GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, nri-nginx, xeol, esbuild, kbld, kapp, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, secrets-store-csi-driver, src-fingerprint, restic, runc, spire-server, neuvector-sigstore-interface,...

CLEANSTART-2026-PP70979 Security fixes in crossplane-provider-sql-fips 0.15.0-r3

Package crossplane-provider-sql-fips version 0.15.0-r3 fixes 18 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: gitsign, trufflehog, minio, chezmoi, openbao, seaweedfs, mattermost, witness, openfga, timestamp-authority, cerbos, tailscale, argo-workflows, temporal-server, spire-server, envoy-gateway, sqlexporter, fulcio, dgraph, telegraf, aactl, jitsucom-bulker, loki,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: op-geth, terraform-provider-azapi-fips, pulumi-language-java, metallb, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, gcp-compute-persistent-disk-csi-driver-fips, docker-cli, docker-fips, gosu-fips, step-ca, kubelet-csr-approver, yunikorn-web...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, cni-plugins, kafkaexporter, fluent-operator, argo-rollouts, restic, crossplane-provider-aws, kubewatch, docker-compose, helm-push, tempo, nsc, kubernetes-csi-external-attacher, litestream, flannel-cni-plugin, mockery,...