GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, flux-kustomize-controller, apisix-ingress-controller, kube-metrics-adapter, tetragon, cluster-api-helm-controller, tekton-pipelines, cert-manager-istio-csr, calico, cluster-api-provider-vsphere, opentelemetry-operator,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet, chart-testing, k8sgpt, linkerd2-fips, trivy-fips, consul-k8s, chart-testing-fips, flux, istio, k8ssandra-client, cerbos-fips, cilium-cli, k8ssandra-client-fips, eksctl, tw, helm-docs, kargo, rancher-helm, helm-push, rancher-fleet-fips, chartmuseum,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, cluster-api-helm-controller-fips, drone, zarf-fips, helm-exporter, tigera-operator, helm-push, zarf, gitlab-operator, crossplane-fips, helm-mapkubeapis, kubescape-operator, cert-manager-cmctl, gatekeeper, maru, kots,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, flux-source-controller, flux, tw, cert-manager-cmctl, rancher-helm, kubescape, helm-operator, zot, k9s, chart-testing, k8ssandra-client, kots, flux-helm-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, flux-source-controller, cerbos, tw, cert-manager-cmctl, kargo, rancher-helm, helm-operator, envoy-gateway, zot, istio, k9s, chart-testing, k8ssandra-client, kots,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, kubecolor, render-template, cilium-cli, polaris, cluster-api-helm-controller, nri-haproxy, cluster-api-provider-vsphere, neuvector-sigstore-interface, nri-consul, kubernetes-dashboard, aactl, argo-events,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, docker-compose-fips, neuvector-scanner, k8sgpt, cloudbeat, cluster-api-helm-controller-fips, newrelic-infrastructure-agent-fips, chainctl-fips, zarf-fips, helm-exporter, tigera-operator, helm-push, zarf, crossplane-fips,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, kaniko, opa, helm-mapkubeapis, tigera-operator, chartmuseum, spegel, ctop, rancher-agent, newrelic-infrastructure-agent, helm-push, trivy, opa-envoy, datadog-agent, scorecard, zarf, k3s, neuvector-scanner, kubescape-operator, gatekeeper, syft,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, kaniko, opa, helm-mapkubeapis, tigera-operator, chartmuseum, spegel, ctop, rancher-agent, newrelic-infrastructure-agent, helm-push, trivy, opa-envoy, datadog-agent, scorecard, zarf, k3s, neuvector-scanner, kubescape-operator, gatekeeper, syft,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, docker-compose-fips, neuvector-scanner, k8sgpt, cloudbeat, cluster-api-helm-controller-fips, opa-fips, newrelic-infrastructure-agent-fips, chainctl-fips, zarf-fips, helm-exporter, tigera-operator, helm-push, eks-node-monitoring-agent,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: tigera-operator, eksctl, helm-mapkubeapis, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, headlamp, flux-source-controller, cerbos, flux, tw, kuma, cert-manager-cmctl, kubescape, helm-operator, consul-k8s, envoy-gatewa...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: tigera-operator, eksctl, helm-mapkubeapis, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, headlamp, flux-source-controller, cerbos, flux, tw, kuma, cert-manager-cmctl, kubescape, helm-operator, consul-k8s, envoy-gatewa...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: rancher-fleet, chart-testing, k9s-fips, kubescape-server-fips, linkerd2-fips, cloudbeat, trivy-fips, chaos-mesh, cluster-api-helm-controller-fips, zot, consul-k8s, chart-testing-fips, headlamp-fips, flux, istio, headlamp, helm-set-status, k8ssandra-client, cerbos-fip...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: rancher-fleet, chart-testing, k9s-fips, kubescape-server-fips, linkerd2-fips, cloudbeat, trivy-fips, chaos-mesh, cluster-api-helm-controller-fips, zot, consul-k8s, chart-testing-fips, headlamp-fips, flux, istio, headlamp, helm-set-status, k8ssandra-client, cerbos-fip...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gitleaks, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, terraform-provider-acme-fips, vault-secrets-operator, cargobump, kube-fluentd-operator, zabbix-agent2, terraform-provider-azuread-fips, velero, doppler-kubernetes-operato...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: gitleaks, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, terraform-provider-acme-fips, vault-secrets-operator, cargobump, kube-fluentd-operator, zabbix-agent2, terraform-provider-azuread-fips, velero, doppler-kubernetes-operato...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: gitleaks, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8sgpt, terraform-provider-acme-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, terraform-provider-azuread-fips, doppler-kubernetes-operator, tkn, gh,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, kubecolor, render-template, cilium-cli, polaris, cluster-api-helm-controller, nri-haproxy, cluster-api-provider-vsphere, neuvector-sigstore-interface, nri-consul, kubernetes-dashboard, aactl, argo-events,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, kubecolor, render-template, cilium-cli, polaris, cluster-api-helm-controller, nri-haproxy, cluster-api-provider-vsphere, neuvector-sigstore-interface, nri-consul, kubernetes-dashboard, aactl, argo-events,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, chart-testing, cluster-api-provider-vsphere, k8sgpt, kubecolor, monstache, tkn, karpenter, cert-manager, rancher-system-upgrade-controller, nri-haproxy, rabbitmq-cluster-operator, rancher-system-agent, plugin-barman-cloud, cloud-provider-vsphere,...