GO-2026-5662 vulnerabilities

Vulnerabilities for packages: tempo, mcp-grafana, minio-operator, prometheus-pushgateway, splunk-otel-collector, minio-object-browser, istio, cloud-sql-proxy, datadog-agent, loki, grafana-pyroscope, aws-otel-collector, keda, certificate-transparency, mc, trillian, minio, jaeger, karma, telegraf...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: tempo, minio-operator, prometheus-pushgateway, splunk-otel-collector, amazon-cloudwatch-agent-operator, istio, cloud-sql-proxy, datadog-agent, loki, opentelemetry-collector, aws-otel-collector, node-problem-detector, keda, k8sgpt, certificate-transparency, mc,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tekton-chains, cloud-provider-vsphere, grafana-rollout-operator, fulcio, kubeflow-katib, controller-gen, zot, kpt, kubecolor, buildkitd, ko, thanos-operator, envconsul, neuvector-sigstore-interface, wait-for-port, kind, nginx-prometheus-exporter, nri-memcached,...

CVE-2026-39821 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, grafana-rollout-operator, kubescape, boring-registry, xeol, tetragon, pvc-autoresizer, kube-vip, k6, sbomqs, thanos-operator, kserve-rest-proxy, ip-masq-agent, git-lfs, metallb, cloudnative-pg, sftpgo, delve, descheduler, dive, rancher-webhook...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, grafana-rollout-operator, kubescape, boring-registry, xeol, tetragon, pvc-autoresizer, kube-vip, k6, sbomqs, thanos-operator, kserve-rest-proxy, ip-masq-agent, git-lfs, metallb, cloudnative-pg, sftpgo, delve, descheduler, dive, rancher-webhook...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-securityhub, azurefile-csi, vitess, crossplane-provider-aws-mediastore, flux-image-automation-controller-fips, crossplane-provider-aws-dataexchange, dockerize-fips, cert-manager-google-cas-issuer, go-sqlcmd, terraform-provider-azuread-fips,...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, tempo, mcp-grafana, minio-operator, prometheus-pushgateway, splunk-otel-collector, minio-object-browser, amazon-cloudwatch-agent-operator, istio, cloud-sql-proxy, datadog-agent, loki, opentelemetry-collector, aws-otel-collector,...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: minio-operator-fips, opentelemetry-collector-contrib-fips, minio-operator, mcp-grafana-fips, mcp-grafana, metrics-server-fips, splunk-otel-collector, prometheus-pushgateway, amazon-cloudwatch-agent-operator, metrics-server, nrdot-collector-k8s, opentelemetry-operator...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, tempo, mcp-grafana, minio-operator, prometheus-pushgateway, splunk-otel-collector, minio-object-browser, amazon-cloudwatch-agent-operator, istio, cloud-sql-proxy, datadog-agent, loki, opentelemetry-collector, aws-otel-collector,...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: minio-operator-fips, opentelemetry-collector-contrib-fips, minio-operator, mcp-grafana-fips, mcp-grafana, metrics-server-fips, splunk-otel-collector, prometheus-pushgateway, amazon-cloudwatch-agent-operator, metrics-server, nrdot-collector-k8s, opentelemetry-operator...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: tempo, mcp-grafana, minio-operator, prometheus-pushgateway, splunk-otel-collector, minio-object-browser, istio, cloud-sql-proxy, datadog-agent, loki, grafana-pyroscope, aws-otel-collector, keda, certificate-transparency, mc, trillian, minio, jaeger, karma, telegraf...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: tempo, mcp-grafana, minio-operator, prometheus-pushgateway, splunk-otel-collector, minio-object-browser, istio, cloud-sql-proxy, datadog-agent, loki, grafana-pyroscope, aws-otel-collector, keda, certificate-transparency, mc, trillian, minio, jaeger, karma, telegraf...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: sonobuoy, hubble-fips, kyverno-policy-reporter-ui, azurefile-csi, nodetaint-fips, spire-controller-manager-fips, mailpit, kiali-fips, cluster-api, flux-image-automation-controller-fips, aws-sigv4-proxy, nova, vault-fips, crossplane-provider-kubernetes,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: go-spdk-helper-fips, hubble-fips, kapp-controller-fips, azurefile-csi, cluster-api-aws-controller, kyverno-policy-reporter-ui, sonobuoy, spire-controller-manager-fips, metrics-server-fips, cluster-api, nova, aws-sigv4-proxy, vault-fips, openfga,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: hubble-fips, kapp-controller-fips, azurefile-csi, cluster-api-aws-controller, kyverno-policy-reporter-ui, spire-controller-manager-fips, metrics-server-fips, cluster-api, vault-fips, openfga, crossplane-provider-kubernetes, seaweedfs-operator-fips,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: go-spdk-helper-fips, hubble-fips, kapp-controller-fips, azurefile-csi, cluster-api-aws-controller, kyverno-policy-reporter-ui, sonobuoy, spire-controller-manager-fips, metrics-server-fips, cluster-api, nova, aws-sigv4-proxy, vault-fips, openfga,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: bento, crossplane-provider-aws-rds-fips, crossplane-provider-aws-lambda, splunk-otel-collector, descheduler, nova, crossplane-provider-aws-acm-fips, melange, seaweedfs-operator-fips, crossplane-provider-aws-wafv2, gitlab-cng, ollama-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: bento, crossplane-provider-aws-rds-fips, crossplane-provider-aws-lambda, splunk-otel-collector, descheduler, nova, crossplane-provider-aws-acm-fips, melange, seaweedfs-operator-fips, crossplane-provider-aws-wafv2, gitlab-cng, ollama-fips,...

EUVD-2026-5560

The Agentspace service was affected by a vulnerability that exposed sensitive information due to the use of predictable Google Cloud Storage bucket names. These names were utilized for error logs and temporary staging during data imports from GCS and Cloud SQL. This predictability allowed an...

Fedora 42 : golang-github-googlecloudplatform-cloudsql-proxy (2025-582e97b7b4)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-582e97b7b4 advisory. Rebuilt for CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...