GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-cloudsearch-fips, crossplane-provider-azure-resources, crossplane-provider-aws-wafv2-fips, eksctl, traefik-fips, kubedock-fips, cluster-api-ipam-provider-in-cluster,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k9s, headlamp, helm-mapkubeapis, chartmuseum, cerbos, istio, rancher-fleet, nova, envoy-gateway, trivy, chart-testing, kuma, zot, trivy-operator, kube-arangodb, k8ssandra-client, kubescape, zarf, cilium-cli, linkerd2, consul-k8s, tigera-operator,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k9s, headlamp, helm-mapkubeapis, chartmuseum, cerbos, istio, rancher-fleet, nova, envoy-gateway, trivy, chart-testing, kuma, zot, trivy-operator, kube-arangodb, k8ssandra-client, kubescape, zarf, cilium-cli, linkerd2, consul-k8s, tigera-operator,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: linkerd2-fips, headlamp-fips, flux-source-controller, consul-k8s, zot, cerbos-fips, helm-diff-fips, helm-mapkubeapis, k8ssandra-client, flux, tw, chaos-mesh-fips, cilium-cli, gitlab-operator, rancher-fleet-fips, teleport, cloudbeat-fips, headlamp, nova,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: cloudflared-fips, gitlab-rails-ce, rancher-agent, newrelic-infrastructure-agent, elastic-agent, apko-fips, argo-cd-fips, eksctl, traefik-fips, qemu-guesthelper, tigera-operator-fips, buildah-fips, kubernetes, wal-g, podman-fips, amazon-ssm-agent-fips, chartmuseum,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, gitlab-rails-ce, rancher-agent, newrelic-infrastructure-agent, elastic-agent, apko-fips, argo-cd-fips, eksctl, traefik-fips, qemu-guesthelper, tigera-operator-fips, buildah-fips, kubernetes, wal-g, podman-fips, amazon-ssm-agent-fips, chartmuseum,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, json-exporter-fips, jitsucom-bulker, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, virt-api,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, json-exporter-fips, jitsucom-bulker, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, virt-api,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, cloudflared-fips, databricks-cli-fips, gitlab-rails-ce, kubescape-operator-fips, delve, sftpgo-plugin-auth, hugo, json-exporter-fips, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, kube-logging-operator-custom-runner-fips, eksctl, polaris-fips, cluster-api-ipam-provider-in-cluster, terraform-provider-databricks-fips, nri-rabbitmq, podman-fips, git-lfs, cephcsi, fq, crossplane-provider-aws-ec2-fips, gosu, stern,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, podinfo, rancher-fleet, incert, src-fingerprint, vault-k8s, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, hcloud, sftpgo-plugin-eventsearch, dive, terraform-docs,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, podinfo, rancher-fleet, incert, src-fingerprint, vault-k8s, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, hcloud, sftpgo-plugin-eventsearch, dive, terraform-docs,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, podinfo, rancher-fleet, incert, src-fingerprint, vault-k8s, timoni, mc, timescaledb-parallel-copy, hcloud, sftpgo-plugin-eventsearch, dive, terraform-docs, opa-envoy,...

CLEANSTART-2026-CT39828 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-TS42581 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-SY95837 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: licenseclassifier, dbmate, pgpool2exporter, step-kms-plugin, cert-manager, bazelisk, modelmesh-runtime-adapter, petname, thanos-operator, policy-controller, falcosidekick, infinispan-operator, helm-mapkubeapis, stakater-reloader, podinfo, manifest-tool,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: licenseclassifier, dbmate, pgpool2exporter, step-kms-plugin, cert-manager, bazelisk, modelmesh-runtime-adapter, petname, thanos-operator, policy-controller, falcosidekick, infinispan-operator, helm-mapkubeapis, stakater-reloader, podinfo, manifest-tool,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: licenseclassifier, dbmate, pgpool2exporter, step-kms-plugin, cert-manager, bazelisk, modelmesh-runtime-adapter, petname, thanos-operator, policy-controller, falcosidekick, infinispan-operator, helm-mapkubeapis, stakater-reloader, podinfo, manifest-tool,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: licenseclassifier, dbmate, pgpool2exporter, step-kms-plugin, cert-manager, bazelisk, modelmesh-runtime-adapter, petname, thanos-operator, policy-controller, falcosidekick, infinispan-operator, helm-mapkubeapis, stakater-reloader, podinfo, manifest-tool,...