GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, azure-service-operator, cluster-api-aws-controller, kubernetes-csi-external-provisioner, rancher, kuma, k8ssandra-client, cluster-api-provider-vsphere, keda, kwok, vcluster, external-secrets-operator, spicedb, kube-vip-cloud-provider,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, nfpm, gatus, k9s, src, crossplane-provider-aws-ec2, act, rancher, prometheus-operator, go-discover, external-secrets-operator, steampipe, zarf, crossplane-provider-aws-firehose, pulumi-language-dotnet, gh, snyk-cli, trivy, ko,...

CLEANSTART-2026-QS96651 Security fixes in cloud-provider-aws-1.34 1.34.1-r1

Package cloud-provider-aws-1.34 version 1.34.1-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wnfv, ghsa-j5w8-q4qc-rx2x...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, azure-service-operator, cluster-api-aws-controller, kubernetes-csi-external-provisioner, rancher, kuma, k8ssandra-client, cluster-api-provider-vsphere, keda, kwok, vcluster, external-secrets-operator, spicedb, kube-vip-cloud-provider,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, knative-serving, gatekeeper, skaffold, seaweedfs-rocksdb-fips, kots, prometheus-operator, knative-kafka-broker, argocd-image-updater-fips, gitea-fips, kubescape, spire-server, omnictl-multiarch-fips, gitea, argo-workflows-fips, gatekeeper-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller-fips, skaffold, gptscript, terragrunt, crossplane-provider-aws-mediapackage-fips, crossplane-provider-azure-netapp, crossplane-provider-aws-cloudwatch, docker-fips, longhorn-cli-fips, crossplane-provider-family-aws, prometheus-operator,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, nfpm, gatus, k9s, act, rancher, prometheus-operator, go-discover, external-secrets-operator, steampipe, zarf, pulumi-language-dotnet, gh, snyk-cli, trivy, ko, flux-source-controller, external-dns, spire-server, zot, hcloud, dagger, falcoctl,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: skaffold, kyverno, fscrypt, osv-scanner, gitlab-kas, k9s, kubernetes-dashboard, gitea, telegraf, istio, kaf, rancher, flux-image-automation-controller, prometheus-operator, k3s, containerd, kubernetes, helm, cert-manager, trivy-operator, minio, cilium,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, nfpm, k9s, act, rancher, prometheus-operator, go-discover, external-secrets-operator, zarf, pulumi-language-dotnet, trivy, snyk-cli, flux-source-controller, external-dns, spire-server, zot, dagger, docker-cli-buildx, gomplate, kubescape,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: buildah, kyverno, fscrypt, gitlab-kas, kubernetes-dashboard, podman, telegraf, istio, kaf, rancher, prometheus-operator, k3s, containerd, kubernetes, helm, cert-manager, minio, cilium, external-secrets-operator, loki, cloud-provider-aws, aactl, snyk-cli, flux,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, buildah, kubernetes-csi-driver-nfs, step-issuer, terraform-provider-kubernetes, timoni, runc, podinfo, azure-service-operator, src, cluster-api-aws-controller, kubernetes-csi-external-provisioner, kubernetes-dashboard-auth, vault-env,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, buildah, kubernetes-csi-driver-nfs, step-issuer, terraform-provider-kubernetes, timoni, runc, podinfo, azure-service-operator, src, cluster-api-aws-controller, kubernetes-csi-external-provisioner, kubernetes-dashboard-auth, vault-env,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, kserve-rest-proxy, delve, s5cmd, cluster-api-provider-vsphere, vcluster, conftest, kind, docker-credential-acr-env, secrets-store-csi-driver, gitsign,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, kserve-rest-proxy, pombump, delve, s5cmd, cluster-api-provider-vsphere, vcluster, conftest, kind, docker-credential-acr-env, secrets-store-csi-driver, gitsign,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, kserve-rest-proxy, pombump, delve, s5cmd, cluster-api-provider-vsphere, vcluster, conftest, kind, docker-credential-acr-env, secrets-store-csi-driver, gitsign,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, cluster-api-azure-controller-fips, falcosidekick-fips, knative-operator, liquibase-package-manager, skaffold, ytt-fips, gptscript, jobset-fips, livekit-server-fips, temporal-server-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, cluster-api-azure-controller-fips, falcosidekick-fips, knative-operator, liquibase-package-manager, skaffold, ytt-fips, gptscript, jobset-fips, livekit-server-fips, temporal-server-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, helm-set-status, kubernetes-csi-driver-nfs, temporal-ui-server, timoni, runc, podinfo, maru, azure-service-operator, gatus, sbomqs, kubernetes-csi-external-provisioner, git-sync, src, vault-k8s, juicefs, influx,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: helm-set-status, juicefs, influx, k3d, s5cmd, conftest, secrets-store-csi-driver, dynamic-localpv-provisioner, nri-redis, bom, external-dns, pguser, sonobuoy, crossplane-provider-aws-elasticache, percona-server-mongodb-operator, eksctl, kustomize,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, helm-set-status, kubernetes-csi-driver-nfs, temporal-ui-server, timoni, runc, podinfo, maru, azure-service-operator, gatus, sbomqs, kubernetes-csi-external-provisioner, git-sync, nri-haproxy, src, vault-k8s, juicefs, influx,...