CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: harbor, rancher-fleet, cluster-api-helm-controller, cert-manager-cmctl, cerbos, helm-mapkubeapis, consul-k8s, pluto, trivy-operator, linkerd2, kuma, tw, kots, helm-operator, tigera-operator, istio, headlamp, kubescape, zot, zarf, chart-testing, cilium-cli, chartmuseu...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: harbor, rancher-fleet, cluster-api-helm-controller, cert-manager-cmctl, cerbos, helm-mapkubeapis, consul-k8s, pluto, trivy-operator, linkerd2, kuma, tw, kots, helm-operator, tigera-operator, istio, headlamp, kubescape, zot, zarf, chart-testing, cilium-cli, chartmuseu...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, consul-k8s-fips, cerbos-fips, helm-diff-fips, helm-docs, gitlab-operator, gitlab-operator-fips, harbor-fips, helm-operator-fips, linkerd2, cerbos, pluto, helm-diff, flux, kuma, chart-testing-fips, nova, headlamp-fips, eksctl, flux-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-rabbitmq, kserve-modelmesh-serving, xeol, mariadb-operator, pluto, grafana-rollout-operator, litefs, external-dns, cri-tools, argo-cd, crossplane-provider-sql, gobuster, kor, gitsign, nri-apache, clickhouse-operator, emissary, spire-server, vault-k8s,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, consul-k8s-fips, cerbos-fips, helm-diff-fips, helm-docs, gitlab-operator, gitlab-operator-fips, harbor-fips, helm-operator-fips, linkerd2, cerbos, pluto, helm-diff, flux, kuma, chart-testing-fips, nova, headlamp-fips, eksctl, flux-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, pulumi-kubernetes-operator, minio, kserve-modelmesh-serving, crossplane-provider-aws-route53, gitlab-kas, step-issuer, azuredisk-csi, flux-image-automation-controller, argo-rollouts, kubevela, terraform-provider-time, coredns,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, pulumi-kubernetes-operator, minio, kserve-modelmesh-serving, crossplane-provider-aws-route53, gitlab-kas, step-issuer, azuredisk-csi, flux-image-automation-controller, argo-rollouts, kubevela, terraform-provider-time, coredns,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, kubevela, kaniko, mariadb-operator, pluto, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, argo-cd, cloudprober, kor, nri-apache,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, kubevela, kaniko, mariadb-operator, pluto, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, argo-cd, cloudprober, kor, nri-apache,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, kubevela, kaniko, mariadb-operator, pluto, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, argo-cd, cloudprober, kor, nri-apache,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, k6, headlamp-fips, argo-rollouts-fips, policy-controller-fips, vault-fips, conftest, vault-secrets-webhook, steampipe, argocd-image-updater-fips, zitadel, cert-manager, aws-otel-collector-fips, kubernetes-csi-external-attacher, vitess, spire-serve...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, pulumi-kubernetes-operator, crossplane-provider-aws-route53, xeol, flux-image-automation-controller, argo-rollouts, kubevela, gitaly, hydra, sops, terraform-provider-azurerm, crossplane-provider-aws-s3, argo-events,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, pulumi-kubernetes-operator, crossplane-provider-aws-route53, xeol, flux-image-automation-controller, argo-rollouts, kubevela, gitaly, hydra, sops, terraform-provider-azurerm, crossplane-provider-aws-s3, argo-events,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-fips, gitlab-runner-fips, crossplane-provider-keycloak, actions-runner-controller, pulumi-language-yaml, crossplane, crossplane-provider-aws-ecr, cerbos, atlantis, kubevela-fips, crossplane-provider-aws-iam-fips, vault, flux-fips, helm-push, gitness,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-fips, gitlab-runner-fips, crossplane-provider-keycloak, actions-runner-controller, pulumi-language-yaml, crossplane, crossplane-provider-aws-ecr, cerbos, atlantis, kubevela-fips, crossplane-provider-aws-iam-fips, vault, flux-fips, helm-push, gitness,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kapp, buf, gitlab-runner-fips, git-lfs, chezmoi, kubernetes-replicator, prometheus-beat-exporter-fips, crossplane-provider-aws-iam-fips, k6, mkcert, vgpu-util, gitness, docker-credential-acr-env, spire-controller-manager, ginkgo, peerdb-flow,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kapp, buf, gitlab-runner-fips, git-lfs, chezmoi, kubernetes-replicator, prometheus-beat-exporter-fips, crossplane-provider-aws-iam-fips, k6, mkcert, vgpu-util, gitness, docker-credential-acr-env, spire-controller-manager, ginkgo, peerdb-flow,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kapp, buf, gitlab-runner-fips, git-lfs, chezmoi, kubernetes-replicator, prometheus-beat-exporter-fips, crossplane-provider-aws-iam-fips, k6, gitness, docker-credential-acr-env, spire-controller-manager, ginkgo, peerdb-flow, prometheus-redis-exporter,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, amazon-cloudwatch-agent, splunk-otel-collector, argo-events, grafana-alloy, bento, sqlexporter, opentelemetry-collector-contrib, jitsucom-bulker...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, amazon-cloudwatch-agent, splunk-otel-collector, argo-events, grafana-alloy, bento, sqlexporter, opentelemetry-collector-contrib, jitsucom-bulker...