GO-2026-6094 vulnerabilities

Vulnerabilities for packages: telegraf, spicedb-operator, apisix-ingress-controller, tekton-pipelines, datadog-agent, kwok, kubescape-operator, cloud-provider-azure, flux-helm-controller, kube-vip-cloud-provider, kubernetes-csi-external-resizer, emissary, tkn, cluster-api,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: istio, chartmuseum, envoy-gateway, k9s, chart-testing, zarf, helm-operator-fips, cert-manager-cmctl-fips, k8ssandra-client-fips, flux-helm-controller, trivy, cerbos-fips, consul-k8s, eksctl, flux-helm-controller-fips, cluster-api-helm-controller, k8ssandra-client,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: drone-fips, envoy-gateway, k9s, redpanda-operator, zarf, tigera-operator, argo-cd-fips, kyverno, ocm-cli, vcluster-fips, consul-k8s, eksctl, gatekeeper, kubescape-operator-fips, opentofu-fips, rancher, xeol-fips, helm-mapkubeapis, drone, gitness, opentofu,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, k8ssandra-client, kots, trivy, rancher-helm, chartmuseum, helm-docs, helm-push, flux, flux-helm-controller, k9s, cert-manager-cmctl, flux-source-controller, kubescape, tw, eksctl, helm-operator, cilium-cli, zot, chart-testing, zarf, cluster-api-helm-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: kargo, k8sgpt, pluto, k8ssandra-client, cerbos, kots, trivy, rancher-helm, chartmuseum, helm-docs, helm-push, flux-helm-controller, k9s, linkerd2, envoy-gateway, cert-manager-cmctl, rancher-fleet, flux-source-controller, tw, eksctl, helm-operator, cilium-cli, zot,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: fzf, nova, rabbitmq-default-user-credential-updater, aws-eks-pod-identity-agent, k8sgpt, guac, lazydocker, rabbitmq-cluster-operator, nri-consul, falcoctl, trivy, nginx-prometheus-exporter, chartmuseum, flux, bom, helm-set-status, clickhouse-operator,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, tigera-operator, k3s, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: kargo, grype, containerd, gogatekeeper, scorecard, dagger, k8sgpt, buildkitd, helm-mapkubeapis, spegel, opa, docker-compose, opa-envoy, teleport, docker-cli-buildx, k8ssandra-client, manifest-tool, newrelic-infrastructure-agent, syft, datadog-agent, docker, kots,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kargo, grype, containerd, gogatekeeper, scorecard, dagger, k8sgpt, buildkitd, helm-mapkubeapis, spegel, opa, docker-compose, opa-envoy, teleport, docker-cli-buildx, k8ssandra-client, manifest-tool, newrelic-infrastructure-agent, syft, datadog-agent, docker, kots,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: docker-compose, envoy-gateway, k9s, redpanda-operator, kaniko-fips, zarf, opa, k3s, tigera-operator, gitlab-rails-ce, packer-fips, consul-k8s, eksctl, gatekeeper, neuvector-fips, newrelic-infrastructure-agent, kubevela-fips, kubescape-operator-fips, rancher,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: nova, helm-mapkubeapis, kuma, pluto, k8ssandra-client, harbor, cerbos, kots, trivy, chartmuseum, helm-docs, helm-push, flux, trivy-operator, helm-set-status, k9s, linkerd2, tigera-operator, envoy-gateway, cert-manager-cmctl, rancher-fleet, consul-k8s, headlamp,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: nova, helm-mapkubeapis, kuma, pluto, k8ssandra-client, harbor, cerbos, kots, trivy, chartmuseum, helm-docs, helm-push, flux, trivy-operator, helm-set-status, k9s, linkerd2, tigera-operator, envoy-gateway, cert-manager-cmctl, rancher-fleet, consul-k8s, headlamp,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, nerdctl-fips, distribution, logstash, docker-compose, policy-bot, flux-source-watcher-fips, newrelic-k8s-metadata-injection-fips, rekor, sbom-scorecard, sriov-network-device-plugin, cluster-api-azure-controller, tetragon-fips, calico,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: rabbitmq-default-user-credential-updater, nodetaint, traefik, grafana-rollout-operator, cluster-api-azure-controller, vault, opa, k3s, kyverno, tigera-operator, aws-otel-collector, kube-logging-operator, plugin-barman-cloud, undock, nats-server-config-reloader,...