GO-2026-6094 vulnerabilities

Vulnerabilities for packages: calico, yunikorn-k8shim, datadog-agent, cluster-api-ipam-provider-in-cluster, cluster-api-provider-vsphere, spqr, flux-notification-controller, flux-kustomize-controller, opentelemetry-operator, kots, zot, kuma, kubernetes-csi-external-health-monitor, tetragon,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: mailpit, kubescape-http-request, victoriametrics-operator-fips, crossplane-provider-gcp-beta-cloudplatform-fips, gpu-operator-fips, crossplane-provider-azure-netapp, tekton-chains, juicefs, opentofu-fips, crossplane-provider-aws-codepipeline-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: delve, stakater-reloader, cert-exporter, guac, crossplane-provider-aws-sns, authservice, crossplane-provider-aws-cloudformation, db-operator, octo-sts, sealed-secrets, terraform-provider-acme, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, buildkitd-fips, libnvidia-container, zitadel, apm-server-fips, etcd-fips, k8s-device-plugin, trino, reports-server, prometheus-operator, azuredisk-csi, azurefile-csi-fips, envoy-gateway-fips, opentofu-fips, k3s, grype-fips, grafana-operator, podma...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: grafana-mimir-fips, distribution-fips, kube-mgmt, eks-node-monitoring-agent, grafana-pyroscope, crossplane-provider-azure-network, crossplane-provider-azure-netapp, crossplane-provider-azure-servicebus, tekton-chains, secrets-store-csi-driver-provider-gcp, juicefs,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: grafana-mimir-fips, distribution-fips, kube-mgmt, eks-node-monitoring-agent, grafana-pyroscope, crossplane-provider-azure-network, crossplane-provider-azure-netapp, crossplane-provider-azure-servicebus, tekton-chains, secrets-store-csi-driver-provider-gcp, juicefs,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: delve, gitsign, helm-mapkubeapis, minio-object-browser, authservice, db-operator, opencost, filebrowser, kubernetes-dashboard-auth, flux-notification-controller, argo-rollouts, crossplane-provider-azure-managedidentity, docker-machine-driver-harvester, snyk-cli,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux-source-controller, aws-signer-notation-plugin, grpc-health-probe, eks-node-monitoring-agent, kubescape-http-request, mailpit, victoriametrics-operator-fips, terraform-provider-pagerduty, direnv, grafana-pyroscope, malcontent, gpu-operator-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: flux-source-controller, aws-signer-notation-plugin, grpc-health-probe, eks-node-monitoring-agent, kubescape-http-request, mailpit, victoriametrics-operator-fips, terraform-provider-pagerduty, direnv, grafana-pyroscope, malcontent, gpu-operator-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: flux-source-controller, aws-signer-notation-plugin, grpc-health-probe, eks-node-monitoring-agent, kubescape-http-request, mailpit, victoriametrics-operator-fips, terraform-provider-pagerduty, direnv, grafana-pyroscope, malcontent, gpu-operator-fips,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: flux-source-controller, aws-signer-notation-plugin, grpc-health-probe, eks-node-monitoring-agent, kubescape-http-request, mailpit, victoriametrics-operator-fips, terraform-provider-pagerduty, direnv, grafana-pyroscope, malcontent, gpu-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: mailpit, kubescape-http-request, timescaledb-tune, victoriametrics-operator-fips, gpu-operator-fips, juicefs, actions-runner-controller, opentofu-fips, git-lfs-fips, chart-testing-fips, eksctl, liquibase-package-manager, victorialogs-fips, agentbeat-fips, podman-fips...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: guac, crossplane-provider-aws-sns, opencost, db-operator, juicefs, octo-sts, flux-notification-controller, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy, docker-machine-driver-harvester, neuvector-sigstore-interface, snyk-cli, falco-no-driver,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: guac, crossplane-provider-aws-sns, opencost, db-operator, juicefs, octo-sts, flux-notification-controller, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy, docker-machine-driver-harvester, neuvector-sigstore-interface, snyk-cli, falco-no-driver,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: flux-source-controller, grafana-mimir-fips, distribution-fips, kube-mgmt, grafana-pyroscope, crossplane-provider-azure-network, crossplane-provider-azure-netapp, crossplane-provider-azure-servicebus, tekton-chains, reports-server, azcopy,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: flux-source-controller, grafana-mimir-fips, distribution-fips, kube-mgmt, grafana-pyroscope, crossplane-provider-azure-network, crossplane-provider-azure-netapp, crossplane-provider-azure-servicebus, tekton-chains, reports-server, azcopy,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, tekton-chains, reports-server, azcopy, secrets-store-csi-driver-provider-gcp, juicefs, envoy-gateway-fips, cluster-api-provider-vsphere, velero-fips, kyverno-notation-aws-fips, opentofu-fips, apm-server, knative-kafka-broker-fips, cloudbeat-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, grpc-health-probe, direnv, grafana-pyroscope, malcontent, secrets-store-csi-driver-provider-gcp, juicefs, nvidia-nsight-compute-13.0, velero-fips, opentofu-fips, git-lfs-fips, chart-testing-fips, eksctl, portieris, aws-privateca-issuer-fip...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: gitsign, guac, opencost, octo-sts, filebrowser, kubernetes-dashboard-auth, flux-notification-controller, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy, dgraph, kubeflow-katib, splunk-otel-collector, chezmoi, crossplane, thanos, eksctl,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: gitsign, guac, opencost, octo-sts, filebrowser, kubernetes-dashboard-auth, flux-notification-controller, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy, dgraph, kubeflow-katib, splunk-otel-collector, chezmoi, crossplane, thanos, eksctl,...