CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: k8sgpt, tekton-pipelines, apache-exporter, paranoia, gostatsd, sops, aws-otel-collector, act, ratify, guac, k8s-device-plugin, kuma, tetragon, secrets-store-csi-driver-provider-gcp, aactl, helm-docs, buildah, sftpgo-plugin-geoipfilter, rabbitmq-cluster-operator,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: k8sgpt, tekton-pipelines, apache-exporter, paranoia, gostatsd, sops, aws-otel-collector, act, ratify, guac, k8s-device-plugin, kuma, tetragon, secrets-store-csi-driver-provider-gcp, aactl, helm-docs, buildah, sftpgo-plugin-geoipfilter, rabbitmq-cluster-operator,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: k8sgpt, act, k8s-device-plugin, aactl, buildah, tkn, rabbitmq-cluster-operator, kubernetes-csi-external-attacher, azure-service-operator, argo-events, ko, undock, minio-object-browser, telegraf, opencost, falco-no-driver, scorecard, grafana-pyroscope, k8ssandra-clien...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: k8sgpt, tekton-pipelines, apache-exporter, paranoia, gostatsd, sops, aws-otel-collector, act, ratify, guac, k8s-device-plugin, kuma, tetragon, secrets-store-csi-driver-provider-gcp, aactl, helm-docs, buildah, sftpgo-plugin-geoipfilter, rabbitmq-cluster-operator,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale security vulnerabilities

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...

CVE-2026-40050: Missing Authentication for Critical Function

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k8sgpt, k9s, kots, rancher-fleet, zot, cerbos, helm-mapkubeapis, cluster-api-helm-controller, kubescape, chart-testing, kuma, flux, helm-push, cert-manager-cmctl, trivy-operator, helm-set-status, helm-docs, headlamp, trivy, envoy-gateway, flux-source-controller, helm...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k8sgpt, k9s, kots, rancher-fleet, zot, cerbos, helm-mapkubeapis, cluster-api-helm-controller, kubescape, chart-testing, kuma, flux, helm-push, cert-manager-cmctl, trivy-operator, helm-set-status, helm-docs, headlamp, trivy, envoy-gateway, flux-source-controller, helm...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-set-status, cilium-cli, k8ssandra-client, envoy-gateway-fips, flux, gitlab-operator-fips, harbor, chart-testing, kube-arangodb, trivy-fips, trivy-operator, harbor-fips, envoy-gateway, helm-diff-fips, helm-operator-fips, kube-arangodb-fips, eksctl,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mcp-grafana, azure-workload-identity-webhook, opa-envoy, kubescape-operator, rancher-telemetry, aws-efs-csi-driver, rqlite, nri-mysql, sftpgo-plugin-geoipfilter, azure-service-operator, nri-elasticsearch, wal-g, grafana-rollout-operator, kubernetes-dashboard-web,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: helm-set-status, cilium-cli, k8ssandra-client, envoy-gateway-fips, flux, gitlab-operator-fips, harbor, chart-testing, kube-arangodb, trivy-fips, trivy-operator, harbor-fips, envoy-gateway, helm-diff-fips, helm-operator-fips, kube-arangodb-fips, eksctl,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: mcp-grafana, k8sgpt, gitlab-runner, aws-otel-collector, azure-workload-identity-webhook, ratify, kuma, rancher-telemetry, nri-mysql, crossplane-provider-aws-eks, sftpgo-plugin-geoipfilter, gitea, azure-service-operator, kaniko, nri-elasticsearch,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: mcp-grafana, k8sgpt, gitlab-runner, aws-otel-collector, azure-workload-identity-webhook, ratify, kuma, rancher-telemetry, nri-mysql, crossplane-provider-aws-eks, sftpgo-plugin-geoipfilter, gitea, azure-service-operator, kaniko, nri-elasticsearch,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: mcp-grafana, k8sgpt, gitlab-runner, aws-otel-collector, azure-workload-identity-webhook, ratify, kuma, rancher-telemetry, nri-mysql, crossplane-provider-aws-eks, sftpgo-plugin-geoipfilter, gitea, azure-service-operator, kaniko, nri-elasticsearch,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: mcp-grafana, k8sgpt, cadvisor, crossplane-provider-aws-memorydb, falcoctl, gitlab-runner, argocd-image-updater, kubernetes-csi-driver-hostpath, opentofu, apache-exporter, ksops, memcached-exporter, sops, net-kourier, k8s-device-plugin, kuma, apisix-ingress-controller...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: mcp-grafana, k8sgpt, cadvisor, crossplane-provider-aws-memorydb, falcoctl, gitlab-runner, argocd-image-updater, kubernetes-csi-driver-hostpath, opentofu, apache-exporter, ksops, memcached-exporter, sops, net-kourier, k8s-device-plugin, kuma, apisix-ingress-controller...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: syft, sops, dagdotdev, spicedb, helm-operator-fips, terraform-provider-google-fips, gitaly-fips, prometheus-alertmanager, witness, percona-server-mongodb-operator, sftpgo-plugin-pubsub, kyverno, kaniko-fips, cass-operator, prometheus-adapter, argocd-image-updater,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, gitlab-runner, argocd-image-updater, opentofu, ksops, sops, ratify, guac, aactl, crossplane-provider-aws-eks, trivy, gitea, crossplane-provider-aws-cloudfront, wal-g, argo-events, crossplane-provider-aws-dynamodb, kyverno-notation-aw...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, gitlab-runner, argocd-image-updater, opentofu, ksops, sops, ratify, guac, aactl, crossplane-provider-aws-eks, trivy, gitea, crossplane-provider-aws-cloudfront, wal-g, argo-events, crossplane-provider-aws-dynamodb, kyverno-notation-aw...