CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: cerbos-fips, kro, calico, cert-manager-istio-csr-fips, helm-operator-fips, percona-backup-mongodb-fips, fleet-server, percona-backup-mongodb, cass-operator-fips-no-pvc-delete, cluster-api-gcp-controller-fips, crossplane-provider-family-aws-fips, gomplate,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cerbos-fips, kro, calico, cert-manager-istio-csr-fips, helm-operator-fips, percona-backup-mongodb-fips, fleet-server, percona-backup-mongodb, cass-operator-fips-no-pvc-delete, cluster-api-gcp-controller-fips, crossplane-provider-family-aws-fips, gomplate,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: grpcurl, kafka-proxy, sftpgo, terraform-docs, db-operator, jitsucom-bulker, nerdctl, zot, nuclei, descheduler, flux-helm-controller, terraform-provider-azapi, task, cilium-cli, yunikorn-k8shim, step-issuer, filebrowser, cluster-autoscaler, mcp-grafana, gitaly, cilium...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecr-fips, kube-conformance, ytt, wgcf, mcp-grafana, calico, cert-manager-istio-csr-fips, sftpgo, helm-set-status, fleet-server, crossplane-provider-aws-wafv2-fips, stern, nfs-subdir-external-provisioner-fips, cluster-api-gcp-controller-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: ytt, cert-manager-istio-csr-fips, helm-set-status, stern, crane-fips, opencost, crossplane-provider-aws-servicediscovery, syncthing, prometheus-node-exporter, osv-scanner, addon-resizer-fips, gofumpt, hello-world-golang, ceph-csi-operator, prometheus-pushgateway-fips...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecr-fips, kube-conformance, ytt, wgcf, mcp-grafana, calico, cert-manager-istio-csr-fips, sftpgo, helm-set-status, fleet-server, crossplane-provider-aws-wafv2-fips, stern, nfs-subdir-external-provisioner-fips, cluster-api-gcp-controller-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecr-fips, kube-conformance, ytt, wgcf, mcp-grafana, calico, cert-manager-istio-csr-fips, sftpgo, helm-set-status, fleet-server, crossplane-provider-aws-wafv2-fips, stern, nfs-subdir-external-provisioner-fips, cluster-api-gcp-controller-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecr-fips, kube-conformance, ytt, wgcf, mcp-grafana, calico, cert-manager-istio-csr-fips, sftpgo, helm-set-status, fleet-server, crossplane-provider-aws-wafv2-fips, stern, nfs-subdir-external-provisioner-fips, cluster-api-gcp-controller-fips,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kubo, sftpgo, db-operator, cert-manager-istio-csr, jitsucom-bulker, neuvector-sigstore-interface, wolfictl, terragrunt, kube-vip-cloud-provider, percona-server-mongodb-operator, zot, pulumi-language-dotnet, velero, descheduler, headlamp, rancher-webhook, task,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: kubo, sftpgo, db-operator, cert-manager-istio-csr, jitsucom-bulker, neuvector-sigstore-interface, wolfictl, terragrunt, kube-vip-cloud-provider, percona-server-mongodb-operator, zot, pulumi-language-dotnet, velero, descheduler, headlamp, rancher-webhook, task,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, kubernetes-csi-external-provisioner-fips, cerbos-fips, mcp-grafana, kro, cert-manager-webhook-pdns-fips, calico, cert-manager-istio-csr-fips, helm-operator-fips, sftpgo, cass-operator-fips-no-pvc-delete, cluster-api-gcp-controller-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, kubernetes-csi-external-provisioner-fips, cerbos-fips, mcp-grafana, kro, cert-manager-webhook-pdns-fips, calico, cert-manager-istio-csr-fips, helm-operator-fips, sftpgo, cass-operator-fips-no-pvc-delete, cluster-api-gcp-controller-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner-fips, cerbos-fips, cert-manager-webhook-pdns-fips, calico, sftpgo, helm-operator-fips, cass-operator-fips-no-pvc-delete, cluster-api-gcp-controller-fips, datadog-operator, gomplate, kyverno-fips, opencost, trufflehog-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kube-conformance, ytt, kubernetes-csi-external-provisioner-fips, cerbos-fips, helm-operator-fips, helm-set-status, cass-operator-fips-no-pvc-delete, gitea, rqlite-fips, gomplate, kyverno-fips, mcp-grafana-fips, trust-manager, step-kms-plugin-fips, trufflehog-fips,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, terragrunt, zot, minio-operator, velero, nuclei, terraform-provider-azapi, crossplane-provider-azure, filebrowser, cluster-autoscaler, chezmoi, opentelemetry-operator, git-sync, glab, splunk-otel-collector, opentelemetry-collector,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, terragrunt, zot, minio-operator, velero, nuclei, terraform-provider-azapi, crossplane-provider-azure, filebrowser, cluster-autoscaler, chezmoi, opentelemetry-operator, git-sync, glab, splunk-otel-collector, opentelemetry-collector,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: overmind, sftpgo, neuvector-sigstore-interface, sbom-scorecard, s5cmd, vendir, kubewatch, descheduler, crossplane-provider-azure, ip-masq-agent, cluster-autoscaler, litefs, gostatsd, swagger, postgres-operator, kubernetes-csi-external-resizer, prometheus-adapter,...