GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, k9s, gitlab-kas, consul-k8s, kubescape, aws-node-termination-handler, cilium, headlamp, kpt, cri-tools, emissary, cluster-api, eksctl, skaffold, argo-cd, istio, infinispan-operator, k8sgpt-operator, kiali, kubeflow-pipelines, kubernetes,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: aactl, esbuild, gitlab-kas, nri-mssql, nri-haproxy, portieris, kapp, github-mcp-server, kubescape, malcontent, kubernetes-dashboard, podman, knative-serving, nri-mongodb, percona-server-mongodb-operator, grafana-operator, rancher-agent, polaris,...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: kratos, neuvector-sigstore-interface, portieris, kapp, cargobump, velero, docker-machine-driver-harvester, promxy, thanos-operator, nri-prometheus, local-path-provisioner, skopeo, falcosidekick, go-md2man, extism, terraform-provider-sendgrid, velero-plugin-for-aws,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kubescape-operator, kratos, cert-manager-cmctl, iptables-wrappers, aws-signer-notation-plugin, neuvector-sigstore-interface, govulncheck, kapp, portieris, speedtest-go, stern, hivemind, kubernetes-csi-driver-hostpath, secrets-store-csi-driver, ipfs-cluster, cargobump...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, harbor-scanner-trivy-fips, neuvector-dbgen, x509-certificate-exporter-fips, local-static-provisioner, buf, vgpu-util, kube-arangodb-fips, gofumpt, flux, mods, git-lfs-fips, cilium, jaeger-operator-fips, docker-machine-driver-harvester,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, falco, esbuild, tflint, src, nri-mssql, dgraph, nri-haproxy, govulncheck, speedtest-go, kubernetes-dashboard, minio, flux-image-reflector-controller, temporal-server, fq, eksctl, cortex, php-fpmexporter, caddy, nri-mongodb, dagger,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, prometheus-stackdriver-exporter, aactl, volume-modifier-for-k8s-fips, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, cortex, kubernetes-csi-livenessprobe, kubeflow, bank-vaults-fips, cluster-autoscaler-fips, conftest-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, aactl, spark-operator, k3d, cortex, src, terraform-provider-sendgrid, dgraph, prometheus-blackbox-exporter, up, kubevela, kubescape, buildkitd, scorecard, slsa-verifier, kubeflow...