GO-2026-4985 vulnerabilities

Vulnerabilities for packages: ferretdb, grafana-rollout-operator, kubescape, argo-workflows, external-dns, zot, k6, buildkitd, octo-sts, bento, kots, cortex, flux, docker, kubescape-operator, prometheus-alertmanager, cloudprober, thanos, terragrunt, kube-logging-operator, grafana-alloy, gatekeepe...

CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1

Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dkron, aws-privateca-issuer, flux-helm-controller, grafana-rollout-operator, newrelic-k8s-metadata-injection, malcontent, apko, stakater-reloader, actions-runner-controller, local-path-provisioner, mariadb-operator, kubewatch, nodetaint, clickhouse-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, grafana-rollout-operator, kubescape, boring-registry, xeol, timescaledb-parallel-copy, tetragon, pvc-autoresizer, kube-vip, zot, argo-cd, sbomqs, thanos-operator, kserve-rest-proxy, nginx-prometheus-exporter, ip-masq-agent, git-lfs, wuzz,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: hubble-fips, kapp-controller-fips, azurefile-csi, cluster-api-aws-controller, kyverno-policy-reporter-ui, spire-controller-manager-fips, metrics-server-fips, cluster-api, vault-fips, openfga, crossplane-provider-kubernetes, seaweedfs-operator-fips,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: ferretdb, task, terraform-docs, q, wireguard-go, memcached-exporter, prometheus-pushgateway, nri-prometheus, temporal-ui-server, nri-elasticsearch, argo-workflows, terraform, kubernetes-csi-external-provisioner, influx, kubeflow-katib, controller-gen, kubevela, kpt,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: ferretdb, task, terraform-docs, q, wireguard-go, memcached-exporter, prometheus-pushgateway, nri-prometheus, temporal-ui-server, nri-elasticsearch, argo-workflows, terraform, kubernetes-csi-external-provisioner, influx, kubeflow-katib, controller-gen, kubevela, kpt,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: ferretdb, crossplane-provider-azure-authorization, tekton-chains, terraform-docs, memcached-exporter, kubescape, nri-prometheus, boring-registry, crossplane-provider-aws-cloudfront, prometheus-pushgateway, crossplane-provider-aws-sqs, fulcio, argo-workflows,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: sonobuoy, hubble-fips, kyverno-policy-reporter-ui, metrics-server-fips, prometheus-node-exporter, argo-workflows-fips, kube-rbac-proxy-fips, helm-operator-fips, crossplane-provider-azure-authorization, dynamic-localpv-provisioner-fips, golangci-lint, dagger,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: ferretdb, task, terraform-docs, q, wireguard-go, memcached-exporter, prometheus-pushgateway, nri-prometheus, temporal-ui-server, nri-elasticsearch, argo-workflows, terraform, kubernetes-csi-external-provisioner, influx, kubeflow-katib, controller-gen, kubevela, kpt,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: docker-compose, kubevela, metrics-server, temporal, kubernetes, volume-modifier-for-k8s, buildkitd, kine, kubescape, k3s, kubernetes-csi-external-resizer, temporal-server, cri-tools, envoy-ratelimit...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: conftest-fips, slsa-verifier, falcoctl-fips, prometheus-blackbox-exporter, spark-operator, kubernetes-csi-livenessprobe, metrics-server-fips, src, dgraph, k3d, kubeflow-fips, kubescape, kubevela, terraform-provider-sendgrid, prometheus-adapter-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, src, terraform-provider-sendgrid, spark-operator, up, slsa-verifier, k3d, buildkitd, kubescape, dgraph, cortex, aactl, kubeflow, scorecard...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: wireguard-go, memcached-exporter, kubescape, nri-prometheus, kubeflow-katib, flux-kustomize-controller, kubevela, kpt, buildkitd, ko, haproxy-ingress, kind, ip-masq-agent, kots, git-lfs, nghttp2, cortex, kaf, metrics-server, nginx-mainline, aws-efs-csi-driver,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: wireguard-go, memcached-exporter, kubescape, nri-prometheus, kubeflow-katib, flux-kustomize-controller, kubevela, kpt, buildkitd, ko, haproxy-ingress, kind, ip-masq-agent, kots, git-lfs, nghttp2, cortex, kaf, metrics-server, nginx-mainline, aws-efs-csi-driver,...