GO-2026-6094 vulnerabilities

Vulnerabilities for packages: azure-service-operator, tkn, spqr, argocd-image-updater, kubernetes-csi-external-health-monitor, openfga, caddy, tekton-chains, cluster-api-gcp-controller, datadog-operator, fluent-operator, kube-state-metrics, kubernetes-csi-external-attacher, datadog-agent, grafana...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elastictranscoder-fips, crane-fips, prometheus-pgbouncer-exporter, aactl, crossplane-provider-aws-cloudwatch-fips, helmfile, juicefs-csi-driver, lvm-driver, crossplane-provider-aws-ssm, metrics-agent-fips, cri-tools,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opa-envoy, crossplane-provider-aws-rds, db-operator, delve, argocd-image-updater, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, src-fingerprint,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, frankenphp-8.4, istio, loki, knative-net-istio-fips, dataplaneapi, apm-server-fips, commercial-spilo, helmfile, grafana-operator-fips, glab, authentik-fips, cloud-provider-aws, dask-gateway, flux, authentik, fleet-server, buildkitd-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: cloudprober-fips, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, dbmate, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, crossplane-provider-aws-cloudwatch-fips, apm-server-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cloudprober-fips, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, dbmate, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, crossplane-provider-aws-cloudwatch-fips, apm-server-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: opa-envoy, db-operator, delve, argocd-image-updater, terraform-provider-tls, terraform-provider-sendgrid, k8sgpt-operator, k8ssandra-operator, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, net-kourier, argo-rollouts, kyverno-policy-reporter-kyverno-plugin,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crane-fips, prometheus-pgbouncer-exporter, aactl, kubernetes-csi-external-attacher, juicefs-csi-driver, percona-xtradb-cluster-operator-fips, victorialogs, licenseclassifier, lvm-driver, crossplane-provider-aws-ssm, metrics-agent-fips, cri-tools,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: minio, crossplane-provider-aws-rds, db-operator, argocd-image-updater, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, clickhouse-operator, datadog-operator, tekton-pipelines, net-kourier, argo-rollouts, kuma,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: minio, crossplane-provider-aws-rds, db-operator, argocd-image-updater, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, clickhouse-operator, datadog-operator, tekton-pipelines, net-kourier, argo-rollouts, kuma,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cloudprober-fips, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, crossplane-provider-aws-cloudwatch-fips, apm-server-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: cloudprober-fips, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, crossplane-provider-aws-cloudwatch-fips, apm-server-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cloudprober-fips, backup-restore-operator-fips, percona-server-mongodb-operator, knative-net-istio-fips, apm-server-fips, kubernetes-csi-external-attacher, cosign, secrets-store-csi-driver-provider-gcp, kyverno-notation-aws, cri-tools, kubevirt-cdi-controller,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: tigera-operator, crossplane-provider-azure, dbmate, aactl, tigera-operator-fips, cosign, secrets-store-csi-driver-provider-gcp, glow, licenseclassifier, secrets-store-csi-driver-provider-azure, multus-cni, grpc-health-probe, metrics-agent-fips, cri-tools,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: minio, argocd-image-updater, ksops, amazon-cloudwatch-agent-operator, sqlexporter, argo-rollouts, aws-eks-pod-identity-agent, kots, pulumi, boring-registry, flyte, sops, opentofu, falcosidekick, crossplane-provider-azure-managedidentity, kaniko, dgraph,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: minio, argocd-image-updater, ksops, amazon-cloudwatch-agent-operator, sqlexporter, argo-rollouts, aws-eks-pod-identity-agent, kots, pulumi, boring-registry, flyte, sops, opentofu, falcosidekick, crossplane-provider-azure-managedidentity, kaniko, dgraph,...