GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, cluster-api-helm-controller, argocd-image-updater, kubernetes-csi-external-resizer, cloud-provider-vsphere, metallb, fluent-operator, rancher-agent, helm-operator, spicedb-operator, cluster-api-ipam-provider-in-cluster, emissary,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, crossplane-provider-aws-cloudfront, addon-resizer, yunikorn-web, thanos-receive-controller-fips, nova-fips, cluster-autoscaler-fips, crossplane-provider-aws-mq-fips, nrdot-collector-fips, kubernetes-event-exporter, ip-masq-agent,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, crossplane-provider-aws-kms, harbor-registry, cloudnative-pg, gogatekeeper, dask-gateway, cluster-api-helm-controller, frp, docker-cli-buildx, crossplane-provider-aws-firehose, step-ca, grafana-operator, argocd-image-updater,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: art, fuse-overlayfs-snapshotter, caddy, chainloop-cli-fips, zarf, docker, cloud-provider-aws-fips, datadog-agent-fips, authentik, prometheus-elasticsearch-exporter, traefik-fips, prometheus-mongodb-exporter, kube-fluentd-operator, dask-gateway, cluster-autoscaler-fip...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, crossplane-provider-aws-kms-fips, crossplane-provider-aws-cloudfront, crossplane-provider-aws-opensearch-fips, addon-resizer, kube-mgmt, crossplane-provider-aws-vpc-fips, drone-fips, eck-operator-fips, plugin-barman-cloud,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, crossplane-provider-aws-kms-fips, crossplane-provider-aws-cloudfront, crossplane-provider-aws-opensearch-fips, addon-resizer, kube-mgmt, crossplane-provider-aws-vpc-fips, drone-fips, eck-operator-fips, plugin-barman-cloud,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grpcurl, helm-mapkubeapis, eksctl, cloudnative-pg, kubernetes-dashboard-auth, weaviate, dask-gateway, kaf, docker-cli-buildx, spire-controller-manager, step-ca, docker-credential-gcr, argocd-image-updater, kubernetes-csi-external-resizer, cloud-provider-vsphere,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: amazon-vpc-cni-plugins-fips, telegraf, victoriametrics-fips, kubernetes-csi-external-snapshotter-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, pgtimetable-fips, addon-resizer, actions-runner-controller-fips, cephcsi,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: amazon-vpc-cni-plugins-fips, telegraf, victoriametrics-fips, kubernetes-csi-external-snapshotter-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, pgtimetable-fips, addon-resizer, actions-runner-controller-fips, cephcsi,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, addon-resizer, yunikorn-web, thanos-receive-controller-fips, nova-fips, cluster-autoscaler-fips, kubernetes-event-exporter, ip-masq-agent, azure-workload-identity-webhook, crossplane-fips, crossplane-provider-aws-cognitoidentity,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: amazon-vpc-cni-plugins-fips, telegraf, victoriametrics-fips, kubernetes-csi-external-snapshotter-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, pgtimetable-fips, addon-resizer, actions-runner-controller-fips, cephcsi,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: amazon-vpc-cni-plugins-fips, telegraf, victoriametrics-fips, kubernetes-csi-external-snapshotter-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, pgtimetable-fips, addon-resizer, actions-runner-controller-fips, cephcsi,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, eksctl, harbor-registry, crossplane-provider-aws-eks, gogatekeeper, kube-metrics-adapter, weaviate, buildkitd, cluster-api-helm-controller, docker-cli-buildx, crossplane-provider-aws-firehose, step-ca, argocd-image-updater,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, eksctl, harbor-registry, crossplane-provider-aws-eks, gogatekeeper, kube-metrics-adapter, weaviate, buildkitd, cluster-api-helm-controller, docker-cli-buildx, crossplane-provider-aws-firehose, step-ca, argocd-image-updater,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, crossplane-provider-aws-kms-fips, chainloop-cli-fips, crossplane-provider-aws-opensearch-fips, addon-resizer, kube-mgmt, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-cognitoidentity-fips, eck-operator-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter-fips, crossplane-provider-aws-kms-fips, chainloop-cli-fips, crossplane-provider-aws-opensearch-fips, addon-resizer, kube-mgmt, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-cognitoidentity-fips, eck-operator-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: eck-operator-fips, cloud-provider-aws-fips, cluster-api-provider-vsphere, migrate, eck-operator, tkn-fips, traefik-fips, google-guest-agent, cluster-autoscaler-fips, velero-plugin-for-gcp, descheduler, aws-node-termination-handler, azure-workload-identity-webhook,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: victoriametrics-fips, kubernetes-csi-external-snapshotter-fips, wavefront-collector-for-kubernetes, elvish, render-template, cloud-provider-aws-fips, migrate, eck-operator, prometheus-elasticsearch-exporter, yunikorn-web, grafana-rollout-operator, nova-fips, nova,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, eksctl, harbor-registry, gitea, kube-metrics-adapter, kubernetes-dashboard-auth, weaviate, buildkitd, step-ca, argocd-image-updater, opentelemetry-collector-contrib, sftpgo-plugin-kms, cortex, terragrunt, ko, jitsucom-bulker, prometheus, rekor,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, eksctl, harbor-registry, gitea, kube-metrics-adapter, kubernetes-dashboard-auth, weaviate, buildkitd, step-ca, argocd-image-updater, opentelemetry-collector-contrib, sftpgo-plugin-kms, cortex, terragrunt, ko, jitsucom-bulker, prometheus, rekor,...