GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kots, eksctl, kubescape, helm-operator, up, chartmuseum, k9s, cilium-cli, flux-helm-controller, helm-push, k8sgpt, zot, trivy, kubevela, zarf, flux-source-controller...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kots, eksctl, kubescape, helm-operator, up, chartmuseum, k9s, cilium-cli, flux-helm-controller, helm-push, k8sgpt, zot, trivy, kubevela, zarf, flux-source-controller...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, falcoctl, consul-k8s, cert-manager-cmctl-fips, kubescape, ocm-cli-fips, oras-fips, gogatekeeper, ocm-cli, redpanda-operator, falcoctl-fips, xeol, k8ssandra-client-fips, cloudbeat-fips, steampipe, gitlab-operator, k9s,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: rancher-helm, pluto, flux-helm-controller, trivy, zot, flux-source-controller, k8ssandra-client, k9s, zarf, helm-push, tw, kubescape, kots, cluster-api-helm-controller, cilium-cli, flux, eksctl, chart-testing, cert-manager-cmctl, chartmuseum, helm-operator, helm-docs...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubescape, up, flux-source-controller, kubevela, flux-helm-controller, eksctl, trivy, k9s, chartmuseum, zot, helm-operator, k8sgpt, kots, zarf, helm-push, cilium-cli...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubescape, up, flux-source-controller, kubevela, flux-helm-controller, eksctl, trivy, k9s, chartmuseum, zot, helm-operator, k8sgpt, kots, zarf, helm-push, cilium-cli...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: rancher-helm, pluto, flux-helm-controller, trivy, zot, flux-source-controller, k8ssandra-client, k9s, zarf, helm-push, tw, kubescape, kots, cluster-api-helm-controller, cilium-cli, flux, eksctl, chart-testing, cert-manager-cmctl, chartmuseum, helm-operator, helm-docs...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: kargo, helm-set-status, istio, pluto, flux-helm-controller, headlamp, trivy, zot, flux-source-controller, k8ssandra-client, cerbos, trivy-operator, k9s, helm-mapkubeapis, zarf, helm-push, rancher-fleet, kubescape, envoy-gateway, linkerd2, k8sgpt, kots,...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: kargo, xeol, spegel, syft, docker-cli-buildx, flux-helm-controller, trivy, docker-compose, opa-envoy, skaffold, buildkitd, nerdctl, zot, flux-source-controller, k8ssandra-client, k3s, dagger, zarf, helm-push, newrelic-infrastructure-agent, opa, docker, helm,...

GO-2026-5338 vulnerabilities

Vulnerabilities for packages: kargo, helm-set-status, rancher-helm, spegel, syft, tigera-operator, docker-cli-buildx, headlamp, rancher-agent, steampipe, trivy, docker-compose, skaffold, buildkitd, zot, teleport, kubescape-operator, trivy-operator, k3s, k9s, dagger, helm-mapkubeapis, containerd,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kargo, helm-set-status, rancher-helm, spegel, syft, xeol, docker-cli-buildx, flux-helm-controller, headlamp, steampipe, trivy, docker-compose, opa-envoy, skaffold, buildkitd, nerdctl, zot, falco-no-driver, flux-source-controller, k8ssandra-client, kubescape-operator,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: kargo, rancher-helm, istio, pluto, flux-helm-controller, trivy, zot, flux-source-controller, k8ssandra-client, cerbos, k9s, zarf, helm-push, rancher-fleet, tw, envoy-gateway, linkerd2, k8sgpt, kots, cluster-api-helm-controller, cilium-cli, eksctl, chart-testing,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-cli, kuberlr, rancher-system-agent, rancher-system-upgrade-controller, kube-logging-operator, tkn, rabbitmq-cluster-operator, gcsfuse, nri-consul, nuclei, aws-eks-pod-identity-agent, cluster-api-provider-vsphere, tflint, k8sgpt, cluster-api-helm-controller,...

CLEANSTART-2026-XI11910 Security fixes in chartmuseum-fips 0.15.0-r4

Package chartmuseum-fips version 0.15.0-r4 fixes 16 vulnerabilities: ghsa-557j-xg8c-q2mm, ghsa-mh63-6h87-95cp, ghsa-r53h-jv2g-vpx6, ghsa-2c4m-59x9-fr2g, ghsa-3vp4-m3rf-835h...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, upwind-agent,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, kube-mgmt-fips, kots, t...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, kube-mgmt-fips, kots, t...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, longhorn-manager-fips, crossplane-provider-family-aws-fips, metallb, kubernetes-csi-node-driver-registrar-fips, go-discover, crossplane-provider-aws-athena, trident-fips, crossplane-provider-aws-cloudwatchevents,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: helm-set-status, istio, pluto, tigera-operator, headlamp, trivy, zot, flux-source-controller, k8ssandra-client, cerbos, trivy-operator, k9s, helm-mapkubeapis, zarf, helm-push, rancher-fleet, tw, kubescape, envoy-gateway, linkerd2, harbor, kots,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-set-status, istio, pluto, tigera-operator, headlamp, trivy, zot, flux-source-controller, k8ssandra-client, cerbos, trivy-operator, k9s, helm-mapkubeapis, zarf, helm-push, rancher-fleet, tw, kubescape, envoy-gateway, linkerd2, harbor, kots,...