GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, karpenter, amazon-cloudwatch-agent-operator, kube-vip, splunk-otel-collector, kubernetes-ingress-defaultbackend, fluent-bit-plugin-loki, crossplane-provider-azure-sql, grafana-operator, helm-set-status, rancher-webhook, victoriametrics-cluster,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zarf, argo-workflows-fips, prometheus-operator, flux-source-controller, nerdctl, cloud-provider-aws, omnictl-multiarch, zitadel, trivy-operator-fips, knative-kafka-broker, opentofu-fips, rancher-agent, gitea-fips, kubescape-server-fips, tekton-pipelines, harbor, isti...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: kubescape, argo-cd, helm, kubernetes-dashboard, chezmoi, guac, rancher-agent, act, fscrypt, crossplane-provider-family-aws, crossplane-provider-aws-elasticache, cert-manager, crossplane-provider-aws-cloudfront, splunk-otel-collector, vault-benchmark,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kubescape, argo-cd, helm, kubernetes-dashboard, chezmoi, guac, rancher-agent, act, fscrypt, cert-manager, splunk-otel-collector, vault-benchmark, crossplane-provider-azure-sql, cilium-cli, docker-machine-driver-harvester, flux-source-controller,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubescape, argo-cd, k9s, helm, kubernetes-dashboard, knative-serving, prometheus, rancher, gitea, trivy-operator, nerdctl, rancher-agent, kine, fscrypt, cilium, prometheus-operator, spire-server, chisel, telegraf, cert-manager, aactl, skaffold, argocd-image-updater,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubescape, argo-cd, k9s, helm, kubernetes-dashboard, knative-serving, prometheus, rancher, gitea, trivy-operator, nerdctl, rancher-agent, kine, fscrypt, cilium, prometheus-operator, spire-server, chisel, telegraf, cert-manager, aactl, skaffold, argocd-image-updater,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: kubescape, argo-cd, helm, kubernetes-dashboard, chezmoi, guac, rancher-agent, act, fscrypt, cert-manager, cilium-cli, docker-machine-driver-harvester, flux-source-controller, pulumi-kubernetes-operator, kots, k3s, kubernetes, flux-image-automation-controller, loki,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: argo-cd, helm, kubernetes-dashboard, knative-serving, prometheus, rancher, nerdctl, rancher-agent, kine, fscrypt, cilium, prometheus-operator, spire-server, telegraf, cert-manager, aactl, external-dns, flux, minio, teleport, snyk-cli, cilium-cli,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: rekor, cephcsi-fips, crossplane-provider-azure-servicebus, gcp-compute-persistent-disk-csi-driver, tempo-fips, opensearch-datasource, tetragon, kapp-controller, kubernetes-csi-driver-nfs, crossplane-provider-aws-cloudfront-fips, k8ssandra-client, stunnerd,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: rekor, cephcsi-fips, crossplane-provider-azure-servicebus, gcp-compute-persistent-disk-csi-driver, tempo-fips, opensearch-datasource, tetragon, kapp-controller, kubernetes-csi-driver-nfs, crossplane-provider-aws-cloudfront-fips, k8ssandra-client, stunnerd,...

CLEANSTART-2026-MO16862 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-pjcq-xvwq-hhpj applied in versions: 1.20.2-r0

Multiple security vulnerabilities affect the cert-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9

CVE-2026-33814 affecting package cert-manager for versions less than 1.12.15-9. A patched version of the package is available...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, terraform-provider-grafana, kubescape, argo-cd, karpenter, kubernetes-replicator, helm, amazon-cloudwatch-agent-operator, cluster-api, trino, gcp-compute-persistent-disk-csi-driver, rancher-agent, nri-discovery-kubernetes, kube-vip,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, terraform-provider-grafana, kubescape, argo-cd, karpenter, kubernetes-replicator, helm, amazon-cloudwatch-agent-operator, cluster-api, trino, gcp-compute-persistent-disk-csi-driver, rancher-agent, nri-discovery-kubernetes, kube-vip,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, terraform-provider-grafana, kubescape, argo-cd, karpenter, trufflehog, kubernetes-replicator, helm, amazon-cloudwatch-agent-operator, kubo, cluster-api, trino, dapr, gcp-compute-persistent-disk-csi-driver, guac, frp, act, harbor-registry,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, terraform-provider-grafana, kubescape, argo-cd, karpenter, trufflehog, kubernetes-replicator, helm, amazon-cloudwatch-agent-operator, kubo, cluster-api, trino, dapr, gcp-compute-persistent-disk-csi-driver, guac, frp, act, harbor-registry,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, terraform-provider-grafana, kubescape, argo-cd, karpenter, trufflehog, kubernetes-replicator, helm, amazon-cloudwatch-agent-operator, kubo, cluster-api, trino, dapr, gcp-compute-persistent-disk-csi-driver, guac, frp, act, harbor-registry,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, terraform-provider-grafana, kubescape, argo-cd, karpenter, trufflehog, kubernetes-replicator, helm, amazon-cloudwatch-agent-operator, kubo, cluster-api, trino, dapr, gcp-compute-persistent-disk-csi-driver, guac, frp, act, harbor-registry,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cephcsi-fips, mountpoint-s3-csi-driver, crossplane-provider-azure-servicebus, gcp-compute-persistent-disk-csi-driver, net-kourier-fips, kapp-controller, openbao-k8s-fips, wavefront-collector-for-kubernetes, argo-events-fips, consul-fips,...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cephcsi-fips, mountpoint-s3-csi-driver, crossplane-provider-azure-servicebus, gcp-compute-persistent-disk-csi-driver, net-kourier-fips, kapp-controller, openbao-k8s-fips, wavefront-collector-for-kubernetes, argo-events-fips, consul-fips,...