node-driver-registrar, rancher-agent, volume-modifier-for-k8s,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, grafana-image-renderer, kubernetes-csi-external-snapshotter, timestamp-authority, spire-server, s5cmd, actions-runner-controller, zarf, logstash-exporter, cloud-provider-azure, cloud-provider-aws, sonobuoy, git-credential-oauth,...

GHSA-874M-FCC5-9GQF vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, grafana-image-renderer, kubernetes-csi-external-snapshotter, php-fpmexporter, spire-server, timestamp-authority, s5cmd, actions-runner-controller, zarf, logstash-exporter, cloud-provider-azure, cloud-provider-aws, sonobuoy,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, nri-mongodb, grafana-image-renderer, kubernetes-csi-external-snapshotter, php-fpmexporter, spire-server, timestamp-authority, s5cmd, node-problem-detector, actions-runner-controller, zarf, logstash-exporter, cloud-provider-azure,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

CVE-2026-97031 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, nri-mongodb, grafana-image-renderer, kubernetes-csi-external-snapshotter, php-fpmexporter, spire-server, timestamp-authority, s5cmd, node-problem-detector, actions-runner-controller, zarf, logstash-exporter, cloud-provider-azure,...

CVE-2026-97030 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, grafana-image-renderer, kubernetes-csi-external-snapshotter, spire-server, zarf, cloud-provider-azure, gogatekeeper, temporal-ui-server, mcp-grafana, kubernetes-csi-node-driver-registrar, rancher-agent, volume-modifier-for-k8s,...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, grafana-image-renderer, kubernetes-csi-external-snapshotter, php-fpmexporter, spire-server, timestamp-authority, s5cmd, node-problem-detector, actions-runner-controller, zarf, logstash-exporter, cloud-provider-azure,...

CVE-2026-94440 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, azuredisk-csi, k6, grafana-image-renderer, kubernetes-csi-external-snapshotter, php-fpmexporter, spire-server, timestamp-authority, s5cmd, actions-runner-controller, zarf, logstash-exporter, cloud-provider-azure, cloud-provider-aws, sonobuoy,...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

AZL-107183 CVE-2026-97032 affecting package cert-manager 1.12.15-14

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107189 CVE-2026-78669 affecting package cert-manager 1.12.15-14

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107186 CVE-2026-78660 affecting package cert-manager 1.12.15-14

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107180 CVE-2026-78659 affecting package cert-manager 1.12.15-14

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107192 CVE-2026-78663 affecting package cert-manager 1.12.15-14

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107195 CVE-2026-92543 affecting package cert-manager 1.12.15-14

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: xeol, k8sgpt, flux-helm-controller, helm-push, cluster-api-helm-controller, manifest-tool, kyverno-notation-aws, cert-manager-cmctl, maru, tigera-operator, gitness, helm-set-status, kargo, kube-arangodb, rancher-helm, opentofu, helm-mapkubeapis, k9s...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: xeol, k8sgpt, flux-helm-controller, helm-push, cluster-api-helm-controller, manifest-tool, kyverno-notation-aws, cert-manager-cmctl, maru, tigera-operator, gitness, helm-set-status, kargo, kube-arangodb, rancher-helm, opentofu, helm-mapkubeapis, k9s...