CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...

CLEANSTART-2026-XN96885 Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

Security vulnerability affects the docker-cli-buildx package. Arithmetic over induction variables in loops were not correctly checked for underflow or overflow...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: kargo, newrelic-infrastructure-agent, helm-push, tigera-operator, zarf, headlamp, kaniko, k9s, kubescape-operator, spegel, rancher-helm, buildkitd, eksctl, kubevela, k3s, cluster-api-helm-controller, xeol, zot, gatekeeper, helm-mapkubeapis, docker-compose,...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-compose, osv-scanner, trivy, conftest, buildah, kaniko, zot, kubescape, scorecard, guac, trivy-operator, podman, skaffold, docker-cli-buildx...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: docker-compose, osv-scanner, trivy, conftest, buildah, kaniko, zot, kubescape, scorecard, guac, trivy-operator, podman, skaffold, docker-cli-buildx...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, flyte, cass-operator, kube-bench, omnibump, grafana-operator, pulumi-kubernetes-operator, timoni, chisel, crossplane-provider-aws-lambda, dbmate, witness, wuzz, spqr, q, terraform-provider-azurerm, kubevela, prometheus,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: teleport, crossplane-provider-aws-cloudwatchlogs, terraform-provider-azapi, pulumi-kubernetes-operator, podman, chisel, crossplane-provider-aws-lambda, witness, eksctl, terraform-provider-azurerm, prometheus, hcloud, terraform-provider-tls, gitlab-pages, step,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: teleport, zarf, ko, vexctl, witness, zot, goreleaser, neuvector-sigstore-interface, flux-source-controller, tekton-chains, tflint, gh, aactl, kubescape, skaffold, sigstore-scaffolding, docker-cli-buildx, tkn, cosign, ratify, gitsign, policy-controller, falcoctl,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: teleport, zarf, ko, vexctl, witness, buildkitd, zot, goreleaser, crossplane, neuvector-sigstore-interface, flux-source-controller, tekton-chains, tflint, gh, aactl, kyverno, kubescape, trivy-operator, skaffold, sigstore-scaffolding, docker-cli-buildx, slsa-verifier,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: pluto, headlamp, kube-bench, terraform-provider-azapi, witness, eksctl, prometheus, oauth2-proxy, grafana-rollout-operator, kubecolor, step-kms-plugin, glow, tekton-chains, tflint, nats-server-config-reloader, aws-otel-collector, caddy, terraform, nri-rabbitmq, cerbo...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: trino, zarf, vexctl, dataplaneapi, grafana-operator, pulumi-language-yaml, k8s-device-plugin, libnvidia-container, pinact, buildkitd, loki, prometheus, prometheus-operator, k3s, argo-cd, buildah, kubeflow-katib, opentofu, redka, kubernetes-dashboard,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: buildah-fips, kubernetes-dashboard, vault-fips, flux, buildah, rancher, mattermost, cloud-provider-aws, packer-fips, tekton-pipelines, commercial-expanso-edge, grafana-fips, podman, gitlab-workhorse-ce-fips, rancher-agent, vitess, kaf, docker-cli-buildx,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: teleport, pulumi-kubernetes-operator, podman, chisel, witness, eksctl, terraform-provider-azurerm, prometheus, hcloud, terraform-provider-tls, step, step-kms-plugin, snyk-cli, fscrypt, cloud-provider-aws, rootlesskit, tekton-chains, tflint,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium, opentelemetry-collector, minio, podman, loki, kaf, prometheus, prometheus-operator, k3s, buildah, zot, kubernetes-dashboard, fscrypt, cloud-provider-aws, cilium-cli, aactl, external-dns, kots, kyverno, gitlab-kas, mattermost, docker-cli-buildx, cert-manager,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: headlamp, kubescape-operator-fips, harvester-fips, beats-fips, chaos-mesh, kubevela-fips, kaniko, rancher, envoy-gateway, linkerd2, cloudbeat-fips, spegel, packer-fips, skaffold, tekton-pipelines, consul-k8s-fips, consul-k8s, crossplane-fips, kargo, grype-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: headlamp, kubescape-operator-fips, harvester-fips, chaos-mesh, kubevela-fips, kaniko, rancher, envoy-gateway, linkerd2, cloudbeat-fips, spegel, packer-fips, skaffold, consul-k8s-fips, consul-k8s, crossplane-fips, kargo, grype-fips, linkerd2-fips, envoy-gateway-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, aws-node-termination-handler, kargo, cert-manager-istio-csr, cilium, teleport, verticadb-operator, zarf, argo-rollouts, headlamp, argo-workflows, k9s, kubernetes-dashboard-api, percona-server-mongodb-operator, emissary, envoy-gateway, eksctl, kubevel...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: verticadb-operator, newrelic-infrastructure-agent, envoy-ratelimit, certificate-transparency, knative-operator, dataplaneapi, terraform-provider-azapi, timoni, witness, dbmate, spqr, eksctl, prometheus, mesosphere-vsphere-csi, terraform-provider-sendgrid, oauth2-prox...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: apko, cilium-envoy-fips, cerbos, cert-manager-cmctl-fips, weaviate, flux, pulumi, flux-source-controller-fips, karpenter, splunk-otel-collector, net-kourier, rancher, cloud-provider-aws, flux-source-controller, azuredisk-csi, cloud-provider-azure-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: apko, cilium-envoy-fips, cerbos, cert-manager-cmctl-fips, weaviate, flux, pulumi, flux-source-controller-fips, karpenter, splunk-otel-collector, net-kourier, rancher, cloud-provider-aws, flux-source-controller, azuredisk-csi, cloud-provider-azure-fips,...