GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, helm-operator, kubescape, crossplane, rke2-cloud-provider, metallb, cluster-api-helm-controller, zot, kyverno-notation-aws, gatekeeper, kube-state-metrics, kubescape-operator, rancher-system-agent, cluster-api-gcp-controller, openbao, yunikorn-k8shim,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: longhorn-backing-image-manager, wave, external-secrets-operator, docker-cli-fips, grafana-fips, neuvector-dbgen, crossplane-provider-gcp-beta-cloudplatform, databricks-cli-fips, karma, crossplane-function-go-templating, mlrun-log-collector-fips, nri-consul,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: temporal-server, nri-consul, chisel, pgpool2exporter, runc, terraform-provider-acme, conftest, temporal, emissary, omnibump, containerd, rancher-webhook, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, kubeflow-katib, mattermost-fips, kots, nemo, argo-cd-fips, kubernetes-csi-node-driver-registrar-fips, k3s, kubernetes-fips, tekton-pipelines-fips, loki, buildkitd-fips, gatekeeper, prometheus-elasticsearch-exporter, docker-cli-fips, grafana-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, crossplane-provider-gcp-beta-container, neuvector-scanner, plugin-barman-cloud, external-secrets-operator, kubernetes-fips, consul-k8s-fips, opensearch-datasource-fips, gcsfuse,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, crossplane-provider-gcp-beta-container, neuvector-scanner, plugin-barman-cloud, external-secrets-operator, kubernetes-fips, consul-k8s-fips, opensearch-datasource-fips, gcsfuse,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: runc, seaweedfs, temporal, emissary, kine, trillian, helm-set-status, falco-exporter, cadvisor, prometheus-adapter, wal-g, cert-manager-csi-driver, flannel, caddy, crossplane-provider-family-azure, sriov-network-device-plugin, kubescape, terraform-provider-random,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave, grafana-beyla, external-secrets-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, apache-beam-python-3.12-sdk, nri-postgresql-fips, kubeflow-katib, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, nri-postgresql-fips, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave, grafana-beyla, external-secrets-operator,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, apache-beam-python-3.12-sdk, nri-postgresql-fips, kubeflow-katib, longhorn-backing-image-manager, rancher-loglevel, teleport-operator-fips, buildkite-agent, docker-credential-acr-env-fips, neuvector-scanner, plugin-barman-cloud, kiam, wave,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: longhorn-backing-image-manager, go-md2man, wave, neuvector-scanner, external-secrets-operator, docker-cli-fips, grafana-fips, neuvector-dbgen, databricks-cli-fips, percona-xtradb-cluster-operator, crossplane-function-go-templating, nri-consul,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: temporal-server, restic, loki, seaweedfs, grafana-pyroscope, conftest, temporal, emissary, kine, helm-operator, containerd, trillian, cadvisor, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook, caddy,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: temporal-server, restic, loki, seaweedfs, grafana-pyroscope, conftest, temporal, emissary, kine, helm-operator, containerd, trillian, cadvisor, prometheus-adapter, crossplane-provider-aws-lambda, terraform-provider-grafana, azure-workload-identity-webhook, caddy,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, plugin-barman-cloud, grafana-beyla, external-secrets-operator, kubernetes-fips, consul-k8s-fips, gcsfuse, google-osconfig-agent, crossplane-provider-aws-elbv2-fips, loki,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-azure-powerbidedicated, teleport-operator-fips, plugin-barman-cloud, grafana-beyla, external-secrets-operator, kubernetes-fips, consul-k8s-fips, gcsfuse, google-osconfig-agent, crossplane-provider-aws-elbv2-fips, loki,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, teleport-operator-fips, grafana-beyla, external-secrets-operator, kubernetes-fips, gcsfuse, google-osconfig-agent, loki, grafana-fips, cass-operator-fips-no-pvc-delete, pulumi-kubernetes-operator, kubescape-server-fips, kube-metrics-adapter-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go-md2man, rancher-loglevel, kiam, cfssl, kubelet-csr-approver-fips, consul-k8s-fips, loki, docker-cli-fips, grafana-fips, cass-operator-fips-no-pvc-delete, neuvector-dbgen, pgpool2exporter-fips, spark-operator-fips, nova, databricks-cli-fips,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: temporal-server, restic, seaweedfs, timestamp-authority, kine, wal-g, crossplane-provider-family-azure, kubescape, trufflehog, crossplane, kargo, zot, flux, kyverno-notation-aws, spire-server, git-sync, amazon-cloudwatch-agent, aws-eks-pod-identity-agent,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: temporal-server, restic, seaweedfs, timestamp-authority, kine, wal-g, crossplane-provider-family-azure, kubescape, trufflehog, crossplane, kargo, zot, flux, kyverno-notation-aws, spire-server, git-sync, amazon-cloudwatch-agent, aws-eks-pod-identity-agent,...