GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kots, headlamp, kube-arangodb, cert-manager-cmctl, harbor, helm-set-status, zot, k8ssandra-client, consul-k8s, pluto, nova, envoy-gateway, chart-testing, zarf, linkerd2, chartmuseum, helm-mapkubeapis, helm-docs, helm-operator, trivy,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kots, headlamp, kube-arangodb, cert-manager-cmctl, harbor, helm-set-status, zot, k8ssandra-client, consul-k8s, pluto, nova, envoy-gateway, chart-testing, zarf, linkerd2, chartmuseum, helm-mapkubeapis, helm-docs, helm-operator, trivy,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cloudbeat, chart-testing, cerbos, chaos-mesh-fips, tigera-operator-fips, cerbos-fips, kubescape, cluster-api-helm-controller-fips, harbor, helm-push, headlamp-fips, cloudbeat-fips, trivy-fips, nova, flux, k9s, k8ssandra-client-fips, trivy-operator-fips, zarf,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: s5cmd, hugo, tailscale, influx, kustomize, weaviate, act, falco-exporter, newrelic-infra-operator, kubernetes-csi-driver-nfs, goreleaser, frp, docker-cli-buildx, addon-resizer, http-echo, oauth2-proxy, rqlite, mcp-grafana, kubeflow-katib, prometheus-blackbox-exporter...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cloudbeat, chart-testing, cerbos, chaos-mesh-fips, tigera-operator-fips, cerbos-fips, kubescape, cluster-api-helm-controller-fips, harbor, helm-push, headlamp-fips, cloudbeat-fips, trivy-fips, nova, flux, k9s, k8ssandra-client-fips, trivy-operator-fips, zarf,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: s5cmd, metrics-server, tailscale, influx, kustomize, newrelic-infra-operator, crossplane-provider-aws-kinesis, kubernetes-csi-driver-nfs, addon-resizer, http-echo, oauth2-proxy, zarf, mcp-grafana, prometheus-blackbox-exporter, kubelet-csr-approver, cortex, ksops,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: s5cmd, metrics-server, tailscale, influx, kustomize, newrelic-infra-operator, crossplane-provider-aws-kinesis, kubernetes-csi-driver-nfs, addon-resizer, http-echo, oauth2-proxy, zarf, mcp-grafana, prometheus-blackbox-exporter, kubelet-csr-approver, cortex, ksops,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: fscrypt, rancher-machine, steampipe, metrics-server, minio-object-browser, terraform-provider-grafana, cert-manager-cmctl, kubernetes-csi-external-attacher, argo-cd, crossplane-provider-aws-eks, dataplaneapi, gitlab-runner, tempo, crossplane-provider-aws-kinesis,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kratos, s5cmd, metrics-server, tailscale, influx, kustomize, newrelic-infra-operator, crossplane-provider-aws-kinesis, kubernetes-csi-driver-nfs, addon-resizer, http-echo, oauth2-proxy, zarf, mcp-grafana, prometheus-blackbox-exporter, kubelet-csr-approver, cortex,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: fscrypt, rancher-machine, steampipe, metrics-server, minio-object-browser, terraform-provider-grafana, cert-manager-cmctl, kubernetes-csi-external-attacher, argo-cd, crossplane-provider-aws-eks, dataplaneapi, gitlab-runner, tempo, crossplane-provider-aws-kinesis,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, dkron-fips, cluster-api-helm-controller-fips, prometheus-adapter-fips, cloudbeat-fips, k6-operator-fips, eck-operator, argo-workflows, zot, opencost, volsync, dkron, temporal-fips, gitaly, buildkitd, etcd, cloud-provider-aws,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, argo-cd, gptscript, crossplane-provider-aws-eks, gitlab-runner, xeol, crossplane-provider-aws-kinesis, skaffold, goreleaser, melange, crossplane-provider-aws-iam, flux-kustomize-controller, docker-cli-buildx, zarf, terragrunt, openbao, witness,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, argo-cd, gptscript, crossplane-provider-aws-eks, gitlab-runner, xeol, crossplane-provider-aws-kinesis, skaffold, goreleaser, melange, crossplane-provider-aws-iam, flux-kustomize-controller, docker-cli-buildx, zarf, terragrunt, openbao, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, cerbos, packer, flux-kustomize-controller-fips, external-secrets-operator-fips, crossplane-provider-aws-firehose, gitsign, vcluster, rclone, argo-rollouts, cloudbeat-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-route53,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, cerbos, packer, flux-kustomize-controller-fips, external-secrets-operator-fips, crossplane-provider-aws-firehose, gitsign, vcluster, rclone, argo-rollouts, cloudbeat-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-route53,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, gendesk, dkron-fips, gitsign, logstash-exporter, checksec, cilium-fips, manifest-tool, logstash-exporter-fips, mongodb-kubernetes-operator, swagger, cluster-api-helm-controller-fips, gitlab-pages, haproxy-ingress, prometheus-adapter-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, gendesk, dkron-fips, gitsign, logstash-exporter, cilium-fips, manifest-tool, mongodb-kubernetes-operator, logstash-exporter-fips, swagger, cluster-api-helm-controller-fips, gitlab-pages, haproxy-ingress, prometheus-adapter-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, gendesk, dkron-fips, gitsign, logstash-exporter, checksec, cilium-fips, manifest-tool, logstash-exporter-fips, mongodb-kubernetes-operator, swagger, cluster-api-helm-controller-fips, gitlab-pages, haproxy-ingress, prometheus-adapter-fips,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: dapr, telegraf, sqlexporter, cluster-api-aws-controller, grafana-alloy, splunk-otel-collector, argo-events, bento, jitsucom-bulker, opentelemetry-collector-contrib...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: dapr, telegraf, sqlexporter, cluster-api-aws-controller, grafana-alloy, splunk-otel-collector, argo-events, bento, jitsucom-bulker, opentelemetry-collector-contrib...