GO-2026-6497 vulnerabilities

Vulnerabilities for packages: maru, opentofu, helm-mapkubeapis, cluster-api-helm-controller, kube-arangodb, rancher-helm, manifest-tool, k8sgpt, xeol, kargo, k9s, cert-manager-cmctl, gitness, helm-push, helm-set-status, kyverno-notation-aws, tigera-operator, flux-helm-controller...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: maru, opentofu, helm-mapkubeapis, cluster-api-helm-controller, kube-arangodb, rancher-helm, manifest-tool, k8sgpt, xeol, kargo, k9s, cert-manager-cmctl, gitness, helm-push, helm-set-status, kyverno-notation-aws, tigera-operator, flux-helm-controller...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: dagger, eksctl, chartmuseum, docker, k8sgpt, nerdctl, kargo, k9s, kubescape, newrelic-infrastructure-agent, kubescape-operator, k3s, helm-set-status, falco-no-driver, skaffold, tigera-operator, trivy-operator, docker-cli-buildx, xeol, kubevela, zot, helm-mapkubeapis,...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, kyverno, emissary, flux-kustomize-controller, tkn, apisix-ingress-controller, azure-service-operator, cloud-provider-azure, cluster-api-azure-controller, fluent-operator, kubescape, k3s, caddy, gitlab-kas, external-secrets-operator, openbao,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: teleport, cluster-api-helm-controller, trivy, flux-helm-controller, helm-operator, linkerd2-fips, istio, zot, k8sgpt, helm-push, rancher-fleet-fips, flux-fips, trivy-fips, harbor-fips, flux-source-controller-fips, k9s, tw, pluto, consul-k8s-fips, flux,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm, conftest-fips, trivy-operator, redpanda-operator, rancher, opentofu, gogatekeeper, argocd-image-updater, consul-k8s-fips, falcoctl-fips, cert-manager-cmctl, trivy-operator-fips, tigera-operator, chaos-mesh-fips, kubescape-server-fips, oras-fips, headlamp-fips,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, k8sgpt, cerbos, kargo, k9s, tw, k8ssandra-client, zot, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, rancher-fleet,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: delve, tkn, nginx-prometheus-exporter, cerbos, aws-application-networking-k8s, helm-set-status, nuclei, cloud-provider-vsphere, ratify, bom, yunikorn-k8shim, rancher-system-upgrade-controller, ipfs-cluster, harbor-registry, opa, envconsul, trivy, kind, nri-apache, ko...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, falco-no-driver, helm, trivy-operator, redpanda-operator, rancher, syft, consul-k8s-fips, amazon-ecs-agent, helmfile, trivy-operator-fips, tigera-operator, neuvector, chaos-mesh-fips, kubescape-server-fips, spegel, headlamp-fips, rancher-agent...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: dagger, eksctl, teleport, chartmuseum, gogatekeeper, consul-k8s, docker, k8sgpt, xeol, kargo, k9s, kubescape, newrelic-infrastructure-agent, kubescape-operator, helm-set-status, k3s, falco-no-driver, k8ssandra-client, skaffold, tigera-operator, docker-cli-buildx,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: dagger, eksctl, teleport, chartmuseum, gogatekeeper, consul-k8s, docker, k8sgpt, xeol, kargo, k9s, kubescape, newrelic-infrastructure-agent, kubescape-operator, helm-set-status, k3s, falco-no-driver, k8ssandra-client, skaffold, tigera-operator, docker-cli-buildx,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, falco-no-driver, helm, opa-fips, trivy-operator, redpanda-operator, rancher, gogatekeeper, syft, consul-k8s-fips, amazon-ecs-agent, trivy-operator-fips, tigera-operator, neuvector, chaos-mesh-fips, kubescape-server-fips, spegel, opa,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: eksctl, harbor, chartmuseum, flux, consul-k8s, cerbos, k9s, kubescape, tigera-operator, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, kube-arangodb, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: eksctl, harbor, chartmuseum, flux, consul-k8s, cerbos, k9s, kubescape, tigera-operator, tw, helm-set-status, k8ssandra-client, trivy-operator, zot, helm-mapkubeapis, kube-arangodb, pluto, istio, envoy-gateway, cert-manager-cmctl, flux-source-controller, kots, trivy,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, gitsign, goose, langfuse-fips, opa-fips, flux-helm-controller, otel-cli, cluster-api, smarter-device-manager, gpu-operator-fips, k8ssandra-operator, snyk-cli, kafka-proxy, sqlexporter, gobump,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: dapr, k8sgateway, cluster-api, kind, gobump, neuvector-sigstore-interface, rancher, fulcio, opentofu, k3d, kube-bench, swagger, timescaledb-tune, vault, docker-credential-gcr, nri-haproxy, wal-g, regclient, witness, karpenter, cis-operator, oauth2-proxy, nri-mysql,...