GO-2026-6094 vulnerabilities

Vulnerabilities for packages: k3s, zot, kubernetes-csi-external-attacher, hubble-ui, openfga, gitlab-kas, spicedb, descheduler, pulumi-kubernetes-operator, cluster-api-ipam-provider-in-cluster, cluster-api, helm-operator, grafana, vcluster, kubernetes-csi-external-provisioner,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: aws-fsx-csi-driver-fips, crossplane-provider-aws-efs-fips, step-fips, gitlab-runner, opensearch-k8s-operator-fips, oauth2-proxy-fips, slsa-verifier, omni-fips, sonobuoy-fips, crossplane-provider-aws-rds, crossplane-provider-aws-guardduty, telegraf, trino, gitness,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trino, net-kourier, docker-machine-driver-linode, opa, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, crossplane-provider-azure-storage, spire-server, kubeflow-pipelines, k3s, node-problem-detector, xeol, flux-image-reflector-controller,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: cerbos-fips, azurefile-csi-fips, knative-serving-fips, helmfile, knative-operator-fips, buildkitd, cert-manager-fips, dapr, docker-fips, etcd, prometheus-operator, ingress-nginx-controller-fips, cloud-provider-azure, cluster-autoscaler-fips, kyverno,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, aws-fsx-csi-driver-fips, crossplane-provider-aws-macie2, knative-operator-fips, kserve-localmodelnode-agent, crossplane-function-patch-and-transform,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, aws-fsx-csi-driver-fips, crossplane-provider-aws-macie2, knative-operator-fips, kserve-localmodelnode-agent, crossplane-function-patch-and-transform,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: net-kourier, docker-machine-driver-linode, lvm-driver, trivy, syft, crossplane-provider-azure-storage, spire-server, gitaly, xeol, k3s, zot, weaviate, sriov-network-device-plugin, flux-image-reflector-controller, kubernetes-csi-external-attacher,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, juicefs-csi-driver, aws-fsx-csi-driver-fips, knative-operator-fips, mockery, nri-apache, nri-f5, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, juicefs-csi-driver, aws-fsx-csi-driver-fips, knative-operator-fips, mockery, nri-apache, nri-f5, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, juicefs-csi-driver, aws-fsx-csi-driver-fips, knative-operator-fips, mockery, nri-apache, nri-f5, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: aws-fsx-csi-driver-fips, crossplane-provider-aws-efs-fips, kubevirt-cdi-operator-fips, step-fips, opensearch-k8s-operator-fips, gitlab-cng, oauth2-proxy-fips, slsa-verifier, omni-fips, sonobuoy-fips, telegraf, gitness, consul-k8s, neuvector-dbgen, lvm-driver-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, juicefs-csi-driver, aws-fsx-csi-driver-fips, knative-operator-fips, mockery, nri-apache, nri-f5, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: net-kourier, trivy, opa, crossplane-provider-aws-elasticache, syft, crossplane-provider-azure-storage, spire-server, gitaly, kubeflow-pipelines, k3s, node-problem-detector, restic, weaviate, xeol, zot, kubernetes-csi-external-attacher, terragrunt, mcp-grafana,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: net-kourier, trivy, opa, crossplane-provider-aws-elasticache, syft, crossplane-provider-azure-storage, spire-server, gitaly, kubeflow-pipelines, k3s, node-problem-detector, restic, weaviate, xeol, zot, kubernetes-csi-external-attacher, terragrunt, mcp-grafana,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, aws-fsx-csi-driver-fips, crossplane-provider-aws-macie2, knative-operator-fips, crossplane-function-patch-and-transform, docker-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, aws-fsx-csi-driver-fips, crossplane-provider-aws-macie2, knative-operator-fips, crossplane-function-patch-and-transform, docker-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, aws-node-termination-handler, docker-fips, kubevirt-cdi-operator-fips, gitlab-runner, gitlab-cng, kube-arangodb-fips, cloud-provider-azure-fips, aws-node-termination-handler-fips, sftpgo-plugin-kms,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, azurefile-csi-fips, aws-node-termination-handler, atlantis, kubewatch, docker-fips, kubernetes-release, apache-exporter, step-fips, ytt, gitlab-cng, cloudnative-pg, gosu, slsa-verifier, cloud-provider-azure-fips, overmind,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: trivy, crossplane-provider-azure-storage, spire-server, xeol, k3s, restic, weaviate, zot, flux-image-reflector-controller, terragrunt, opentofu, azcopy, op-geth, scorecard, openfga, hydra, terraform-provider-azurerm, kargo, step, pulumi-kubernetes-operator, octo-sts,...

GHSA-MH63-6H87-95CP vulnerabilities

Vulnerabilities for packages: trivy, crossplane-provider-azure-storage, spire-server, xeol, k3s, restic, weaviate, zot, flux-image-reflector-controller, terragrunt, opentofu, azcopy, op-geth, scorecard, openfga, hydra, terraform-provider-azurerm, kargo, step, pulumi-kubernetes-operator, octo-sts,...