GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kapp-controller, vcluster, spqr, grafana, cass-operator, cluster-api-provider-vsphere, kube-rbac-proxy, kuma, yunikorn-k8shim, kubernetes-csi-external-attacher, datadog-operator, cert-manager-webhook-pdns, kwok, kubescape-operator, helm-operator, cloud-provider-azure...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: flux-fips, chartmuseum, helm-operator, flux-helm-controller, eksctl, flux-helm-controller-fips, consul-k8s, envoy-gateway, cerbos, tw, kuma, harbor-fips, k8ssandra-client, kargo, kots, trivy, zot, flux, trivy-fips, chart-testing-fips, cerbos-fips, istio, pluto,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: chaos-mesh, drone-fips, eksctl, helm-exporter, consul-k8s, zarf-fips, redpanda-operator, tigera-operator-fips, cloudbeat-fips, argocd-image-updater-fips, chaos-mesh-fips, kyverno, trivy, k9s-fips, trivy-fips, tigera-operator, jfrog-cli, steampipe, vcluster-fips,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, chartmuseum, kots, flux, helm-docs, k9s, flux-source-controller, zot, tw, rancher-helm, eksctl, cilium-cli, k8ssandra-client, kubescape, cert-manager-cmctl, chart-testing, cluster-api-helm-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, helm-docs, k9s, flux-source-controller, zot, linkerd2, k8sgpt, tw, envoy-gateway, rancher-helm, cerbos, eksctl, cilium-cli, k8ssandra-client, kargo,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, wait-for-port, kapp-controller, ini-file, amazon-cloudwatch-agent-operator, kubernetes-dashboard-api, flux, steampipe, nri-mysql, nodetaint, cluster-api-provider-vsphere, rabbitmq-default-user-credential-updater, terraform-mcp-server, kind, opa,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: chaos-mesh, eksctl, docker-cli-buildx-fips, consul-k8s, helm-exporter, zarf-fips, redpanda-operator, tigera-operator-fips, cloudbeat-fips, trivy, chaos-mesh-fips, docker-cli-buildx, k9s-fips, tigera-operator, trivy-fips, jfrog-cli, steampipe, helm-mapkubeapis,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: ctop, kubescape-operator, tigera-operator, teleport, zarf, helm-operator, helm-push, gogatekeeper, containerd, docker-cli-buildx, wolfictl, trivy, neuvector-scanner, chartmuseum, kots, kube-arangodb, rancher, steampipe, manifest-tool, spegel, consul-k8s, grype,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: ctop, kubescape-operator, tigera-operator, teleport, zarf, helm-operator, helm-push, gogatekeeper, containerd, docker-cli-buildx, wolfictl, trivy, neuvector-scanner, chartmuseum, kots, kube-arangodb, rancher, steampipe, manifest-tool, spegel, consul-k8s, grype,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: chaos-mesh, eksctl, docker-cli-buildx-fips, consul-k8s, helm-exporter, zarf-fips, redpanda-operator, opa-envoy, tigera-operator-fips, cloudbeat-fips, trivy, chaos-mesh-fips, docker-cli-buildx, k9s-fips, tigera-operator, trivy-fips, jfrog-cli, steampipe, opa,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: rancher-fleet, tigera-operator, pluto, zarf, helm-operator, helm-push, trivy, istio, chartmuseum, kots, flux, kube-arangodb, consul-k8s, helm-docs, trivy-operator, k9s, flux-source-controller, zot, linkerd2, headlamp, kuma, nova, tw, envoy-gateway, harbor,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: rancher-fleet, tigera-operator, pluto, zarf, helm-operator, helm-push, trivy, istio, chartmuseum, kots, flux, kube-arangodb, consul-k8s, helm-docs, trivy-operator, k9s, flux-source-controller, zot, linkerd2, headlamp, kuma, nova, tw, envoy-gateway, harbor,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, kratos, cloud-sql-proxy, k8ssandra-operator, kubernetes-replicator, timestamp-authority-fips, sftpgo-plugin-eventstore, podman-fips, consul-k8s, nginx-prometheus-exporter, vault-secrets-webhook, zabbix-agent2,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: render-template, consul, cloud-sql-proxy, docker-credential-gcr, eksctl, gcp-compute-persistent-disk-csi-driver, consul-k8s, regclient, nginx-prometheus-exporter, spark-operator, aws-otel-collector, cerbos, nri-redis, docker-machine-driver-harvester, cni-plugins,...