GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, spqr, cloud-provider-azure, kuma, rancher, spicedb, kube-state-metrics, emissary, kapp-controller, kyverno, calico, flux-helm-controller, gitlab-kas, kubescape, kots, gatekeeper, cluster-api-aws-controller, grafana, descheduler, hubble-ui,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: crossplane, generic-device-plugin, local-static-provisioner-fips, cortex-fips, cilium, crossplane-provider-aws-efs, falcosidekick-fips, spiffe-helper-fips, k8ssandra-client-fips, kafka-proxy-fips, nginx-kubernetes-ingress-fips, crossplane-provider-aws-appautoscaling,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: delve, rancher-helm, sops, crossplane-provider-aws-cloudwatchlogs, spqr, volume-modifier-for-k8s, grafana-rollout-operator, kuma, paranoia, polaris, rancher, kube-state-metrics, aws-efs-csi-driver, rabbitmq-cluster-operator, crossplane-provider-aws-sqs, croc,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: dapr-fips, buildkite-agent-fips, prometheus-operator-fips, cilium-fips, podman-fips, knative-eventing-fips, eks-distro, vault-secrets-operator, ocm-cli-fips, prometheus-mongodb-exporter, snyk-cli, consul-fips, kube-state-metrics, traefik, rke2-runtime-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: percona-xtradb-cluster-operator, amazon-eks-ami, crossplane, kyverno-policy-reporter-fips, dapr-fips, amazon-cloudwatch-agent-operator, plugin-barman-cloud, cortex-fips, cilium, fluent-operator, redpanda-operator, seaweedfs-operator-fips, cilium-fips, dex-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: percona-xtradb-cluster-operator, amazon-eks-ami, crossplane, kyverno-policy-reporter-fips, dapr-fips, amazon-cloudwatch-agent-operator, plugin-barman-cloud, cortex-fips, cilium, fluent-operator, redpanda-operator, seaweedfs-operator-fips, cilium-fips, dex-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: delve, rancher-helm, volume-modifier-for-k8s, spqr, grafana-rollout-operator, kube-arangodb, rancher, polaris, terraform, kube-state-metrics, aws-efs-csi-driver, secrets-store-csi-driver-provider-aws, ko, spiffe-helper, falco-no-driver, seaweedfs, grafana, coredns, g...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: amazon-eks-ami, crossplane, authservice-fips, kyverno-policy-reporter-fips, docker-credential-ecr-login-fips, crossplane-provider-aws-cognitoidentity-fips, dapr-fips, amazon-cloudwatch-agent-operator, local-static-provisioner-fips, nri-mysql, plugin-barman-cloud,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: amazon-eks-ami, crossplane, authservice-fips, kyverno-policy-reporter-fips, docker-credential-ecr-login-fips, crossplane-provider-aws-cognitoidentity-fips, dapr-fips, amazon-cloudwatch-agent-operator, local-static-provisioner-fips, nri-mysql, plugin-barman-cloud,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: amazon-eks-ami, crossplane, authservice-fips, kyverno-policy-reporter-fips, docker-credential-ecr-login-fips, crossplane-provider-aws-cognitoidentity-fips, dapr-fips, amazon-cloudwatch-agent-operator, local-static-provisioner-fips, nri-mysql, plugin-barman-cloud,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: amazon-eks-ami, crossplane, authservice-fips, kyverno-policy-reporter-fips, docker-credential-ecr-login-fips, crossplane-provider-aws-cognitoidentity-fips, dapr-fips, amazon-cloudwatch-agent-operator, local-static-provisioner-fips, nri-mysql, plugin-barman-cloud,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: percona-xtradb-cluster-operator, crossplane, local-static-provisioner-fips, cilium, crossplane-provider-aws-efs, spiffe-helper-fips, aws-network-policy-agent, elvish, iptables-wrappers, k8ssandra-client-fips, kafka-proxy-fips, nginx-kubernetes-ingress-fips, nsc-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, sops, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, kuma, rancher, kube-state-metrics, rabbitmq-cluster-operator, loki, neuvector-sigstore-interface, crossplane-provider-aws-sqs, ko, falco-no-driver,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: azuredisk-csi, sops, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, kuma, rancher, kube-state-metrics, rabbitmq-cluster-operator, loki, neuvector-sigstore-interface, crossplane-provider-aws-sqs, ko, falco-no-driver,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: amazon-eks-ami, kyverno-policy-reporter-fips, crossplane-provider-aws-cognitoidentity-fips, dapr-fips, sops, plugin-barman-cloud, crossplane-provider-aws-kafkaconnect-fips, cortex-fips, cilium, crossplane-provider-aws-efs, fluent-operator, certificate-transparency,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: amazon-eks-ami, kyverno-policy-reporter-fips, crossplane-provider-aws-cognitoidentity-fips, dapr-fips, sops, plugin-barman-cloud, crossplane-provider-aws-kafkaconnect-fips, cortex-fips, cilium, crossplane-provider-aws-efs, fluent-operator, certificate-transparency,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: sops, cortex-fips, fluent-operator, falcosidekick-fips, fluent-operator-fips, gitlab-operator-fips, gcp-compute-persistent-disk-csi-driver, grafana-beyla, google-osconfig-agent, secrets-store-csi-driver-provider-gcp, trivy, temporal, fulcio, boring-registry-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-fips, dapr-fips, overmind, nri-mysql, yam, cortex-fips, cilium, certificate-transparency, aws-application-networking-k8s-fips, cilium-fips, dex-fips, yace, gcp-compute-persistent-disk-csi-driver, rancher-fleet, aws-network-policy-agent, elvish...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: sops, terraform, ko, seaweedfs, rook, atlantis, crossplane, amazon-cloudwatch-agent, minio, vexctl, hydra, cosign, terragrunt, chartmuseum, traefik, openfga, mc, secrets-store-csi-driver-provider-azure, jitsucom-bulker, sigstore-scaffolding, sftpgo-plugin-kms,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: sops, terraform, ko, seaweedfs, rook, atlantis, crossplane, amazon-cloudwatch-agent, minio, vexctl, hydra, cosign, terragrunt, chartmuseum, traefik, openfga, mc, secrets-store-csi-driver-provider-azure, jitsucom-bulker, sigstore-scaffolding, sftpgo-plugin-kms,...