GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, newrelic-fluent-bit-output-fips, jfrog-cli, aactl, knative-net-istio-fips, crossplane-provider-aws-cloudwatch-fips, apm-server-fips,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: minio, nfpm, delve, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, cluster-proportional-autoscaler, argo-cd, manifest-tool, kubevela, cloudnative-pg, flyte, sops, sonobuoy,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: minio, nfpm, delve, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, cluster-proportional-autoscaler, argo-cd, manifest-tool, kubevela, cloudnative-pg, flyte, sops, sonobuoy,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: minio, nfpm, delve, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, cluster-proportional-autoscaler, argo-cd, manifest-tool, kubevela, cloudnative-pg, flyte, sops, sonobuoy,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: minio, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, argo-cd, kubevela, cloudnative-pg, flyte, sops, kpt, tetragon, apko, cert-manager-csi-driver, fluent-bit-plugin-loki, helm-operator,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: minio, nfpm, delve, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, cluster-proportional-autoscaler, argo-cd, manifest-tool, kubevela, cloudnative-pg, flyte, sops, sonobuoy,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: minio, nfpm, delve, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, cluster-proportional-autoscaler, argo-cd, manifest-tool, kubevela, cloudnative-pg, flyte, sops, sonobuoy,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: minio, nfpm, aws-flb-cloudwatch, kots, istio, argo-cd, kubevela, flyte, kpt, fluent-bit-plugin-loki, helm-operator, mattermost, gatekeeper, trino, timestamp-authority, cert-manager, redka, nerdctl, thanos, containerd, undock, helm, grafana, prometheus-operator, flux,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: minio, nfpm, aws-flb-cloudwatch, kots, istio, argo-cd, kubevela, flyte, kpt, fluent-bit-plugin-loki, helm-operator, mattermost, gatekeeper, trino, timestamp-authority, cert-manager, redka, nerdctl, thanos, containerd, undock, helm, grafana, prometheus-operator, flux,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: minio, nfpm, aws-flb-cloudwatch, kots, istio, argo-cd, kubevela, flyte, kpt, fluent-bit-plugin-loki, helm-operator, mattermost, gatekeeper, trino, timestamp-authority, cert-manager, redka, nerdctl, thanos, containerd, undock, helm, grafana, prometheus-operator, flux,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: minio, terraform-provider-tls, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, tekton-pipelines, kuma, kots, dex, istio, argo-cd, kubevela, cloudnative-pg, flyte, sops, kpt, tetragon, apko, cert-manager-csi-driver, fluent-bit-plugin-loki, helm-operator,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: minio, nfpm, aws-flb-cloudwatch, kots, istio, argo-cd, kubevela, flyte, kpt, fluent-bit-plugin-loki, helm-operator, mattermost, gatekeeper, trino, timestamp-authority, cert-manager, redka, nerdctl, thanos, containerd, undock, helm, grafana, prometheus-operator, flux,...

CVE-2026-40050

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

CrowdStrike LogScale 安全漏洞

CrowdStrike LogScale is a high-performance log management and analysis platform developed by the CrowdStrike company in the United States. There is a security vulnerability in CrowdStrike LogScale, which stems from an unvalidated path traversal issue in certain cluster API endpoints. This...

CVE-2026-40050: Missing Authentication for Critical Function

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability CVE-2026-40050 in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: pluto, nova, cilium-cli, tw, flux-source-controller, eksctl, tigera-operator, helm, kube-arangodb, kuma, helm-docs, kots, flux, trivy-operator, istio, cert-manager-cmctl, zarf, headlamp, zot, kubescape, helm-set-status, consul-k8s, k8ssandra-client, helm-operator,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: pluto, nova, cilium-cli, tw, flux-source-controller, eksctl, tigera-operator, helm, kube-arangodb, kuma, helm-docs, kots, flux, trivy-operator, istio, cert-manager-cmctl, zarf, headlamp, zot, kubescape, helm-set-status, consul-k8s, k8ssandra-client, helm-operator,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: tigera-operator, trivy, kube-arangodb-fips, pluto-fips, linkerd2-fips, istio, flux-fips, jfrog-cli, cluster-api-helm-controller-fips, eksctl, kubescape-server-fips, chart-testing, tigera-operator-fips, flux-source-controller-fips, chaos-mesh-fips, headlamp-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: opa-envoy, sbomqs, delve, portieris, terraform-provider-sendgrid, extism, k8ssandra-operator, clickhouse-operator, neuvector-dbgen, argo-rollouts, nri-haproxy, dex, cluster-proportional-autoscaler, sonobuoy, kpt, nri-mysql, cert-manager-csi-driver, juicefs-csi-driver...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: tigera-operator, trivy, kube-arangodb-fips, pluto-fips, linkerd2-fips, istio, flux-fips, jfrog-cli, cluster-api-helm-controller-fips, eksctl, kubescape-server-fips, chart-testing, tigera-operator-fips, flux-source-controller-fips, chaos-mesh-fips, headlamp-fips,...