CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metrics-adapter, beats, grafana-pyroscope, kube-state-metrics-fips, gitlab-cng-fips, kong-ingress-controller-fips, terraform-provider-acme, cloudflared, kubernetes-csi-external-snapshotter-fips, flux-helm-controller, opentelemetry-ebpf-instrumentation,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: kubescape, zarf, chartmuseum, helm-operator, ctop, fuse-overlayfs-snapshotter, manifest-tool, kargo, xeol, k9s, kots, helm-push, containerd, skaffold, eksctl, envoy-gateway, kubescape-operator, rancher, zot, buildkitd, osv-scanner, syft, rancher-helm, trivy, headlamp...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, chartmuseum, helm-operator, ctop, fuse-overlayfs-snapshotter, manifest-tool, kargo, xeol, k9s, kots, helm-push, containerd, skaffold, eksctl, envoy-gateway, kubescape-operator, rancher, zot, buildkitd, osv-scanner, syft, rancher-helm, trivy, headlamp...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kube-arangodb, neuvector, trivy, google-osconfig-agent, ctop, jfrog-cli, grype-db, chartmuseum-fips, kaniko, eksctl, gatekeeper, manifest-tool, grype, docker-fips, kubescape, kubescape-operator, gitlab-rails-ce-fips, chartmuseum, wolfictl, helm-operator,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: beats, grafana-pyroscope, ko, flux-helm-controller-fips, crossplane-provider-aws-appflow-fips, eksctl, aws-efs-csi-driver-fips, crossplane-provider-aws-elb, gitlab-cng-fips, crossplane-provider-azure-spring, hubble, metallb, nerdctl, db-operator-fips, cloudflared,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, verticadb-operator, rancher-fleet, kargo, kubernetes-dashboard-api, cert-manager-istio-csr, cluster-api, k9s, jitsucom-bulker, gitlab-runner, kots, postgres-operator, cri-tools, dynamic-localpv-provisioner, argocd-image-updater, skaffold, eksctl,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cloudnative-pg, kube-arangodb, gitlab-runner, neuvector, trivy, percona-xtradb-cluster-operator, sonobuoy, velero-fips, eksctl, grafana, kiali-fips, eck-operator-fips, trident-fips, cluster-api, hubble-fips, kubescape, rke2-runtime, argo-cd, hubble,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, chartmuseum, helm-operator, rancher-fleet, flux, cert-manager-cmctl, k9s, helm-docs, kots, harbor, helm-push, kuma, eksctl, envoy-gateway, zot, nova, trivy, headlamp, linkerd2, teleport, consul-k8s, istio, pluto, cluster-api-helm-controller,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: harbor, helm-diff, kube-arangodb, helm-exporter, cerbos-fips, cert-manager-cmctl, kuma, helm-docs, teleport, consul-k8s, k9s-fips, k8ssandra-client, flux-source-controller-fips, trivy, linkerd2, pluto, cerbos, cloudbeat, helm-push, helm-diff-fips, jfrog-cli, nova,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nfpm, spark-operator, aws-efs-csi-driver, cert-manager-csi-driver, container-object-storage-interface, kube-vip, cert-manager-cmctl, prometheus-pushgateway, cosign, nfs-subdir-external-provisioner, grafana, timestamp-authority, kube-state-metrics, cloud-sql-proxy,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nfpm, spark-operator, aws-efs-csi-driver, cert-manager-csi-driver, container-object-storage-interface, kube-vip, cert-manager-cmctl, prometheus-pushgateway, cosign, nfs-subdir-external-provisioner, grafana, timestamp-authority, kube-state-metrics, cloud-sql-proxy,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, cert-manager-csi-driver, crossplane-provider-sql, flux, kargo, ko, kube-vip, kubernetes-dashboard-api, cert-manager-cmctl, mc, cosign, flux-image-automation-controller, grafana, jitsucom-bulker, kyverno, minio-object-browser, kots,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: apko-fips, beats, ko, flux-helm-controller-fips, vendir-fips, eksctl, karpenter-fips, prometheus-operator, rke2-runtime, oras, hubble, nerdctl, sonobuoy-fips, flux-helm-controller, kbld-fips, harbor, amazon-ecs-agent, nats, helm, falcoctl, qemu-guesthelper, atlas,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: apko-fips, beats, ko, flux-helm-controller-fips, vendir-fips, eksctl, karpenter-fips, prometheus-operator, rke2-runtime, oras, hubble, nerdctl, sonobuoy-fips, flux-helm-controller, kbld-fips, harbor, amazon-ecs-agent, nats, helm, falcoctl, qemu-guesthelper, atlas,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, apko-fips, memcached-exporter, beats, grafana-pyroscope, ko, prometheus-operator-fips, flux-helm-controller-fips, prometheus-mongodb-exporter-fips, authservice-fips, eksctl, aws-efs-csi-driver-fips, kepler, crossplane-function-go-templating,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: smarter-device-manager, apko-fips, liquibase-package-manager, kubevirt-cdi-uploadproxy, beats, memcached-exporter, grafana-pyroscope, ko, prometheus-operator-fips, scuttle-fips, flux-helm-controller-fips, pushprox-fips, newrelic-infra-operator, nri-f5-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: apko-fips, liquibase-package-manager, kubevirt-cdi-uploadproxy, beats, memcached-exporter, grafana-pyroscope, ko, prometheus-operator-fips, scuttle-fips, flux-helm-controller-fips, pushprox-fips, newrelic-infra-operator, nri-f5-fips, prometheus-mongodb-exporter-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: liquibase-package-manager, grafana-pyroscope, prometheus-operator-fips, scuttle-fips, trust-manager, newrelic-infra-operator, addon-resizer-fips, hugo-extended, iptables-wrappers, crossplane-function-go-templating, quic-go, rke2-runtime, aws-node-termination-handler,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, apko-fips, liquibase-package-manager, kubevirt-cdi-uploadproxy, beats, memcached-exporter, grafana-pyroscope, ko, prometheus-operator-fips, scuttle-fips, flux-helm-controller-fips, pushprox-fips, newrelic-infra-operator, nri-f5-fips,...

CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...