GO-2026-6497 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-arangodb, k9s, helm-set-status, kyverno-notation-aws, tigera-operator, rancher-helm, gitness, maru, cert-manager-cmctl, flux-helm-controller, k8sgpt, helm-push, opentofu, helm-mapkubeapis, kargo, xeol, manifest-tool...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: rancher, buildkitd, helm-set-status, docker-compose, kaniko, fuse-overlayfs-snapshotter, kubescape, headlamp, helm-push, skaffold, helm-mapkubeapis, syft, cluster-api-helm-controller, spegel, steampipe, zot, neuvector-scanner, kargo, newrelic-infrastructure-agent,...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, kubernetes-csi-external-snapshotter, rancher, cluster-autoscaler, cilium, kubernetes-csi-external-health-monitor, hubble-ui, flux-kustomize-controller, kubescape, emissary, rke2-cloud-provider, kots, rancher-system-agent, tetragon,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: trivy, envoy-gateway-fips, consul-k8s-fips, flux-source-controller-fips, rancher-helm, flux-source-controller, teleport, trivy-operator-fips, rancher-fleet-fips, cerbos, zarf, k9s, cert-manager-cmctl, flux, flux-fips, chartmuseum, kots, cluster-api-helm-controller,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, k9s-fips, tigera-operator-fips, kots, gogatekeeper, gitness, helm-push, argocd-image-updater-fips, kubescape, headlamp, ocm-cli, consul-k8s, envoy-gateway, trivy-operator, oras-fips, kgateway-fips, kube-arangodb,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, kubescape, kots, helm-push, cluster-api-helm-controller, cilium-cli, rancher-helm, helm-docs, tw, cert-manager-cmctl, k8ssandra-client, chart-testing, zarf, trivy, eksctl, k9s, flux, chartmuseum, flux-source-controller, flux-helm-controller, zot, helm-operator...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: pluto, envoy-gateway, rancher-fleet, kots, helm-push, cluster-api-helm-controller, linkerd2, cilium-cli, zot, istio, kargo, rancher-helm, helm-docs, tw, cert-manager-cmctl, k8ssandra-client, chart-testing, zarf, trivy, eksctl, k9s, cerbos, chartmuseum,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nuclei, pluto, kuberlr, dgraph, helm-set-status, kubernetes-csi-driver-nfs, harbor-registry, kpt, witness, opa, headlamp, neuvector-sigstore-interface, tflint, dex, cilium-cli, gobump, tkn, nri-consul, aws-privateca-issuer, grafana-rollout-operator, nri-f5, docker-cl...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, kots, chainctl, buildkitd, helm-push, kubescape, headlamp, consul-k8s, envoy-gateway, trivy-operator, livekit-cli, neuvector-scanner-fip...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: opa-envoy, buildkitd, rancher, envoy-gateway, helm-set-status, docker-compose, kaniko, teleport, fuse-overlayfs-snapshotter, kubescape, opa, kots, headlamp, helm-push, skaffold, helm-mapkubeapis, syft, cluster-api-helm-controller, spegel, linkerd2, steampipe, zot,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: opa-envoy, buildkitd, rancher, envoy-gateway, helm-set-status, docker-compose, kaniko, teleport, fuse-overlayfs-snapshotter, kubescape, opa, kots, headlamp, helm-push, skaffold, helm-mapkubeapis, syft, cluster-api-helm-controller, spegel, linkerd2, steampipe, zot,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, kots, chainctl, buildkitd, gogatekeeper, helm-push, kubescape, headlamp, consul-k8s, envoy-gateway, trivy-operator, livekit-cli,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: pluto, envoy-gateway, helm-set-status, rancher-fleet, kubescape, kots, headlamp, helm-push, helm-mapkubeapis, harbor, cluster-api-helm-controller, linkerd2, cilium-cli, nova, zot, istio, helm, kube-arangodb, helm-docs, trivy-operator, tw, cert-manager-cmctl,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: pluto, envoy-gateway, helm-set-status, rancher-fleet, kubescape, kots, headlamp, helm-push, helm-mapkubeapis, harbor, cluster-api-helm-controller, linkerd2, cilium-cli, nova, zot, istio, helm, kube-arangodb, helm-docs, trivy-operator, tw, cert-manager-cmctl,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: trivy, envoy-gateway-fips, helm-diff-fips, jfrog-cli, consul-k8s-fips, flux-source-controller-fips, chaos-mesh, flux-source-controller, teleport, kubescape-server, helm-exporter-fips, trivy-operator-fips, zarf-fips, nova-fips, rancher-fleet-fips, cerbos,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: trivy, envoy-gateway-fips, helm-diff-fips, jfrog-cli, consul-k8s-fips, flux-source-controller-fips, chaos-mesh, flux-source-controller, teleport, kubescape-server, helm-exporter-fips, trivy-operator-fips, zarf-fips, nova-fips, rancher-fleet-fips, cerbos,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, amazon-k8s-cni, elvish, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, amazon-k8s-cni, elvish, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips, volume-modifier-for-k8s,...