GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: authentik, prometheus, docker-cli-buildx, docker-cli-buildx-fips, kubernetes-dashboard, cerbos, atlantis-fips, ocm-kubernetes-controller-fips, prometheus-elasticsearch-exporter, dapr, loki, harbor-fips, keda-fips, kine, helmfile, cilium-cli, karpenter-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: authentik, prometheus, gotrue, crossplane-provider-aws-ec2-fips, newrelic-infrastructure-agent, crossplane-provider-aws-kms-fips, pinniped-fips, crossplane-provider-aws-imagebuilder-fips, stunnerd, percona-xtradb-cluster-operator, flux-helm-controller-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: authentik, prometheus, gotrue, crossplane-provider-aws-ec2-fips, newrelic-infrastructure-agent, crossplane-provider-aws-kms-fips, pinniped-fips, crossplane-provider-aws-imagebuilder-fips, stunnerd, percona-xtradb-cluster-operator, flux-helm-controller-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, ingress-nginx-controller, bento, gh, trillian, bank-vaults, grpcurl, goreleaser, helm-mapkubeapis, jitsucom-bulker, cadvisor, k8ssandra-client, knative-operator, step-issuer, memcached-exporter, redpanda, argo-rollouts, net-kourier, delv...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager, chart-testing-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: wireguard-go, kube-bench, docker-credential-acr-env-fips, percona-xtradb-cluster-operator, flux-helm-controller-fips, sftpgo-plugin-geoipfilter, coredns-fips, terraform-provider-kubernetes, virt-api-fips, amazon-k8s-cni, gitlab-rails-ce, beats-fips, nri-redis,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager, chart-testing-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager, chart-testing-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-aws-ec2-fips, kube-bench, docker-credential-acr-env-fips, newrelic-infrastructure-agent, nri-couchbase-fips, wavefront-collector-for-kubernetes, crossplane-provider-aws-kms-fips, longhorn-backing-image-manager, chart-testing-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: jaeger-operator, ingress-nginx-controller, bento, trillian, bank-vaults, restic, goreleaser, jitsucom-bulker, k8ssandra-client, cadvisor, opentelemetry-collector-contrib, conftest, knative-operator, cert-manager-webhook-pdns, step-issuer, argo-rollouts, net-kourier,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: jaeger-operator, ingress-nginx-controller, bento, trillian, bank-vaults, restic, goreleaser, jitsucom-bulker, k8ssandra-client, cadvisor, opentelemetry-collector-contrib, conftest, knative-operator, cert-manager-webhook-pdns, step-issuer, argo-rollouts, net-kourier,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: authentik, prometheus, gotrue, crossplane-provider-aws-ec2-fips, newrelic-infrastructure-agent, crossplane-provider-aws-kms-fips, crossplane-provider-aws-scheduler-fips, grafana-mimir-fips, k6-fips, trillian-fips, coredns-fips, cluster-api-provider-vsphere,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: authentik, prometheus, gotrue, crossplane-provider-aws-ec2-fips, newrelic-infrastructure-agent, crossplane-provider-aws-kms-fips, crossplane-provider-aws-scheduler-fips, grafana-mimir-fips, k6-fips, trillian-fips, coredns-fips, cluster-api-provider-vsphere,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: prometheus, k6-fips, trillian-fips, coredns-fips, cluster-api-provider-vsphere, beats-fips, cert-manager-webhook-pdns, sftpgo-plugin-pubsub, datadog-operator, beats, k8s-agents-operator-fips, kubevela, ratify, skaffold-fips, grype, kyverno-notation-aws-fips, tfsec,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: prometheus, kube-bench, gotestsum, wavefront-collector-for-kubernetes, petname, chart-testing-fips, flux-helm-controller-fips, kyverno-policy-reporter-kyverno-plugin-fips, grafana-mimir-fips, k6-fips, trillian-fips, contour, terraform-provider-kubernetes, cilium-cli,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: bank-vaults, restic, goreleaser, actions-runner-controller, jitsucom-bulker, opentelemetry-collector-contrib, argo-rollouts, grafana-alloy, kyverno-policy-reporter-ui, vexctl, crossplane-provider-azure-storage, ko, rancher, trivy, ksops, thanos, gitsign, kyverno,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: bank-vaults, restic, goreleaser, actions-runner-controller, jitsucom-bulker, opentelemetry-collector-contrib, argo-rollouts, grafana-alloy, kyverno-policy-reporter-ui, vexctl, crossplane-provider-azure-storage, ko, rancher, trivy, ksops, thanos, gitsign, kyverno,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kbld, kubernetes-dashboard-metrics-scraper, grpcurl, croc, argo-rollouts, gosu, delve, karma, lvm-driver, kind, vendir, docker-credential-gcr, gitsign, yunikorn-web, sftpgo-plugin-kms, splunk-otel-collector, tflint, cloud-provider-aws, kiali, kubernetes-dashboard-web...