GO-2026-5363 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: grafana, crossplane-provider-azure-storage, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, external-secrets-operator, x509-certificate-exporter, goreleaser, gobuster, nfpm,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-docs, k8ssandra-client, chart-testing, kots, helm-push, rancher-helm, helm-operator, trivy, zot, flux, tw, cluster-api-helm-controller, cilium-cli, eksctl, flux-helm-controller, k9s, pluto, zarf, chartmuseum, flux-source-controller, cert-manager-cmctl, kubescape...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kargo, k8sgpt, vcluster, k3d, osv-scanner, kots, minio, spegel, rqlite, trivy, zot, hubble-ui, tflint, opentelemetry-collector-contrib, conftest, cilium-cli, grafana-agent-operator, temporal, kwok, dagger, falcosidekick, sigstore-scaffolding, sops, zarf, terragrunt,...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kuma, zarf, flux, kots, helm-push, flux-source-controller, cilium-cli, rancher-fleet...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kuma, zarf, flux, kots, helm-push, flux-source-controller, cilium-cli, rancher-fleet...

GO-2026-5289 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: kargo, k8sgpt, linkerd2, helm-docs, k8ssandra-client, chart-testing, kots, helm-push, rancher-helm, helm-operator, cerbos, trivy, zot, rancher-fleet, tw, cluster-api-helm-controller, cilium-cli, eksctl, istio, flux-helm-controller, k9s, pluto, zarf, chartmuseum,...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: xeol, rclone, minio, zot, grafana, yunikorn-k8shim, gitea, sftpgo-plugin-auth, flux, trufflehog, cert-manager-csi-driver, ratify, bento, teleport, kyverno-notation-aws, cert-manager-istio-csr, juicefs, rancher-webhook, external-secrets-operator, rancher, kyverno,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, step-issuer, cert-exporter...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, step-issuer, mariadb-operator, percona-server-mongodb-operator, opentelemetry-operator, cert-manager-csi-driver...

GO-2026-4958 vulnerabilities

Vulnerabilities for packages: kargo, k8sgpt, linkerd2, kubernetes, argo-workflows, vcluster, skaffold, velero, k8ssandra-client, verticadb-operator, kots, redis-operator, kubevela, gitlab-kas, helm, cri-tools, rancher-agent, cilium, trivy, rancher-fleet, kubeflow-pipelines, infinispan-operator,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: docker-compose, cloudprober, kubeflow-katib, k8sgpt, metrics-server, kubernetes-csi-external-attacher, minio-object-browser, tetragon, tkn, cluster-api-azure-controller, verticadb-operator, kots, spegel, prometheus, cerbos, cri-tools, ingress-nginx-controller,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow, tekton-chains, gatus, k8sgpt, kubernetes-csi-external-attacher, argo-workflows, metrics-server, minio-object-browser, tekton-pipelines, litefs, tkn, kots, ko, helm-operator, newrelic-nri-statsd, prometheus, scorecard, ingress-nginx-controlle...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, tekton-chains, gatus, k8sgpt, tkn, cluster-api-azure-controller, kots, ko, terraform-provider-azurerm, prometheus, scorecard, sealed-secrets, flux-kustomize-controller, crossplane-provider-aws-iam, crossplane-provider-aws-firehose, eksctl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow, kube-bench, gatus, minio-object-browser, kubernetes-csi-external-attacher, tetragon, xeol, litefs, verticadb-operator, redis-operator, helm-operator, newrelic-nri-statsd, spegel, scorecard, kubescape-operator, cri-tools,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: xeol, cloudprober, tekton-chains, gatus, k8sgpt, argo-workflows, tekton-pipelines, tkn, vitess, velero, kots, ko, scorecard, cerbos, kubescape-operator, flux-kustomize-controller, spire-controller-manager, tempo, thanos, vexctl, terragrunt, traefik, kaniko,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: tekton-chains, gatus, argo-workflows, tkn, kots, ko, flux-kustomize-controller, spire-controller-manager, vexctl, terragrunt, traefik, octo-sts, timestamp-authority, opentofu, melange, buildah, rabbitmq-messaging-topology-operator, frp, skopeo, k3s, oauth2-proxy, k3d...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: docker-compose, cloudprober, kube-bench, gatus, k8sgpt, kubeflow-katib, argo-workflows, metrics-server, tekton-chains, tkn, velero, kots, ko, helm-operator, newrelic-nri-statsd, prometheus, spegel, scorecard, q, terraform-provider-azurerm,...

CLEANSTART-2026-JL48383 Security fixes in cert-manager-cmctl-fips 2.5.0-r1

Package cert-manager-cmctl-fips version 2.5.0-r1 fixes 7 vulnerabilities: ghsa-jxpm-75mh-9fp7, ghsa-8xwf-rjm4-xvhv, ghsa-xf85-363p-868w, ghsa-vh4v-2xq2-g5cg, CVE-2026-50151...