GO-2023-1988 vulnerabilities

Vulnerabilities for packages: prometheus-operator, thanos-operator, aws-load-balancer-controller-fips, kube-state-metrics, kubernetes-csi-external-resizer, terraform, kpt, aactl, wavefront-collector-for-kubernetes, aws-load-balancer-controller, kubeflow, kubernetes-csi-external-provisioner, k3d,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, step-ca, k3d, pulumi-language-dotnet, step, rqlite, trivy, grafana-mimir, cloudnative-pg, kube-rbac-proxy, kwok, certificate-transparency, guac, hubble-ui, cert-manager-cmctl, opentelemetry-collector-contrib, cilium-cli, restic, k8sgpt, ferretdb, temporal,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, hello-world-golang, actions-runner-controller, k3d, sbom-scorecard, rqlite, kubeflow-pipelines, kubernetes-event-exporter, yam, nuclei, prometheus-adapter, oras, kwok, cass-operator, stakater-reloader, kubebuilder,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: skopeo, actions-runner-controller, kiali, kubeflow-pipelines, kubernetes-event-exporter, kubernetes, kubernetes-csi-external-snapshotter, omnibump, prometheus-adapter, argocd-image-updater, crossplane-provider-aws-firehose, cass-operator, stakater-reloader, atlantis,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, hubble, temporal, helm-push, rancher-agent, gatus, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, argo-workflows, datadog-agent, cloud-provider-aws,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: skopeo, cargobump, k3d, kubernetes, otel-cli, nuclei, prometheus-adapter, pdfcpu, certificate-transparency, atlantis, ko, secrets-store-csi-driver-provider-azure, govulncheck, hubble, incert, lazydocker, authservice, containerd, metrics-server, gatekeeper, trino,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, oras, atlantis, nsc, hubble, temporal, helm-push, rancher-agent, gatus, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, pvc-autoresizer, aws-s3-controller, swagger, q, argo-workflows, influx, pguser,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, headlamp, actions-runner-controller, k3d, tfsec, kubeflow-pipelines, kubernetes-event-exporter, langfuse, crossplane-provider-sql, crossplane-provider-aws-firehose, cass-operator, stakater-reloader, kyverno-policy-reporter-ui, govulncheck,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: headlamp, k3d, nuclei, oauth2-proxy, kubernetes-dashboard-web, timescaledb-tune, ko, fzf, hubble, step-kms-plugin, lazydocker, cloud-provider-gcp-cloud-controller-manager, containerd, helm-push, opa, caddy, migrate, cluster-api-provider-vsphere, azure-service-operato...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-FV98119 Security fixes in kubernetes-csi-external-snapshotter-fips 8.4.0-r4

Package kubernetes-csi-external-snapshotter-fips version 8.4.0-r4 fixes 31 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubernetes, kubernetes-csi-external-snapshotter, argocd-image-updater, kwok, cass-operator, hubble, pulumi-kubernetes-operator, cloud-provider-gcp-cloud-controller-manager, metrics-server, gatekeeper, rancher-agent, cluster-api-provider-vsphere, azure-service-operato...

CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, crossplane-provider-aws-firehose, oras, hubble, helm-push, rancher-agent, gatus, sftpgo-plugin-auth, victoriametrics-operator, pvc-autoresizer, aws-s3-controller, q, kyverno-policy-reporter-kyverno-plugin, datadog-agent, cloud-provider-aws,...

CLEANSTART-2026-RE02723 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4

Multiple security vulnerabilities affect the kubernetes-csi-external-provisioner-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, terraform-provider-sendgrid, kubernetes-event-exporter, kubernetes, otel-cli, crossplane-provider-sql, nuclei, argocd-image-updater, gitaly, oauth2-proxy, kwok, prometheus-adapter, certificate-transparency, atlantis,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nri-redis, prometheus-operator, spiffe-helper, seaweedfs-fips, aws-load-balancer-controller-fips, kube-state-metrics, kpt, nri-consul-fips, regclient-fips, supercronic, aactl, vale, paranoia, flux-image-automation-controller-fips, gitaly, knative-storage-migrate,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: headlamp, kiali, tfsec, kubeflow-pipelines, kubernetes, otel-cli, kubernetes-csi-external-snapshotter, crossplane-provider-sql, prometheus-adapter, argocd-image-updater, crossplane-provider-aws-firehose, kwok, cass-operator, certificate-transparency, cloudflared, ko,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, skopeo, terraform-provider-sendgrid, tfsec, kubernetes-event-exporter, kubernetes, otel-cli, kubernetes-csi-external-snapshotter, prometheus-adapter, argocd-image-updater, crossplane-provider-aws-firehose, oauth2-proxy, cass-operator,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, oras, cass-operator, atlantis, nsc, rancher-agent, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, pvc-autoresizer, aws-s3-controller, swagger, q, influx, pguser, kyverno-policy-reporter-kyverno-plugin,...