GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubevela, linkerd2, percona-server-mongodb-operator, argo-rollouts, kube-arangodb, k9s, kubescape, terraform-provider-kubernetes, trivy-operator, argocd-image-updater, k8sgpt, headlamp, kargo, kubernetes-dashboard-api, rancher-fleet, argo-cd, sonobuoy...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: grafana-mimir, terraform-provider-time, openbao, dgraph, yace, govulncheck, crossplane-provider-keycloak, multus-cni, spire-controller-manager, secrets-store-csi-driver-provider-azure, boring-registry, smokescreen, croc, crossplane-provider-gcp, opentelemetry-operato...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo, rancher-loglevel, trivy-operator,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, velero-plugin-for-csi, dgraph, yace, govulncheck, spire-controller-manager, juicefs, boring-registry, rekor, smokescreen, prometheus-alertmanager, envconsul, lazydocker, flux-operator, kube-state-metrics, skaffold, gatekeeper, buildkitd,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: runc, sops, terraform-provider-time, grafana-pyroscope, secrets-store-csi-driver-provider-aws, vault-secrets-webhook, velero-plugin-for-csi, dask-gateway, ko, aws-signer-notation-plugin, govulncheck, metrics-server, terraform-provider-sendgrid, http-echo,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: flux-helm-controller-fips, http-echo, fulcio-fips, apache-beam-python-3.11-sdk, tigera-operator-fips, azure-workload-identity-webhook, cortex, kubernetes-csi-node-driver-registrar-fips, gitlab-cng-fips, cass-operator-fips-no-pvc-delete, step-kms-plugin-fips, grype-db...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: tflint, kine, runc, grype, secrets-store-csi-driver-provider-aws, dask-gateway, dgraph, gomplate, temporal-server, govulncheck, metrics-server, kubernetes-csi-external-provisioner, http-echo, k8sgpt, pulumi-language-java, terraform-docs, velero, kpt,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, cortex, kubevela, k3d, up, aactl, dgraph, spark-operator, prometheus-blackbox-exporter, slsa-verifier, kubescape, terraform-provider-sendgrid, kubeflow, src, scorecard, buildkitd...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, dgraph, kubeflow-fips, terraform-provider-sendgrid-fips, cluster-autoscaler-fips, src, cortex, prometheus-blackbox-exporter, kubescape, kubernetes-csi-livenessprobe-fips, buildkitd, prometheus-stackdriver-exporter, aws-efs-csi-driver-fip...