GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubernetes, skaffold, aws-node-termination-handler, k8sgpt-operator, cri-tools, falcoctl, argocd-image-updater, argo-workflows, zarf, cilium-cli, eksctl, hubble, argo-cd, kwok, docker-cli-buildx, postgres-operator, teleport, kots, kube-arangodb, emissary, k3s,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, minio-object-browser, doppler-kubernetes-operator, stakater-reloader, aws-flb-firehose, mcp-grafana, nri-consul, git-lfs, kubernetes-csi-external-resizer, nats-top, mods, kubewatch, spiffe-helper, caddy, syft, metrics-agent,...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cadvisor, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls, prometheus-pushgateway,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: cadvisor, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls, prometheus-pushgateway,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cadvisor, gobump, petname, scorecard, metrics-server, skaffold, crane, minio-object-browser, falcosidekick, doppler-kubernetes-operator, iptables-wrappers, oauth2-proxy, apisix-ingress-controller, stakater-reloader, prometheus, terraform-provider-tls,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: skaffold, minio-object-browser, doppler-kubernetes-operator, stakater-reloader, mods, spiffe-helper, distribution, flyte, cluster-api, runc, maru, kpt, aws-s3-controller, wireguard-go, rancher-helm, lazydocker, swagger, vertical-pod-autoscaler, cue, traefik, yace,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cilium-fips, terraform-provider-kubernetes, promxy, ksops, flux-image-automation-controller, rancher-webhook-fips, crossplane-provider-sql-fips, tekton-pipelines, kpt, kubernetes-dashboard-metrics-scraper-fips, gh, render-template, cilium-envoy, gitlab-cng,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cadvisor, nuclei, petname, scorecard, kubeadm-bootstrap-controller, metrics-server, skaffold, doppler-kubernetes-operator, stakater-reloader, aws-flb-firehose, prometheus-pushgateway, delve, up, gke-gcloud-auth-plugin, go-licenses, litefs,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: src, scorecard, spark-operator, kubevela, buildkitd, dgraph, k3d, prometheus-blackbox-exporter, kubescape, aactl, falco, terraform-provider-sendgrid, cortex, up, slsa-verifier, kubeflow...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, smarter-device-manager-fips, bank-vaults-fips, kubeflow-fips, buildkitd, falco, kubernetes-csi-livenessprobe, prometheus-adapter-fips, prometheus-stackdriver-exporter, prometheus-blackbox-exporter, kubeflow, kubevela, kube-oidc-proxy,...