GO-2026-6094 vulnerabilities

Vulnerabilities for packages: k3s, kube-rbac-proxy, apisix-ingress-controller, kyverno, descheduler, cass-operator, datadog-agent, cert-manager-istio-csr, cloud-provider-gcp-cloud-controller-manager, keda, calico, kwok, crossplane, zot, pulumi-kubernetes-operator, kuma, kube-state-metrics, hubble...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, melange, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, k3s, policy-controller, buildah, glab, crossplane-provider-aws-elasticache, trivy-operator, tw, kyverno, crossplane-provider-aws-rds, step-kms-plugin,...

CLEANSTART-2026-QS96651 Security fixes in cloud-provider-aws-1.34 1.34.1-r1

Package cloud-provider-aws-1.34 version 1.34.1-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wnfv, ghsa-j5w8-q4qc-rx2x...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: k3s, kube-rbac-proxy, apisix-ingress-controller, kyverno, descheduler, cass-operator, datadog-agent, cert-manager-istio-csr, cloud-provider-gcp-cloud-controller-manager, keda, calico, kwok, crossplane, zot, pulumi-kubernetes-operator, kuma, kube-state-metrics, hubble...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, k9s-fips, chisel-fips, argo-workflows-fips, kube-conformance, tekton-pipelines-fips, cilium-cli, omnictl-multiarch, loki, flux-source-controller-fips, argocd-image-updater-fips, argo-cd-fips, telegraf, opentofu-fips, terraform,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: chisel-fips, caddy-fips, crossplane-aws-provider-fips, crossplane-provider-azure-spring, kueue, apko, crossplane-provider-aws-route53recoverycontrolconfig, flux-notification-controller-fips, k3s, steampipe, crossplane-provider-aws-secretsmanager-fips, src,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: melange, crossplane-provider-azure-authorization, k3s, policy-controller, buildah, glab, trivy-operator, kyverno, step-kms-plugin, datadog-agent, kargo, docker-cli-buildx, wolfictl, guac, falco-no-driver, apko, flux, kine, zot, snyk-cli, pulumi-kubernetes-operator,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: aactl, spire-server, telegraf, argocd-image-updater, external-dns, k3s, trivy-operator, kyverno, istio, prometheus, cloud-provider-aws, containerd, rancher, chisel, flux-source-controller, kaf, zarf, cert-manager, prometheus-operator, kubescape, mattermost, gitea,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: melange, k3s, buildah, trivy-operator, kyverno, step-kms-plugin, docker-cli-buildx, wolfictl, guac, falco-no-driver, apko, flux, kine, zot, snyk-cli, pulumi-kubernetes-operator, fscrypt, zarf, argo-cd, loki, aactl, grype, istio, prometheus, cloud-provider-aws,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: aactl, spire-server, telegraf, external-dns, k3s, buildah, kyverno, istio, prometheus, cloud-provider-aws, containerd, rancher, kaf, cert-manager, prometheus-operator, docker-cli-buildx, mattermost, opentelemetry-collector, helm, cilium-cli, podman, minio, kine,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, kubernetes-dns-node-cache, restic, crossplane-provider-aws-route53, go, kube-rbac-proxy, docker-cli, secrets-store-csi-driver-provider-gcp, k8s-device-plugin, buildah, dkron, sftpgo, trino, kpt, apisix-ingress-controller,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, kubernetes-dns-node-cache, restic, crossplane-provider-aws-route53, go, kube-rbac-proxy, docker-cli, secrets-store-csi-driver-provider-gcp, k8s-device-plugin, buildah, dkron, sftpgo, trino, kpt, apisix-ingress-controller,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mockery, restic, buf, secrets-store-csi-driver-provider-gcp, glab, aws-node-termination-handler, harbor-scanner-trivy, kind, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, velero-plugin-for-aws, vault-k8s, k3d, src, cri-tools, cue,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: mockery, restic, buf, secrets-store-csi-driver-provider-gcp, glab, aws-node-termination-handler, harbor-scanner-trivy, kind, wazero, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, velero-plugin-for-aws, vault-k8s, k3d, src, cri-tools,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: mockery, restic, buf, secrets-store-csi-driver-provider-gcp, glab, aws-node-termination-handler, harbor-scanner-trivy, kind, wazero, harbor-registry, speedtest-go, crossplane-provider-aws-rds, smokescreen, velero-plugin-for-aws, vault-k8s, k3d, src, cri-tools,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, chisel-fips, grafana-mimir, caddy-fips, apache-exporter, azure-ipam, metacontroller, crossplane-aws-provider-fips, manifest-tool, jupyterhub-k8s-image-awaiter, cert-manager-openshift-routes-fips, pgpool2exporter, milvus,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, chisel-fips, grafana-mimir, caddy-fips, apache-exporter, azure-ipam, metacontroller, crossplane-aws-provider-fips, manifest-tool, jupyterhub-k8s-image-awaiter, cert-manager-openshift-routes-fips, pgpool2exporter, milvus,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, kubernetes-dns-node-cache, k3s, pguser, restic, kubernetes-replicator, aws-signer-notation-plugin, policy-controller, dkron, crossplane-provider-aws-elasticache, mc, harbor-registry, crossplane-provider-aws-rds, descheduler,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: restic, k3s, wazero, harbor-registry, crossplane-provider-aws-rds, vault-k8s, k3d, src, ratify, cri-tools, openbao-k8s, boring-registry, actions-runner-controller, hydra, crossplane-provider-aws-ec2, ipfs-cluster, hubble, fuse-overlayfs-snapshotter, sbomqs, xeol,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: restic, k3s, wazero, harbor-registry, crossplane-provider-aws-rds, vault-k8s, k3d, src, ratify, cri-tools, openbao-k8s, boring-registry, actions-runner-controller, hydra, crossplane-provider-aws-ec2, ipfs-cluster, hubble, fuse-overlayfs-snapshotter, sbomqs, xeol,...