CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-compose-fips, kube-mgmt, grype-db, consul-k8s-fips, envoy-gateway-fips, kargo, crossplane-fips, helm-fips, livekit-cli, k9s-fips, eksctl, k9s, newrelic-infrastructure-agent-fips, kube-arangodb-fips, kaniko, helm-exporter-fips, dagger, kubescape-operator, kots,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, kargo, vexctl, crossplane-provider-azure-securityinsights, crossplane-provider-aws-rds, rke2-runtime-fips, crossplane-provider-aws-cognitoidp-fips, haproxy-ingress, blob-csi-fips, vertical-pod-autoscaler-fips,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: trivy, zarf, helm-mapkubeapis, cluster-api-helm-controller, kube-arangodb, envoy-gateway, helm-docs, headlamp, cert-manager-cmctl, cerbos, trivy-operator, chart-testing, cilium-cli, eksctl, tw, harbor, helm-set-status, istio, consul-k8s, linkerd2, kuma,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: trivy, zarf, helm-mapkubeapis, cluster-api-helm-controller, kube-arangodb, envoy-gateway, helm-docs, headlamp, cert-manager-cmctl, cerbos, trivy-operator, chart-testing, cilium-cli, eksctl, tw, harbor, helm-set-status, istio, consul-k8s, linkerd2, kuma,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: trivy-operator, cerbos-fips, zarf, cilium-cli, headlamp-fips, kuma, cluster-api-helm-controller, cluster-api-helm-controller-fips, consul-k8s-fips, envoy-gateway-fips, helm-diff, linkerd2, trivy-fips, helm-push, nova-fips, trivy-operator-fips, pluto-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, kargo, crossplane-fips, cosign, helm-fips, rke2-runtime-fips, snyk-cli, grafana-fips, kube-arangodb-fips, libnvidia-container, kubernetes-csi-node-driver-registrar, amazon-ecs-cni-plugins-fips, knative-serving-fips, step-ca, crane-fips, jaeger,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kyverno, terraform-provider-time, telegraf, kubernetes-dashboard-auth-fips, kargo, kyverno-notation-aws, vexctl, crossplane-provider-keycloak, crossplane-fips, k8sgpt-operator, verticadb-operator, cosign, helm-fips, rke2-runtime-fips, snyk-cli, grafana-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, kargo, crossplane-fips, cosign, helm-fips, rke2-runtime-fips, snyk-cli, grafana-fips, kube-arangodb-fips, libnvidia-container, kubernetes-csi-node-driver-registrar, amazon-ecs-cni-plugins-fips, knative-serving-fips, step-ca, crane-fips, jaeger,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: kyverno, terraform-provider-time, telegraf, kubernetes-dashboard-auth-fips, kargo, kyverno-notation-aws, vexctl, crossplane-provider-keycloak, crossplane-fips, k8sgpt-operator, verticadb-operator, cosign, helm-fips, rke2-runtime-fips, snyk-cli, grafana-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, telegraf, terraform-provider-time, newrelic-k8s-metadata-injection, kubernetes-dashboard-auth-fips, pguser, nri-nginx, kargo, kyverno-notation-aws, custom-pod-autoscaler, crossplane-provider-keycloak, crossplane-fips, k8sgpt-operator,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, telegraf, kubernetes-dashboard-auth-fips, pguser, nri-nginx, kubernetes-replicator-fips, cosign, timescaledb-tune, grafana-fips, vertical-pod-autoscaler-fips, gitea, contour-fips, local-path-provisioner-fips, chartmuseum,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: op-geth, ip-masq-agent, ghaudit, k8sgpt, cluster-api-aws-controller, crossplane-provider-aws-elasticache, haproxy-ingress, kine, traefik, restic, wolfictl, kuberlr, aws-sigv4-proxy, infinispan-operator, aws-flb-kinesis, http-echo, custom-pod-autoscaler-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: multus-cni, op-geth, ip-masq-agent, wire-go, ghaudit, k8sgpt, cluster-api-aws-controller, crossplane-provider-aws-elasticache, haproxy-ingress, kine, traefik, restic, wolfictl, checksec, kuberlr, velero-plugin-for-microsoft-azure, aws-sigv4-proxy, calico,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: multus-cni, op-geth, ip-masq-agent, wire-go, ghaudit, k8sgpt, cluster-api-aws-controller, crossplane-provider-aws-elasticache, haproxy-ingress, kine, traefik, restic, wolfictl, checksec, kuberlr, velero-plugin-for-microsoft-azure, aws-sigv4-proxy, calico,...

CLEANSTART-2026-CT39828 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-TS42581 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-SY95837 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, sbom-convert, php-fpmexporter, falcosidekick, render-template, cert-exporter, go-bindata, metacontroller, prometheus-adapter, ip-masq-agent, kubecolor, terraform-provider-azuread, wire-go, mesosphere-vsphere-csi, ghaudit, kubernetes-replicator,...