GO-2026-6094 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, gatekeeper, kots, node-feature-discovery, tekton-chains, kapp-controller, zot, argocd-image-updater, emissary, tekton-pipelines, cert-manager-webhook-pdns, cluster-api-azure-controller, openbao, rancher-agent, cluster-autoscaler,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, syft, docker-credential-ecr-login, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips, clickhouse-backup-fips, prometheus-elasticsearch-exporter-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: omnibump, crossplane-provider-aws-memorydb, kubernetes-replicator, gitlab-runner, hcloud, argocd-image-updater, emissary, opentofu, tekton-pipelines, apache-exporter, cert-manager-webhook-pdns, ksops, paranoia, gostatsd, sops, cluster-api-helm-controller,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: authentik, chainloop-cli-fips, kubernetes, pulumi, apko-fips, envoy-gateway-fips, harbor, kyverno-policy-reporter-plugins-kyverno, dataplaneapi, chainloop-cli, harbor-fips, buildah, keda-fips, traefik-fips, prometheus-operator-fips, tekton-pipelines-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: authentik, db-operator-fips, kargo, syft, crossplane-provider-aws-osis-fips, crossplane-provider-azure-purview, opensearch-datasource-fips, prometheus-podman-exporter, dagdotdev, dataplaneapi, kubo, gotrue, spicedb, helm-operator-fips, terraform-provider-google-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: authentik, db-operator-fips, kargo, syft, crossplane-provider-aws-osis-fips, crossplane-provider-azure-purview, opensearch-datasource-fips, prometheus-podman-exporter, dagdotdev, dataplaneapi, kubo, gotrue, spicedb, helm-operator-fips, terraform-provider-google-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: mcp-grafana, cadvisor, falcoctl, argocd-image-updater, emissary, kubernetes-csi-driver-hostpath, opentofu, apache-exporter, memcached-exporter, opa-envoy, vexctl, kubescape-operator, k8s-device-plugin, net-kourier, apisix-ingress-controller, sftpgo-plugin-eventsearch...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: db-operator-fips, docker-credential-ecr-login, deck-fips, kargo, syft, k8sgpt-operator, google-guest-agent-manager, kube-logging-operator-custom-runner-fips, prometheus-podman-exporter, ytt-fips, cluster-proportional-autoscaler-fips, amazon-ssm-agent-fips, gostatsd,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: db-operator-fips, docker-credential-ecr-login, deck-fips, kargo, syft, k8sgpt-operator, google-guest-agent-manager, kube-logging-operator-custom-runner-fips, prometheus-podman-exporter, ytt-fips, cluster-proportional-autoscaler-fips, amazon-ssm-agent-fips, gostatsd,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: syft, docker-credential-ecr-login, google-guest-agent-manager, kubectx, kubernetes-event-exporter-fips, prometheus-elasticsearch-exporter-fips, witness, crossplane-provider-aws-kinesis-fips, sftpgo-plugin-pubsub, gitness, prometheus-node-exporter-fips, go-discover,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: db-operator-fips, docker-credential-ecr-login, deck-fips, kargo, syft, k8sgpt-operator, google-guest-agent-manager, kube-logging-operator-custom-runner-fips, prometheus-podman-exporter, ytt-fips, cluster-proportional-autoscaler-fips, amazon-ssm-agent-fips, gostatsd,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: db-operator-fips, docker-credential-ecr-login, deck-fips, kargo, syft, k8sgpt-operator, google-guest-agent-manager, kube-logging-operator-custom-runner-fips, prometheus-podman-exporter, ytt-fips, cluster-proportional-autoscaler-fips, amazon-ssm-agent-fips, gostatsd,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: mcp-grafana, k8sgpt, cadvisor, crossplane-provider-aws-memorydb, falcoctl, gitlab-runner, argocd-image-updater, emissary, kubernetes-csi-driver-hostpath, opentofu, tekton-pipelines, cert-manager-webhook-pdns, ksops, k8sgateway, sops, aws-otel-collector,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: mcp-grafana, k8sgpt, cadvisor, crossplane-provider-aws-memorydb, falcoctl, gitlab-runner, argocd-image-updater, emissary, kubernetes-csi-driver-hostpath, opentofu, tekton-pipelines, cert-manager-webhook-pdns, ksops, k8sgateway, sops, aws-otel-collector,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: authentik, chainloop-cli-fips, db-operator-fips, syft, crossplane-provider-aws-osis-fips, crossplane-provider-azure-purview, google-guest-agent-manager, prometheus-podman-exporter, sops, dagdotdev, dataplaneapi, kubo, gotrue, spicedb, clickhouse-backup-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: authentik, chainloop-cli-fips, db-operator-fips, syft, crossplane-provider-aws-osis-fips, crossplane-provider-azure-purview, google-guest-agent-manager, prometheus-podman-exporter, sops, dagdotdev, dataplaneapi, kubo, gotrue, spicedb, clickhouse-backup-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: syft, sops, dagdotdev, spicedb, helm-operator-fips, terraform-provider-google-fips, gitaly-fips, prometheus-alertmanager, witness, percona-server-mongodb-operator, sftpgo-plugin-pubsub, kyverno, kaniko-fips, cass-operator, prometheus-adapter, argocd-image-updater,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: db-operator-fips, prometheus-podman-exporter, amazon-ssm-agent-fips, rancher-security-scan-fips, kubo, spicedb, kbld, helm-operator-fips, kiam, bom, witness, gitness, kyverno, cass-operator, grafana-agent-operator, argocd-image-updater, rancher-fleet, kubeflow,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: k8sgpt, falcoctl, argocd-image-updater, opentofu, ksops, sops, vexctl, guac, aactl, tkn, gitea, trivy, kaniko, kube-metrics-adapter, wal-g, kargo, ko, terraform-provider-azapi, kyverno-notation-aws, skaffold, crossplane-provider-azure-authorization, grafana-mimir,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: k8sgpt, falcoctl, argocd-image-updater, opentofu, ksops, sops, vexctl, guac, aactl, tkn, gitea, trivy, kaniko, kube-metrics-adapter, wal-g, kargo, ko, terraform-provider-azapi, kyverno-notation-aws, skaffold, crossplane-provider-azure-authorization, grafana-mimir,...