GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, kubernetes-csi-external-resizer, cloud-provider-azure, flux-notification-controller, kyverno, spqr, helm-operator, kubernetes-csi-external-attacher, kubescape-operator, spicedb, keda, kube-state-metrics, kubernetes, openfga,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: kots, envoy-gateway, consul-k8s, tw, cert-manager-cmctl-fips, helm-operator, chart-testing-fips, rancher-helm, helm-push, k8sgpt, zarf, helm-docs, harbor-fips, envoy-gateway-fips, kargo, teleport, k8ssandra-client-fips, cluster-api-helm-controller, trivy, cerbos,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, falcoctl, consul-k8s, cert-manager-cmctl-fips, kubescape, ocm-cli-fips, oras-fips, gogatekeeper, ocm-cli, redpanda-operator, falcoctl-fips, xeol, k8ssandra-client-fips, cloudbeat-fips, steampipe, gitlab-operator, k9s,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux, cert-manager-cmctl, helm-docs, helm-operator, pluto, k8ssandra-client, k9s, helm-push, cilium-cli, trivy, chartmuseum, chart-testing, cluster-api-helm-controller, flux-helm-controller, kubescape, tw, zot, flux-source-controller, eksctl, kots, zarf...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, rancher-helm, rancher-fleet, cert-manager-cmctl, helm-docs, helm-operator, pluto, k8ssandra-client, k9s, helm-push, cilium-cli, trivy, chartmuseum, chart-testing, k8sgpt, cluster-api-helm-controller, flux-helm-controller, istio, linkerd2, tw, zot,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: headlamp, controller-gen, prometheus-operator, ipfs-cluster, grafana-alloy, helm-operator, docker-credential-gcr, aws-application-networking-k8s, pluto, steampipe, cni-plugins, cilium-cli, fulcio, neuvector-sigstore-interface, mockgen, nova, prometheus, kapp,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, kube-mgmt-fips, kots, t...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: headlamp, kargo, skaffold, rancher-helm, spegel, helm, kube-arangodb, trivy-operator, manifest-tool, syft, helm-operator, newrelic-infrastructure-agent, kubevela, kubescape-operator, docker, consul-k8s, buildkitd, rancher-agent, k8ssandra-client, k9s, dagger,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: headlamp, kargo, skaffold, rancher-helm, spegel, helm, kube-arangodb, trivy-operator, manifest-tool, syft, helm-operator, newrelic-infrastructure-agent, kubevela, kubescape-operator, docker, consul-k8s, buildkitd, rancher-agent, k8ssandra-client, k9s, dagger,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, gogatekeeper, opa-fips-envoy, redpanda-operator, docker-cli-buildx, xeol, k8ssandra-client-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cerbos, headlamp, rancher-fleet, kube-arangodb, flux, trivy-operator, cert-manager-cmctl, helm-docs, helm-operator, consul-k8s, pluto, k8ssandra-client, k9s, helm-push, cilium-cli, trivy, helm-mapkubeapis, nova, chartmuseum, chart-testing, cluster-api-helm-controller...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cerbos, headlamp, rancher-fleet, kube-arangodb, flux, trivy-operator, cert-manager-cmctl, helm-docs, helm-operator, consul-k8s, pluto, k8ssandra-client, k9s, helm-push, cilium-cli, trivy, helm-mapkubeapis, nova, chartmuseum, chart-testing, cluster-api-helm-controller...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, envoy-gateway, consul-k8s, helm-exporter, cert-manager-cmctl-fips, kots, kubescape, helm-operator, tw, chart-testing-fips, pluto-fips, helm-push, kube-arangodb-fips, trivy-operator, zarf, nova, helm-docs, chaos-mesh,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, envoy-gateway, consul-k8s, helm-exporter, cert-manager-cmctl-fips, kots, kubescape, helm-operator, tw, chart-testing-fips, pluto-fips, helm-push, kube-arangodb-fips, trivy-operator, zarf, nova, helm-docs, chaos-mesh,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, hubble-ui-backend-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, hubble-ui-backend-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, terraform-provider-azapi-fips, wavefront-collector-for-kubernetes, terraform-provider-kubernetes, generic-device-plugin-fips, zabbix-agent2-fips, bazelisk, docker-credential-acr-env-fips, timestamp-authority, ytt, hubble-ui-backend-fips,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: headlamp, controller-gen, prometheus-operator, ipfs-cluster, grafana-alloy, helm-operator, docker-credential-gcr, aws-application-networking-k8s, pluto, steampipe, cni-plugins, cilium-cli, fulcio, neuvector-sigstore-interface, mockgen, nova, prometheus, kapp,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: headlamp, controller-gen, prometheus-operator, ipfs-cluster, grafana-alloy, helm-operator, docker-credential-gcr, aws-application-networking-k8s, pluto, steampipe, cni-plugins, cilium-cli, fulcio, neuvector-sigstore-interface, mockgen, nova, prometheus, kapp,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: falcoctl, consul-k8s, fzf, lazydocker, swagger, traefik, kubernetes-dashboard, kubernetes-csi-external-health-monitor, migrate, rke2-runtime, wait-for-port, cloud-provider-gcp-cloud-controller-manager, gendesk, prometheus, rabbitmq-default-user-credential-updater,...