GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: nerdctl, runc, juicefs, kubevela, libnvidia-container, kots, kaf, dask-gateway, grafana, mattermost, trino, aws-flb-kinesis, aws-flb-firehose, containerd, helm, k3s, k8s-device-plugin, kubernetes, minio, kubernetes-dashboard, go, argo-cd, telegraf, datadog-agent,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, kaf, knative-serving, cert-manager-fips, kyverno-policy-reporter-ui-fips, terragrunt-fips, rancher-agent, external-secrets-operator, nvidia-nsight-compute-13.4, chisel-fips, flux-fips, azurefile-csi-fips, kubo-fips, kubernetes-dashboard,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, kaf, knative-serving, cert-manager-fips, kyverno-policy-reporter-ui-fips, terragrunt-fips, rancher-agent, external-secrets-operator, nvidia-nsight-compute-13.4, chisel-fips, flux-fips, azurefile-csi-fips, kubo-fips, kubernetes-dashboard,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, kyverno-policy-reporter-ui-fips, crossplane-provider-azure-powerbidedicated, k8ssandra-client, crossplane-provider-aws-elbv2, crossplane-provider-aws-firehose-fips, crossplane-provider-azure-orbital, azurefile-csi-fips...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, kyverno-policy-reporter-ui-fips, crossplane-provider-azure-powerbidedicated, k8ssandra-client, crossplane-provider-aws-elbv2, crossplane-provider-aws-firehose-fips, crossplane-provider-azure-orbital, azurefile-csi-fips...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, kyverno-policy-reporter-ui-fips, crossplane-provider-azure-powerbidedicated, k8ssandra-client, crossplane-provider-aws-elbv2, crossplane-provider-aws-firehose-fips, crossplane-provider-azure-orbital, azurefile-csi-fips...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, kyverno-policy-reporter-ui-fips, crossplane-provider-azure-powerbidedicated, k8ssandra-client, crossplane-provider-aws-elbv2, crossplane-provider-aws-firehose-fips, crossplane-provider-azure-orbital, azurefile-csi-fips...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, sftpgo-plugin-pubsub, libnvidia-container, terraform-provider-tls, goreleaser, scorecard, thanos, spqr, secrets-store-csi-driver, dex, tempo, aws-flb-firehose, k3s, kpt, argo-cd, hubble, knative-serving, istio, prometheus-operator, karma,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, libnvidia-container, goreleaser, scorecard, thanos, grafana-operator, aws-flb-firehose, k3s, kpt, argo-cd, hubble, istio, prometheus-operator, k8sgpt, minio-object-browser, gatus, atlantis, cortex, skopeo, conftest, flyte, grafana, buildah, helm...

GHSA-8G2R-HHVJ-MV99 vulnerabilities

Vulnerabilities for packages: thanos-operator, paranoia, mods, cloud-provider-azure, sftpgo-plugin-pubsub, consul-k8s, libnvidia-container, terraform-provider-tls, newrelic-nri-statsd, gke-gcloud-auth-plugin, goreleaser, scorecard, configmap-reload, spqr, thanos, grafana-operator,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, libnvidia-container, goreleaser, scorecard, thanos, grafana-operator, aws-flb-firehose, k3s, kpt, argo-cd, hubble, istio, prometheus-operator, k8sgpt, minio-object-browser, gatus, atlantis, cortex, skopeo, conftest, flyte, grafana, buildah, helm...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: thanos-operator, paranoia, mods, cloud-provider-azure, sftpgo-plugin-pubsub, consul-k8s, libnvidia-container, terraform-provider-tls, newrelic-nri-statsd, gke-gcloud-auth-plugin, goreleaser, scorecard, configmap-reload, spqr, thanos, grafana-operator,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: thanos-operator, paranoia, mods, cloud-provider-azure, sftpgo-plugin-pubsub, consul-k8s, libnvidia-container, terraform-provider-tls, newrelic-nri-statsd, gke-gcloud-auth-plugin, goreleaser, scorecard, configmap-reload, spqr, thanos, grafana-operator,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, libnvidia-container, goreleaser, scorecard, thanos, grafana-operator, aws-flb-firehose, k3s, kpt, argo-cd, hubble, istio, prometheus-operator, k8sgpt, minio-object-browser, gatus, atlantis, cortex, skopeo, conftest, flyte, grafana, buildah, helm...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: thanos-operator, paranoia, mods, cloud-provider-azure, sftpgo-plugin-pubsub, consul-k8s, libnvidia-container, terraform-provider-tls, newrelic-nri-statsd, gke-gcloud-auth-plugin, goreleaser, scorecard, configmap-reload, spqr, thanos, grafana-operator,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, libnvidia-container, goreleaser, scorecard, thanos, grafana-operator, aws-flb-firehose, k3s, kpt, argo-cd, hubble, istio, prometheus-operator, k8sgpt, minio-object-browser, gatus, atlantis, cortex, skopeo, conftest, flyte, grafana, buildah, helm...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: thanos-operator, paranoia, mods, cloud-provider-azure, sftpgo-plugin-pubsub, consul-k8s, libnvidia-container, terraform-provider-tls, newrelic-nri-statsd, gke-gcloud-auth-plugin, goreleaser, scorecard, configmap-reload, spqr, thanos, grafana-operator,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: thanos-operator, paranoia, mods, cloud-provider-azure, sftpgo-plugin-pubsub, consul-k8s, libnvidia-container, terraform-provider-tls, newrelic-nri-statsd, gke-gcloud-auth-plugin, goreleaser, scorecard, configmap-reload, spqr, thanos, grafana-operator,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, sftpgo-plugin-pubsub, libnvidia-container, terraform-provider-tls, goreleaser, scorecard, thanos, spqr, secrets-store-csi-driver, dex, tempo, aws-flb-firehose, k3s, kpt, argo-cd, hubble, knative-serving, istio, prometheus-operator, karma,...

GHSA-8WXP-XXP2-RCGX Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size

Impact The Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitrarily large request body, potentially causing the webhook server to be killed by OOM. All Volcano deployments with the webhook...