GO-2026-6094 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, kwok, kubernetes-csi-external-attacher, keda, cloud-provider-gcp-cloud-controller-manager, tetragon, cluster-api-helm-controller, kots, kubernetes-csi-external-snapshotter, cluster-api-aws-controller, kubernetes-csi-external-resizer,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: cri-tools, cue, paranoia, temporal-server, esbuild, envoy-ratelimit, kwok, src-fingerprint, protoc-gen-go-grpc, vault-k8s, prometheus-operator, vertical-pod-autoscaler, speedtest-go, nri-nagios, vt-cli, kubeflow-pipelines, aws-flb-cloudwatch, src, nri-apache,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, kube-vip, crossplane-provider-aws-cloudfront, step-ca, mcp-grafana, multus-cni, crossplane-provider-aws-iam, kots, boring-registry, oauth2-proxy, kubernetes-csi-external-snapshotter, slsa-verifier, k8sgateway,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, buf, paranoia, kube-vip, vault-k8s, step-ca, mcp-grafana, multus-cni, act, vt-cli, minio-operator, kots, boring-registry, nri-apache, oauth2-proxy, mongo-tools, rancher-system-upgrade-controller, slsa-verifier, mkcert, tailscale,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, cri-tools, fluxcd-kustomize-mutating-webhook, paranoia, esbuild, cilium-cli, headlamp, rancher-system-agent, src-fingerprint, ghaudit, crossplane-provider-aws-cloudfront, kubernetes-csi-driver-nfs, kubernetes-csi-external-attacher, vault-k8s...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, kube-vip, src-fingerprint, vault-k8s, crossplane-provider-aws-cloudfront, step-ca, mcp-grafana, multus-cni, crossplane-provider-aws-iam, kots, boring-registry, nri-apache, mongo-tools, kubernetes-csi-external-snapshotter,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: terraform-provider-google, cri-tools, zarf, buf, crossplane-provider-family-azure, temporal-server, envoy-ratelimit, cilium-cli, kwok, vertical-pod-autoscaler, protoc-gen-go-grpc, vault-k8s, crossplane-provider-aws-cloudfront, prometheus-operator, step-ca,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubevela, cri-tools, temporal, kine, kubernetes, kubescape, temporal-server, envoy-ratelimit, buildkitd, docker-compose, volume-modifier-for-k8s, k3s, metrics-server, kubernetes-csi-external-resizer...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: plutono-fips, dgraph, kiam, scorecard, timestamp-authority-fips, prometheus-blackbox-exporter, k3d, kubernetes-csi-livenessprobe-fips, spark-operator, terraform-provider-sendgrid, kubeflow, kube-oidc-proxy, cortex, prometheus-stackdriver-exporter, slsa-verifier,...