EUVD-2026-36500

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users with the managesecureconnections permission to obtain remote cluster authentication tokens via a PATCH request to the...

EUVD-2026-36463

IPAM is the IP address Manager for Cluster API Provider Metal3. Prior to versions 1.11.7, 1.12.4, and 1.13.0, the IPAM controller's ClusterRole granted full CRUD permissions create, delete, get, list, patch, update, watch on core/v1 Secrets. The controller never accesses Secrets during normal...

PT-2026-45027

Name of the Vulnerable Software and Affected Versions IPAM versions prior to 1.11.7 IPAM versions prior to 1.12.4 IPAM versions prior to 1.13.0 Description The IPAM controller's ClusterRole grants excessive CRUD permissions create, delete, get, list, patch, update, watch on core/v1 Secrets, despi...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, kaniko, opa, helm-mapkubeapis, tigera-operator, chartmuseum, spegel, ctop, rancher-agent, newrelic-infrastructure-agent, helm-push, trivy, opa-envoy, datadog-agent, scorecard, zarf, k3s, neuvector-scanner, kubescape-operator, gatekeeper, syft,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, kaniko, opa, helm-mapkubeapis, tigera-operator, chartmuseum, spegel, ctop, rancher-agent, newrelic-infrastructure-agent, helm-push, trivy, opa-envoy, datadog-agent, scorecard, zarf, k3s, neuvector-scanner, kubescape-operator, gatekeeper, syft,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, docker-compose-fips, neuvector-scanner, k8sgpt, cloudbeat, cluster-api-helm-controller-fips, opa-fips, newrelic-infrastructure-agent-fips, chainctl-fips, zarf-fips, helm-exporter, tigera-operator, helm-push, eks-node-monitoring-agent,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, rabbitmq-cluster-operator-fips, buildkite-agent, k8sgpt, chainloop-control-plane, kube-fluentd-operator, zabbix-agent2, crossplane-provider-aws-ecs, tkn, slsa-verifier, crossplane-provider-aws-cognitoidentity-fips,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, rabbitmq-cluster-operator-fips, buildkite-agent, k8sgpt, chainloop-control-plane, kube-fluentd-operator, zabbix-agent2, crossplane-provider-aws-ecs, tkn, slsa-verifier, crossplane-provider-aws-cognitoidentity-fips,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, rabbitmq-cluster-operator-fips, buildkite-agent, k8sgpt, chainloop-control-plane, kube-fluentd-operator, zabbix-agent2, crossplane-provider-aws-ecs, tkn, slsa-verifier, crossplane-provider-aws-cognitoidentity-fips,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, apache-exporter, step-ca, secrets-store-csi-driver-provider-gcp, thanos, cilium-cli, prometheus-pushgateway, harbor-scanner-trivy, nri-apache, tetragon, sftpgo, trino, secrets-store-csi-driver-provider-azure, tekton-pipelines, kubernetes-dashboard...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, apache-exporter, step-ca, secrets-store-csi-driver-provider-gcp, thanos, cilium-cli, prometheus-pushgateway, harbor-scanner-trivy, nri-apache, tetragon, sftpgo, trino, secrets-store-csi-driver-provider-azure, tekton-pipelines, kubernetes-dashboard...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, apache-exporter, step-ca, secrets-store-csi-driver-provider-gcp, thanos, cilium-cli, prometheus-pushgateway, harbor-scanner-trivy, nri-apache, tetragon, sftpgo, trino, secrets-store-csi-driver-provider-azure, tekton-pipelines, kubernetes-dashboard...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, apache-exporter, step-ca, secrets-store-csi-driver-provider-gcp, thanos, cilium-cli, prometheus-pushgateway, harbor-scanner-trivy, nri-apache, tetragon, sftpgo, trino, secrets-store-csi-driver-provider-azure, tekton-pipelines, kubernetes-dashboard...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, apache-exporter, step-ca, secrets-store-csi-driver-provider-gcp, thanos, cilium-cli, prometheus-pushgateway, harbor-scanner-trivy, nri-apache, tetragon, sftpgo, trino, secrets-store-csi-driver-provider-azure, tekton-pipelines, kubernetes-dashboard...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: prometheus-adapter, apache-exporter, step-ca, secrets-store-csi-driver-provider-gcp, thanos, cilium-cli, prometheus-pushgateway, tetragon, sftpgo, trino, secrets-store-csi-driver-provider-azure, tekton-pipelines, kubernetes-dashboard, buildah, aactl, argo-events,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, thanos, cilium-cli, sftpgo, trino, kubernetes-dashboard, buildah, aactl, argo-events, splunk-otel-collector, teleport, mattermost, timestamp-authority, istio, aws-flb-firehose, kyverno, minio, nuclei, nerdctl, datadog-agent, scorecard, gatekeeper,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, thanos, cilium-cli, sftpgo, trino, kubernetes-dashboard, buildah, aactl, argo-events, splunk-otel-collector, teleport, mattermost, timestamp-authority, istio, aws-flb-firehose, kyverno, minio, nuclei, nerdctl, datadog-agent, scorecard, gatekeeper,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, apache-exporter, step-ca, secrets-store-csi-driver-provider-gcp, thanos, cilium-cli, prometheus-pushgateway, tetragon, sftpgo, trino, secrets-store-csi-driver-provider-azure, tekton-pipelines, kubernetes-dashboard, buildah, aactl, argo-events,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, thanos, cilium-cli, sftpgo, trino, kubernetes-dashboard, buildah, aactl, argo-events, splunk-otel-collector, teleport, mattermost, timestamp-authority, istio, aws-flb-firehose, kyverno, minio, nuclei, nerdctl, datadog-agent, scorecard, gatekeeper,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: prometheus-adapter, thanos, cilium-cli, sftpgo, trino, kubernetes-dashboard, buildah, aactl, argo-events, splunk-otel-collector, teleport, mattermost, timestamp-authority, istio, aws-flb-firehose, kyverno, minio, nuclei, nerdctl, datadog-agent, scorecard, gatekeeper,...