GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, consul-k8s, kubevela, sonobuoy, kots, datadog-agent, eksctl, istio, headlamp, kiali, k9s, kube-arangodb, trivy, infinispan-operator, cluster-api, rancher, argo-cd, rancher-agent, jitsucom-bulker, k8ssandra-client, vcluster,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, consul-k8s, kubevela, sonobuoy, kots, datadog-agent, eksctl, istio, headlamp, kiali, k9s, kube-arangodb, trivy, infinispan-operator, cluster-api, rancher, argo-cd, rancher-agent, jitsucom-bulker, k8ssandra-client, vcluster,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, grafana-pyroscope, golangci-lint, kaf, gcp-compute-persistent-disk-csi-driver, knative-client, mailpit, grpc-health-probe, buildah, act, slsa-verifier, vendir, terraform-provider-pagerduty, kubernetes-dashboard-metrics-scraper, addon-resize...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, slsa-verifier, vendir,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, slsa-verifier, vendir,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, docker-credential-acr-env, grafana-pyroscope, kaf, gcp-compute-persistent-disk-csi-driver, grpc-health-probe, slsa-verifier, vendir, mockgen, flyte, kubernetes-dashboard-metrics-scraper, xcover, nats, kubecolor, redpanda, juicefs, coredns...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, docker-credential-acr-env, ini-file, grafana-pyroscope, kube-bench, octo-sts, age, kaf, cfssl, render-template, gcp-compute-persistent-disk-csi-driver, openbao-k8s, terraform-provider-sendgrid, grpcurl, protoc-gen-go-grpc,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: fulcio, grafana-rollout-operator, telegraf, k3d, newrelic-fluent-bit-output, kubernetes-dashboard-metrics-scraper-fips, helm, cloud-provider-azure, cert-exporter, kubernetes-dashboard-api-fips, nfs-subdir-external-provisioner, external-dns-fips, vault, gatus,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, metallb, kube-bench, kubernetes-dashboard, golangci-lint, kaf, cfssl, nri-discovery-kubernetes, render-template, gomplate, grpcurl, protoc-gen-go-grpc, slsa-verifier, supercronic, dgraph, nuclei, nri-couchbase, hey, shfmt,...