GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: eksctl, chart-testing, linkerd2, flux-source-controller, kubescape, helm-docs, trivy, chartmuseum, flux, pluto, rancher-fleet, helm-operator, kuma, zarf, tigera-operator, istio, helm-push, cluster-api-helm-controller, cert-manager-cmctl, k9s, cilium-cli, helm, cerbos...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, cert-manager-cmctl, helm-exporter-fips, k8ssandra-client, chartmuseum, cluster-api-helm-controller, k9s, chaos-mesh-fips, flux-source-controller, cloudbeat-fips, consul-k8s-fips, linkerd2-fips, tigera-operator-fips, trivy-fips, chart-testing,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, cilium, oauth2-proxy, swagger, cert-manager-csi-driver-fips, redka, crossplane-provider-aws-sns-fips, crossplane-provider-aws-acm, qemu-guesthelper, jaeger, crossplane-provider-aws-cloudwatchlogs-fips, nginx-prometheus-exporter-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: nats-fips, cilium, redka, qemu-guesthelper, jaeger, splunk-otel-collector, coredns-fips, amazon-ecs-cni-plugins, amazon-ecs-agent-fips, grafana-operator, envconsul-fips, net-kourier, aws-flb-cloudwatch, envoy-gateway, spegel, karpenter-fips, opa-envoy, kubernetes,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: nats-fips, cilium, redka, qemu-guesthelper, jaeger, splunk-otel-collector, coredns-fips, amazon-ecs-cni-plugins, amazon-ecs-agent-fips, grafana-operator, envconsul-fips, net-kourier, aws-flb-cloudwatch, envoy-gateway, spegel, karpenter-fips, opa-envoy, kubernetes,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, cilium, oauth2-proxy, swagger, cert-manager-csi-driver-fips, redka, crossplane-provider-aws-sns-fips, crossplane-provider-aws-acm, qemu-guesthelper, jaeger, crossplane-provider-aws-cloudwatchlogs-fips, nginx-prometheus-exporter-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nats-fips, cilium, oauth2-proxy, container-object-storage-interface-fips, swagger, prometheus-nats-exporter-fips, cert-manager-csi-driver-fips, redka, crossplane-provider-aws-sns-fips, chart-testing, crossplane-provider-aws-acm, jaeger,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, crossplane-provider-aws-acm, splunk-otel-collector, aws-s3-controller, karma-fips, kafka-proxy, amazon-ecs-cni-plugins, policy-bot, grafana-operator, nodetaint, pushprox, spegel, karpenter-fips, go-licenses, sbom-convert, libnvidia-container,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, k8sgpt, glow, chezmoi, spark-operator, terraform-provider-time, terraform-mcp-server, crossplane-provider-aws-s3, kubernetes-csi-external-resizer, git-sync, http-echo, percona-server-mongodb-operator,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, k8sgpt, glow, go-jsonnet, chezmoi, spark-operator, terraform-provider-time, terraform-mcp-server, crossplane-provider-aws-s3, kubernetes-csi-external-resizer, git-sync, http-echo, linkerd2-proxy-init,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, k8sgpt, glow, go-jsonnet, chezmoi, spark-operator, terraform-provider-time, terraform-mcp-server, crossplane-provider-aws-s3, kubernetes-csi-external-resizer, git-sync, http-echo, linkerd2-proxy-init,...

CLEANSTART-2026-CT39828 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-TS42581 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-SY95837 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, glow, prometheus-operator, spark-operator, terraform-provider-time, http-echo, terraform, ctop, gostatsd, conftest, dive, kind, cadvisor, buildkitd, falco-exporter, configmap-reload, yace,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: kustomize, direnv, mage, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, kubernetes-csi-external-attacher, glow, kubernetes-dashboard-web, oras, spark-operator, terraform-provider-time, mkcert, fulcio, contour, docker-machine-driver-harvester,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, glow, prometheus-operator, spark-operator, terraform-provider-time, http-echo, terraform, ctop, gostatsd, conftest, dive, kind, cadvisor, buildkitd, falco-exporter, configmap-reload, yace,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kustomize, direnv, mage, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, kubernetes-csi-external-attacher, glow, kubernetes-dashboard-web, oras, spark-operator, terraform-provider-time, mkcert, fulcio, contour, docker-machine-driver-harvester,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: kustomize, direnv, mage, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, kubernetes-csi-external-attacher, glow, kubernetes-dashboard-web, oras, spark-operator, terraform-provider-time, mkcert, fulcio, contour, docker-machine-driver-harvester,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: kustomize, direnv, mage, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, kubernetes-csi-external-attacher, glow, kubernetes-dashboard-web, oras, spark-operator, terraform-provider-time, fulcio, contour, docker-machine-driver-harvester, nri-prometheus,...