GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kubevela, argo-workflows, postgres-operator, kubescape, juicefs-csi-driver, datadog-agent, cilium, kubeflow-pipelines, terraform-provider-kubernetes, verticadb-operator, kots, dynamic-localpv-provisioner, cert-manager-istio-csr, cri-tools,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: golangci-lint, scorecard, docker-credential-acr-env, spire-controller-manager, helm, terraform-docs, cloud-sql-proxy, aws-s3-controller, gitaly, hubble, terraform-provider-sendgrid, goreleaser, yunikorn-web, kubernetes-event-exporter, tkn, wgcf, cluster-autoscaler,...

CLEANSTART-2026-UM45661 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 4.4.0-r0, 4.4.0-r1, 4.4.0-r2, 4.4.0-r3

Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: fq, tekton-pipelines, falco-no-driver, tofu-controller, vexctl, contour, helm-set-status, kind, scorecard, envconsul, docker-credential-acr-env, k6, spire-controller-manager, promxy, ferretdb, docker-credential-ecr-login, terraform-docs, cloud-sql-proxy,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: fq, tekton-pipelines, falco-no-driver, tofu-controller, vexctl, contour, helm-set-status, kind, scorecard, envconsul, docker-credential-acr-env, k6, spire-controller-manager, promxy, ferretdb, docker-credential-ecr-login, cloud-sql-proxy, aws-s3-controller,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: fq, tekton-pipelines, falco-no-driver, tofu-controller, vexctl, contour, helm-set-status, kind, scorecard, envconsul, docker-credential-acr-env, k6, spire-controller-manager, promxy, ferretdb, docker-credential-ecr-login, terraform-docs, cloud-sql-proxy,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: fq, tekton-pipelines, falco-no-driver, tofu-controller, vexctl, contour, helm-set-status, kind, scorecard, envconsul, docker-credential-acr-env, k6, spire-controller-manager, promxy, ferretdb, docker-credential-ecr-login, terraform-docs, cloud-sql-proxy,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: scorecard, docker-credential-acr-env, spire-controller-manager, terraform-docs, cloud-sql-proxy, aws-s3-controller, terraform-provider-sendgrid, hivemind, yunikorn-web, kubernetes-event-exporter, wgcf, chartmuseum, kube-rbac-proxy, grafana-pyroscope, cri-tools,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: scorecard, docker-credential-acr-env, spire-controller-manager, terraform-docs, cloud-sql-proxy, aws-s3-controller, terraform-provider-sendgrid, hivemind, yunikorn-web, kubernetes-event-exporter, wgcf, chartmuseum, kube-rbac-proxy, grafana-pyroscope, cri-tools,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: scorecard, docker-credential-acr-env, spire-controller-manager, terraform-docs, cloud-sql-proxy, aws-s3-controller, terraform-provider-sendgrid, hivemind, yunikorn-web, kubernetes-event-exporter, wgcf, cluster-autoscaler, chartmuseum, kyverno-policy-reporter-ui,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: scorecard, docker-credential-acr-env, spire-controller-manager, terraform-docs, cloud-sql-proxy, aws-s3-controller, terraform-provider-sendgrid, hivemind, yunikorn-web, kubernetes-event-exporter, wgcf, chartmuseum, kube-rbac-proxy, grafana-pyroscope, cri-tools,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: fq, tekton-pipelines, falco-no-driver, tofu-controller, vexctl, contour, helm-set-status, kind, scorecard, envconsul, docker-credential-acr-env, k6, spire-controller-manager, promxy, ferretdb, docker-credential-ecr-login, terraform-docs, cloud-sql-proxy,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: fq, tekton-pipelines, falco-no-driver, tofu-controller, vexctl, contour, helm-set-status, kind, scorecard, envconsul, docker-credential-acr-env, k6, spire-controller-manager, promxy, ferretdb, docker-credential-ecr-login, terraform-docs, cloud-sql-proxy,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: scorecard, docker-credential-acr-env, spire-controller-manager, terraform-docs, cloud-sql-proxy, aws-s3-controller, terraform-provider-sendgrid, hivemind, yunikorn-web, kubernetes-event-exporter, wgcf, chartmuseum, kube-rbac-proxy, grafana-pyroscope, cri-tools,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: scorecard, docker-credential-acr-env, spire-controller-manager, terraform-docs, cloud-sql-proxy, aws-s3-controller, terraform-provider-sendgrid, hivemind, yunikorn-web, kubernetes-event-exporter, wgcf, chartmuseum, kube-rbac-proxy, grafana-pyroscope, cri-tools,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: fq, tekton-pipelines, falco-no-driver, tofu-controller, vexctl, contour, helm-set-status, kind, scorecard, envconsul, docker-credential-acr-env, k6, spire-controller-manager, promxy, ferretdb, docker-credential-ecr-login, terraform-docs, cloud-sql-proxy,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cilium-cli, kubelet-csr-approver-fips, aws-flb-kinesis, policy-controller, flux-kustomize-controller, istio-fips, ghaudit, logstash-exporter, cortex-fips, consul, kube-oidc-proxy, fscrypt, kaf, mkcert, falco-exporter-fips, helm, gitaly, falcoctl,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, fq, kubeadm-controlplane-controller, vexctl, golangci-lint, kind, scorecard, docker-credential-acr-env, cue, dex, docker-cli, helm, supercronic, ferretdb, docker-credential-ecr-login, terraform-docs, kubeadm-bootstrap-controller,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, kubevela, spark-operator, terraform-provider-sendgrid, k3d, prometheus-blackbox-exporter, falco, scorecard, cortex, kubescape, slsa-verifier, buildkitd, up, ipfs, aactl, src, dgraph...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, kubevela, kubernetes-csi-livenessprobe, spark-operator, kubescape, scorecard, kiam, cortex, cluster-autoscaler-fips, src, prometheus-stackdriver-exporter, metrics-server-fips, kube-oidc-proxy, falcoctl-fips,...