CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: art, docker-fips, eks-distro-fips, kgateway, neuvector-sigstore-interface-fips, terraform-provider-databricks, aws-iam-authenticator-fips, authentik, azurefile-csi, flux-notification-controller, argo-workflows-fips, consul-k8s, tempo, kubescape-operator-fips, dapr,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, ctop, kubevela, opa, headlamp, buildkitd, k8sgpt, gogatekeeper, helm-mapkubeapis, rancher-helm, steampipe, manifest-tool, chartmuseum, rancher, docker-compose, rancher-agent, neuvector-scanner, envoy-gateway, trivy,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, ctop, kubevela, opa, headlamp, buildkitd, k8sgpt, gogatekeeper, helm-mapkubeapis, rancher-helm, steampipe, manifest-tool, chartmuseum, rancher, docker-compose, rancher-agent, neuvector-scanner, envoy-gateway, trivy,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: trivy, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, osv-scanner, kube-arangodb, scorecard, kots, k8ssandra-client, trivy-fips, newrelic-infrastructure-agent-fips,...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, flux-helm-controller-fips, cilium-fips, tetragon-fips, crossplane-provider-azure-authorization, crossplane-provider-azure-orbital, crossplane-provider-azure-storagesync, crossplane-provider-aws-rolesanywhere,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: verticadb-operator, docker-cli-buildx, cloudnative-pg, kubevela, headlamp, k8sgpt, aws-node-termination-handler, cert-manager-istio-csr, infinispan-operator, argo-rollouts, percona-server-mongodb-operator, rancher, velero, argocd-image-updater, istio, rancher-agent,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy, kiali, falcoctl, kubernetes, postgres-operator, k9s, sonobuoy-fips, percona-server-mongodb-operator-fips, cilium-fips, skaffold-fips, kube-arangodb, rke2-runtime, kots, k8ssandra-client, dynamic-localpv-provisioner, percona-server-mongodb-operator, trivy-fips,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k9s, headlamp, helm-mapkubeapis, chartmuseum, cerbos, istio, rancher-fleet, nova, envoy-gateway, trivy, chart-testing, kuma, zot, trivy-operator, kube-arangodb, k8ssandra-client, kubescape, zarf, cilium-cli, linkerd2, consul-k8s, tigera-operator,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux-fips, cluster-api-helm-controller-fips, cert-manager-cmctl-fips, trivy, cerbos, cloudbeat-fips, envoy-gateway, harbor, helm-docs, chaos-mesh, istio, tigera-operator, jfrog-cli, cluster-api-helm-controller, helm-operator-fips, helm-diff-fips, consul-k8s,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: spire-server, verticadb-operator, dbmate, temporal-ui-server, secrets-store-csi-driver-provider-azure, step-kms-plugin, cert-manager, modelmesh-runtime-adapter, polaris, cosign, policy-controller, helm-mapkubeapis, envoy-ratelimit, rancher, aws-flb-cloudwatch,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: dbmate, temporal-ui-server, cert-manager, nri-nginx, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, rancher-fleet, incert, vendir, redka, vault-k8s, timoni, mc, timescaledb-parallel-copy, falcoctl, hcloud, sftpgo-plugin-eventsearch, dive,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dbmate, temporal-ui-server, cert-manager, nri-nginx, thanos-operator, infinispan-operator, aws-eks-pod-identity-agent, rancher-fleet, incert, vendir, redka, vault-k8s, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, falcoctl, hcloud, sftpgo-plugin-eventsearch,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: opentofu-fips, gatekeeper-fips, licenseclassifier, newrelic-infrastructure-agent, crossplane-fips, kubernetes, sonobuoy-fips, flux-helm-controller-fips, cilium-fips, flux-operator-fips, aws-flb-firehose, scorecard, bento, telegraf, coredns, docker-compose-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: opentofu-fips, gatekeeper-fips, newrelic-infrastructure-agent, agentbeat, chaos-mesh-fips, crossplane-fips, kubernetes, ceph-csi-operator-fips, flux-helm-controller-fips, cilium-fips, tetragon-fips, crossplane-provider-azure-authorization, google-guest-agent-manager,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: opentofu-fips, gatekeeper-fips, licenseclassifier, newrelic-infrastructure-agent, crossplane-fips, kubernetes, sonobuoy-fips, flux-helm-controller-fips, cilium-fips, flux-operator-fips, aws-flb-firehose, scorecard, bento, telegraf, coredns, docker-compose-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: opentofu-fips, nri-redis, php-fpmexporter, git-sync, rabbitmq-default-user-credential-updater, vertical-pod-autoscaler-fips, gatekeeper-fips, kubelet-csr-approver-fips, opentelemetry-collector, newrelic-infrastructure-agent, yace, agentbeat,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: opentofu-fips, nri-redis, php-fpmexporter, git-sync, rabbitmq-default-user-credential-updater, vertical-pod-autoscaler-fips, gatekeeper-fips, kubelet-csr-approver-fips, newrelic-infrastructure-agent, yace, agentbeat, kubernetes-dashboard-metrics-scraper,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, yace, sonobuoy-fips, flux-helm-controller-fips, mig-parted-fips, tetragon-fips, crossplane-provider-azure-authorization, cilium-certgen, scorecard, telegraf, kubevela-fips, aws-application-networking-k8s, controller-gen, json-exporter,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: opentofu-fips, nri-redis, php-fpmexporter, git-sync, rabbitmq-default-user-credential-updater, vertical-pod-autoscaler-fips, gatekeeper-fips, kubelet-csr-approver-fips, opentelemetry-collector, newrelic-infrastructure-agent, yace, agentbeat,...

CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...