GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, emissary, consul-k8s, argo-cd, k8sgpt, kubevela, postgres-operator, sonobuoy, cloudnative-pg, gitlab-kas, trivy, falcoctl, trivy-operator, cri-tools, infinispan-operator, cluster-api, terraform-provider-kubernetes, dynamic-localpv-provisioner,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: vexctl, grafana-mimir, gitleaks, cloudnative-pg, grafana, aws-application-networking-k8s, victoriametrics-operator, rancher-webhook, pluto, vault-benchmark, weaviate, caddy, spire-server, terraform-mcp-server, envconsul, frp, ghaudit, cert-manager,...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: vexctl, gitleaks, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, tfsec, timescaledb-tune, velero, envconsul, sigstore-scaffolding, frp, ghaudit, cert-manager, prometheus-alertmanager, kube-vip-cloud-provider, k8sgateway, juicefs, gatekeeper, whereabouts,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow, kubevela, helm-mapkubeapis, otel-cli, stakater-reloader, cfssl, aws-sigv4-proxy, src-fingerprint, knative-eventing, restic, fixuid, kube-rbac-proxy, kubelet-csr-approver, rancher-webhook, cloud-provider-gcp-cloud-controller-manager, tfsec,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: trivy, datadog-agent, influxd, caddy, crossplane-provider-azure-managedidentity, fulcio, http-echo, kube-bench, custom-pod-autoscaler-fips, ingress-nginx-controller, opa, postgres-operator-fips, docker-machine-driver-harvester, loki-3.6,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, thanos, kubevela, crossplane-provider-azure, vexctl, stakater-reloader, kor, cfssl, goreleaser, src-fingerprint, kube-rbac-proxy, esbuild, kyverno-policy-reporter, ytt, kubeadm-controlplane-controller, nri-haproxy, gcsfuse,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, k3d, kube-oidc-proxy, terraform-provider-sendgrid-fips, scorecard, kubernetes-csi-livenessprobe, volume-modifier-for-k8s-fips, vault-csi-provider, cortex, aactl, bank-vaults-fips, kubernetes-csi-livenessprobe-fips, prometheus-adapter-fips, src, slsa-verifier,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, kubeflow, kubevela, scorecard, src, falco, kubescape, dgraph, k3d, cortex, spark-operator, slsa-verifier, up, aactl, terraform-provider-sendgrid, buildkitd...