GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: infinispan-operator, k9s, k8ssandra-client, cloudnative-pg, terraform-provider-kubernetes, cri-tools, kubernetes-dashboard-api, teleport, rancher, tigera-operator, cluster-api, kubevela, zarf, kargo, vcluster, argo-rollouts, jitsucom-bulker, kubernetes,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, external-secrets-operator, rancher-system-upgrade-controller, knative-eventing, argo-rollouts, chartmuseum, falco-no-driver, aws-application-networking-k8s, cluster-api-provider-vsphere, dex, metacontroller, nri-f5, runc, cosign,...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, knative-eventing, argo-rollouts, chartmuseum, falco-no-driver, cluster-api-provider-vsphere, metacontroller, runc, cosign, aws-signer-notation-plugin, kube-rbac-proxy, dataplaneapi, neuvector-sigstore-interface, pulumi-language-yaml,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, infinispan-operator, external-secrets-operator, cloud-provider-azure, ferretdb, cluster-api, docker-machine-driver-harvester, docker-machine-driver-linode, pgpool2exporter, knative-eventing, argo-rollouts, kube-state-metrics, chartmuseum,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: hugo-fips, external-dns-fips, gobump, tekton-pipelines-fips, velero-plugin-for-csi-fips, aactl, op-geth, prometheus-postgres-exporter, azurefile-csi, gosu, http-echo, node-feature-discovery-fips, kuma, sftpgo-plugin-kms, gops, opa, qemu-guesthelper,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: gitness, aws-load-balancer-controller, clusterctl, ferretdb, pombump, falco, kubewatch, kube-state-metrics, chartmuseum, docker-credential-gcr, kubernetes-event-exporter, nri-f5, amass, ctop, dex, runc, bazelisk, minio, caddy, kube-bench, grype, render-template, kpt,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, up, slsa-verifier, cortex, kubevela, falco, kubeflow, prometheus-blackbox-exporter, scorecard, aactl, kubescape, src, k3d, buildkitd, dgraph, spark-operator...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: conftest-fips, falcoctl-fips, cortex, scorecard, aws-efs-csi-driver-fips, prometheus-blackbox-exporter, terraform-provider-sendgrid-fips, kubeflow, aactl, up, smarter-device-manager-fips, kube-oidc-proxy, kubernetes-csi-livenessprobe-fips, cluster-autoscaler-fips,...