GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kubescape, kube-arangodb, rancher-fleet, teleport, velero, kots, kubevela, linkerd2, cri-tools, kubeflow-pipelines, docker-cli-buildx, falcoctl, datadog-agent, argocd-image-updater, headlamp, kubernetes-dashboard-api, istio, cert-manager-istio-csr,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: atlantis, nri-f5, aws-eks-pod-identity-agent, cortex, nodetaint, dbmate, witness, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, apko, pgpool2exporter, boring-registry, helm-set-status, cloudnative-pg, hugo, k8s-device-plugin...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: atlantis, fq, cortex, nodetaint, dbmate, chartmuseum, vt-cli, vertical-pod-autoscaler, pgpool2exporter, boring-registry, helm-set-status, sops, mkcert, kustomize, shfmt, timescaledb-tune, elvish, mesosphere-vsphere-csi, mods, gptscript,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, docker-machine-driver-linode, dbmate, chartmuseum, hydra, vault-en...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydra, vault-env, vt-cli,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: atlantis, fq, go-bindata, velero-plugin-for-csi, wgcf, neuvector-dbgen, external-dns, helm-mapkubeapis, protoc-gen-go, mongodb-kubernetes-operator, amass, kubernetes-csi-node-driver-registrar, velero, nodetaint, docker-machine-driver-linode, dbmate, chartmuseum, hydr...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, trust-manager, cluster-api-gcp-controller, kaniko, logstash-exporter, kubeflow-katib, rekor, cert-manager-csi-driver-fips, yunikorn-web, gitlab-kas-fips, cfssl-fips, kaf, kubernetes-dashboard-api, jaeger-operator-fips, aws-flb-cloudwatch,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-couchbase, crossplane-provider-azure, fq, go-bindata, nri-f5, flux-image-automation-controller, external-dns, kubernetes-dns-node-cache, nri-elasticsearch, nri-rabbitmq, amass, kube-logging-operator, velero, cortex, nodetaint, q, pombump, helm-operator,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, buildkitd, aactl, slsa-verifier, spark-operator, src, up, kubescape, dgraph, k3d, kubeflow, terraform-provider-sendgrid, scorecard, cortex, kubevela, prometheus-blackbox-exporter...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, kubescape, bank-vaults-fips, kubernetes-csi-livenessprobe, prometheus-adapter-fips, buildkitd, spark-operator, aactl, kiam, terraform-provider-sendgrid-fips, cluster-autoscaler-fips, cortex, conftest-fips, falco, dgraph, slsa-verifier, src,...