GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, rancher-system-agent, yunikorn-k8shim, tkn, cloud-provider-aws, kots, spqr, azure-service-operator, kubernetes, cloud-provider-azure, kuma, openbao, cluster-autoscaler, gatekeeper, kubernetes-csi-external-snapshotter, telegraf, calico,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tkn, kots, kubernetes, mattermost, gomplate, terraform-provider-tls, gitea, ksops, flux-notification-controller, wolfictl, syft, src, chisel, flux-kustomize-controller, skaffold, pulumi, terraform-provider-acme, crossplane-provider-azure-storage,...

CLEANSTART-2026-QS96651 Security fixes in cloud-provider-aws-1.34 1.34.1-r1

Package cloud-provider-aws-1.34 version 1.34.1-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wnfv, ghsa-j5w8-q4qc-rx2x...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, rancher-system-agent, yunikorn-k8shim, tkn, cloud-provider-aws, kots, spqr, azure-service-operator, kubernetes, cloud-provider-azure, kuma, openbao, cluster-autoscaler, gatekeeper, kubernetes-csi-external-snapshotter, telegraf, calico,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: trivy-operator, flux-source-controller, drone, kyverno-fips, terraform, minio, mattermost, minio-fips, coder, commercial-kyverno, vitess, gitlab-kas, upwind-agent, argo-workflows, skaffold-fips, reports-server, kubescape-server-fips, k9s, argo-cd-fips, helm, flux,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno-fips, external-secrets-fips, crossplane-provider-azure-streamanalytics, caddy, terraform-provider-azurerm-fips, crossplane-provider-azure-storagecache, vitess, crossplane-provider-aws-lexmodels, upwind-agent,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tkn, kots, kubernetes, mattermost, gomplate, terraform-provider-tls, gitea, ksops, flux-notification-controller, wolfictl, syft, chisel, flux-kustomize-controller, skaffold, pulumi, crossplane-provider-azure-storage, ko, gitlab-kas, gitlab-runner, eksctl, zot,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kaf, cloud-provider-aws, kots, kubernetes, mattermost, trivy-operator, trivy, flux, loki, nerdctl, telegraf, cert-manager, gitea, flux-source-controller, argocd-image-updater, external-dns, flux-image-automation-controller, kyverno, k9s, opentelemetry-collector,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: kots, kubernetes, mattermost, gomplate, gitea, wolfictl, syft, skaffold, pulumi, gitlab-kas, zot, prometheus, spire-server, chezmoi, aactl, opentofu, step-issuer, trivy-operator, flux, telegraf, flux-source-controller, argocd-image-updater, external-dns, nfpm,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kaf, podman, cloud-provider-aws, kots, kubernetes, mattermost, flux, loki, nerdctl, telegraf, cert-manager, external-dns, docker-cli-buildx, kyverno, opentelemetry-collector, external-secrets-operator, kine, falco-no-driver, kubernetes-dashboard, rancher, k3s,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: trino, tkn, kots, spqr, kubernetes, mattermost, net-kourier, dkron, sriov-network-device-plugin, prometheus-alertmanager, terraform-provider-tls, kubernetes-dashboard-api, cloudprober, ingress-nginx-controller, kubernetes-csi-external-snapshotter, dask-gateway, gital...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: trino, tkn, kots, spqr, kubernetes, mattermost, net-kourier, dkron, sriov-network-device-plugin, prometheus-alertmanager, terraform-provider-tls, kubernetes-dashboard-api, cloudprober, ingress-nginx-controller, kubernetes-csi-external-snapshotter, dask-gateway, gital...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, trino, kots, aws-s3-controller, cloudprober, ingress-nginx-controller, runc, sonobuoy, kubernetes-replicator, flux-notification-controller, aws-signer-notation-plugin, postgres-operator, wave, helm-mapkubeapis,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, trino, kots, aws-s3-controller, cloudprober, ingress-nginx-controller, gitaly, runc, sonobuoy, kubernetes-replicator, flux-notification-controller, aws-signer-notation-plugin, postgres-operator, wave, helm-mapkubeapis,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, trino, kots, aws-s3-controller, cloudprober, ingress-nginx-controller, gitaly, runc, sonobuoy, kubernetes-replicator, flux-notification-controller, aws-signer-notation-plugin, postgres-operator, wave, helm-mapkubeapis,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, k8sgpt-operator, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats, cluster-proportional-autoscaler-fips, caddy,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, k8sgpt-operator, gpu-operator, kyverno-fips, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, git-sync, terraform-provider-time-fips, beats, cluster-proportional-autoscaler-fips, caddy,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, ingress-nginx-controller, runc, sonobuoy, kubernetes-replicator, flux-notification-controller, aws-signer-notation-plugin, postgres-operator, wave, podinfo, chart-testing, eksctl, lvm-driver, litestream,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, rancher-loglevel, spqr, crossplane-provider-sql, mattermost, actions-runner-controller, dkron, fluxcd-kustomize-mutating-webhook, local-static-provisioner, sriov-network-device-plugin, kubernetes-dashboard-api,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: local-path-provisioner, spark-operator, ingress-nginx-controller, runc, sonobuoy, kubernetes-replicator, flux-notification-controller, aws-signer-notation-plugin, postgres-operator, wave, podinfo, chart-testing, eksctl, lvm-driver, litestream,...