GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: trivy, kpt, kubernetes-dashboard-api, argo-cd, kube-arangodb, sonobuoy, rancher-fleet, k8sgpt-operator, cert-manager-istio-csr, k3s, falcoctl, verticadb-operator, redis-operator, zarf, linkerd2, infinispan-operator, kargo, kubevela, cri-tools, kiali, rancher-agent,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy, kpt, kubernetes-dashboard-api, argo-cd, kube-arangodb, sonobuoy, rancher-fleet, k8sgpt-operator, cert-manager-istio-csr, k3s, falcoctl, verticadb-operator, redis-operator, zarf, linkerd2, infinispan-operator, kargo, kubevela, cri-tools, kiali, rancher-agent,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: rancher-machine, apisix-ingress-controller, dex, chart-testing, aws-application-networking-k8s, s5cmd, grafana-operator, gcsfuse, gitsign, http-echo, cri-tools, sftpgo-plugin-pubsub, dbmate, amass, promxy, tailscale, kyverno-notation-aws, cert-exporter, kafkaexporter...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: rancher-machine, apisix-ingress-controller, chart-testing, s5cmd, gcsfuse, http-echo, cri-tools, cluster-api-gcp-controller, dbmate, amass, metrics-server, promxy, cert-exporter, kafkaexporter, cluster-api-provider-vsphere, regclient, smokescreen, lazydocker, spegel,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, go-md2man, rancher-system-agent, ferretdb, terraform-provider-sendgrid, ctop, apisix-ingress-controller, terraform-provider-tls, s5cmd, modelmesh-runtime-adapter, velero-plugin-for-aws, falco-exporter, gcsfuse, manifest-tool, distribution,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: dapr, rekor-fips, yunikorn-k8shim, kyverno, crossplane-provider-azure-authorization, cilium, thanos, kapp-controller, db-operator, prometheus-mysqld-exporter, juicefs, supercronic, docker-machine-driver-harvester, licenseclassifier, sbom-scorecard, ghaudit,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: go-md2man, nri-rabbitmq, ferretdb, ctop, dex, prometheus-operator, pulumi-language-yaml, rqlite, s5cmd, pombump, grafana-operator, gcsfuse, pulumi, kubevela, timoni, http-echo, cri-tools, flux-image-reflector-controller, mage, minio, nri-elasticsearch, nri-redis,...