GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: trivy, percona-server-mongodb-operator, eksctl, datadog-agent, linkerd2, kube-arangodb, postgres-operator, gitlab-runner, k3s, rancher, kwok, redis-operator, emissary, cri-tools, rancher-agent, juicefs-csi-driver, kpt, cloudnative-pg, aws-node-termination-handler,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: trivy, kapp, datadog-agent, caddy, crossplane-provider-azure-managedidentity, http-echo, kube-bench, ingress-nginx-controller, docker-machine-driver-harvester, terraform-provider-azuread, rabbitmq-messaging-topology-operator, kube-state-metrics, git-lfs,...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: trivy, kapp, fulcio, http-echo, kube-bench, docker-machine-driver-harvester, terraform-provider-azuread, kube-state-metrics, k8sgateway, fq, pvc-autoresizer, metacontroller, newrelic-nri-statsd, infinispan-operator, juicefs, cadvisor, sonobuoy, kyverno,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, gcp-compute-persistent-disk-csi-driver, scorecard,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: minio-object-browser, protoc-gen-go, nsc, kapp, contour, kuberlr, cert-manager-cmctl, fulcio, ko, docker-credential-gcr, cloud-provider-gcp-cloud-controller-manager, atlantis, http-echo, terraform-provider-azapi, terraform-docs, gcp-compute-persistent-disk-csi-driver...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cri-tools, caddy, prometheus-statsd-exporter-fips, kubernetes-dashboard-auth, azure-service-operator-fips, gomplate, kubeflow-katib, grafana-pyroscope, kube-arangodb-fips, rancher-security-scan-fips, grafana-mimir-fips, request-1279-14, trivy-fips, nri-mssql,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, datadog-agent, nuclei, caddy, pombump, newrelic-infrastructure-agent, docker-credential-gcr, http-echo, terraform-docs, scorecard, newrelic-infra-operator, kube-bench, logstash-exporter, runc, vexctl, ferretdb, kustomize, gops, kaf,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, cluster-autoscaler-fips, bank-vaults-fips, k3d, slsa-verifier, up, kubeflow-fips, falcoctl-fips, vault-csi-provider, terraform-provider-sendgrid, kubernetes-csi-livenessprobe, kubescape, aactl, kubevela, metrics-server-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, cortex, k3d, spark-operator, aactl, buildkitd, up, dgraph, src, slsa-verifier, kubescape, kubevela, prometheus-blackbox-exporter, scorecard, kubeflow, terraform-provider-sendgrid...