GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: rancher, infinispan-operator, kots, trivy, vcluster, linkerd2, percona-server-mongodb-operator, falcoctl, terraform-provider-kubernetes, k8sgpt-operator, k9s, aws-node-termination-handler, argo-cd, juicefs-csi-driver, rancher-fleet, cri-tools, kargo, cluster-api,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: addon-resizer, mongodb-kubernetes-operator, openbao, metrics-agent, gitleaks, gostatsd, vault-secrets-webhook, minio-object-browser, opencost, modelmesh-runtime-adapter, smokescreen, cue, chartmuseum, docker-credential-ecr-login, amazon-cloudwatch-agent-operator,...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: ini-file, mongodb-kubernetes-operator, gotestsum, gitleaks, gostatsd, vault-secrets-webhook, minio-object-browser, modelmesh-runtime-adapter, iptables-wrappers, falcosidekick, smokescreen, cue, neuvector-sigstore-interface, chartmuseum, docker-credential-ecr-login,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: octo-sts, kratos, ini-file, mongodb-kubernetes-operator, age, gotestsum, git-credential-oauth, gatekeeper, gostatsd, chisel, hivemind, nats, cloud-sql-proxy, rekor, wait-for-port, portieris, kpt, vault-secrets-webhook, nsc, kube-rbac-proxy, minio-object-browser,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: dgraph, falco, prometheus-pushgateway-fips, nemo, temporal, steampipe, grpc-health-probe, gitlab-pages-fips, dex, docker-credential-gcr, flux, git-credential-oauth, beats-fips, trino, cilium-certgen, certificate-transparency-fips, spegel, aws-flb-firehose-fips, kpt,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: temporal-ui-server, flannel-cni-plugin, minio, memcached-exporter, kubeadm-bootstrap-controller, yq, nats, wait-for-port, kpt, k8sgpt, kube-rbac-proxy, kubernetes-dashboard, s5cmd, rabbitmq-cluster-operator, golangci-lint, aws-load-balancer-controller, rqlite, mage,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, buildkitd, spark-operator, terraform-provider-sendgrid, prometheus-blackbox-exporter, scorecard, up, k3d, aactl, kubeflow, kubescape, dgraph, cortex, src, slsa-verifier, falco...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, falco, prometheus-blackbox-exporter, volume-modifier-for-k8s-fips, prometheus-adapter-fips, terraform-provider-sendgrid-fips, kiam, k3d, metrics-server-fips, aactl, kubernetes-csi-livenessprobe, timestamp-authority-fips, buildkitd, kubeflow-fips,...