GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, cluster-api-azure-controller, yunikorn-k8shim, cert-manager, hubble, gitlab-kas, rancher, flux-kustomize-controller, kots, metallb, cloud-provider-azure, flux-helm-controller, cluster-autoscaler, apisix-ingress-controller,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: envoy-gateway, chart-testing-fips, kuma, trivy-fips, tw, chartmuseum-fips, harbor-fips, pluto, trivy-operator-fips, flux-helm-controller-fips, flux-helm-controller, flux-source-controller, helm-operator, linkerd2, cerbos, rancher-fleet-fips, chartmuseum, flux-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: chaos-mesh-fips, kube-arangodb, kyverno-notation-aws, vcluster, rancher-fleet-fips, headlamp-fips, helm-exporter-fips, conftest-fips, argocd-image-updater-fips, argo-cd, trivy, ocm-kubernetes-controller-fips, maru, rancher, xeol, chaos-mesh, eksctl, oras-fips,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: kots, rancher-helm, k8ssandra-client, eksctl, flux-helm-controller, chartmuseum, helm-push, flux-source-controller, cert-manager-cmctl, pluto, trivy, helm-operator, zarf, flux, cluster-api-helm-controller, cilium-cli, tw, k9s, chart-testing, helm-docs, kubescape, zot...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8sgpt, kots, rancher-helm, k8ssandra-client, eksctl, flux-helm-controller, rancher-fleet, chartmuseum, helm-push, flux-source-controller, envoy-gateway, cert-manager-cmctl, pluto, trivy, helm-operator, zarf, linkerd2, cluster-api-helm-controller, cilium-cli, kargo,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: emissary, cluster-api-azure-controller, buildkitd, aws-otel-collector, grafana-rollout-operator, k8sgpt, containerd, kubernetes-dashboard-api, timescaledb-tune, kubernetes-csi-external-health-monitor, glow, nuclei, gobump, kubernetes-csi-driver-nfs, witness, steampip...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: chaos-mesh-fips, kube-arangodb, kubevela-fips, packer-fips, harvester-fips, helm-fips, headlamp-fips, helm-exporter-fips, spegel, trivy, xeol, rancher, chaos-mesh, eksctl, syft, kubescape, kube-mgmt, consul-k8s, helm-exporter, skaffold-fips, skaffold, harvester,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: dagger, helm, buildkitd, k8sgpt, kots, rancher, containerd, k8ssandra-client, eksctl, rancher-helm, datadog-agent, fuse-overlayfs-snapshotter, opa, chartmuseum, opa-envoy, helm-set-status, ctop, helm-mapkubeapis, grype, gatekeeper, gogatekeeper, helm-push, osv-scanne...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: dagger, helm, buildkitd, k8sgpt, kots, rancher, containerd, k8ssandra-client, eksctl, rancher-helm, datadog-agent, fuse-overlayfs-snapshotter, opa, chartmuseum, opa-envoy, helm-set-status, ctop, helm-mapkubeapis, grype, gatekeeper, gogatekeeper, helm-push, osv-scanne...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: chaos-mesh-fips, kube-arangodb, kubevela-fips, packer-fips, helm-fips, headlamp-fips, helm-exporter-fips, spegel, osv-scanner, trivy, xeol, rancher, chaos-mesh, eksctl, syft, kubescape, containerd, kube-mgmt, consul-k8s, helm-exporter, skaffold-fips,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm, kots, k8ssandra-client, eksctl, rancher-fleet, chartmuseum, helm-set-status, helm-mapkubeapis, helm-push, tigera-operator, flux-source-controller, envoy-gateway, cert-manager-cmctl, kube-arangodb, consul-k8s, pluto, trivy, helm-operator, zarf, flux, harbor,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: helm, kots, k8ssandra-client, eksctl, rancher-fleet, chartmuseum, helm-set-status, helm-mapkubeapis, helm-push, tigera-operator, flux-source-controller, envoy-gateway, cert-manager-cmctl, kube-arangodb, consul-k8s, pluto, trivy, helm-operator, zarf, flux, harbor,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: eks-distro, kube-arangodb, kserve-modelmesh-serving, crossplane-provider-keycloak-fips, kubevela-fips, packer-fips, aws-flb-firehose, cue, terragrunt-fips, yace, k3d, dfc, external-secrets-operator, prometheus-postgres-exporter, terraform-provider-tls-fips,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: aactl, rancher-security-scan, nova, k3d, kyverno-notation-aws, flux-operator, nri-haproxy, wait-for-port, cni-plugins, amazon-cloudwatch-agent-operator, swagger, karpenter, dgraph, dex, kubernetes-dashboard-api, cloud-provider-vsphere, kubernetes-dashboard-web,...