GO-2026-4985 vulnerabilities

Vulnerabilities for packages: opentofu, fluent-bit-plugin-loki, envoy-ratelimit, aws-otel-collector, ingress-nginx-controller, argo-workflows, kube-logging-operator, prometheus, dapr, aactl, loki, terragrunt, kots, headlamp, external-dns, grafana-image-renderer, gitlab-kas, grafana-alloy, keda,...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1

Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: omnibump, karpenter, mountpoint-s3-csi-driver, supercronic, grafana-operator, clickhouse-operator, mariadb-operator, aws-privateca-issuer, kubewatch, osv-scanner, dataplaneapi, goreleaser, aws-network-policy-agent, envoy-ratelimit, malcontent, smokescreen, nodetaint,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: authservice, grpc-health-probe, opentofu, policy-controller, crane, kor, kubewatch, lazygit, fscrypt, sriov-network-device-plugin, ingress-nginx-controller, argo-workflows, rancher, nri-mssql, buf, ctop, pguser, crossplane-provider-azure-authorization, direnv, rook,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, peerdb-flow, flux-kustomize-controller-fips, yunikorn-k8shim, fuse-overlayfs-snapshotter, kyverno-policy-reporter-fips, prometheus-node-exporter, longhorn-instance-manager-fips, gitlab-rails-ce, spicedb, otel-cli,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: tflint, kubernetes-dns-node-cache, eksctl, kor, kubewatch, hello-world-golang, nri-kafka, s5cmd, goreleaser, vt-cli, kpt, lazygit, envoy-ratelimit, docker-credential-gcr, memcached-exporter, nerdctl, secrets-store-csi-driver-provider-gcp, prometheus-pushgateway,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: tflint, kubernetes-dns-node-cache, eksctl, kor, kubewatch, hello-world-golang, nri-kafka, s5cmd, goreleaser, vt-cli, kpt, lazygit, envoy-ratelimit, docker-credential-gcr, memcached-exporter, nerdctl, secrets-store-csi-driver-provider-gcp, prometheus-pushgateway,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: tflint, kubernetes-dns-node-cache, grpc-health-probe, policy-controller, eksctl, kor, crossplane-provider-azure-storage, kubewatch, goreleaser, slsa-verifier, kpt, envoy-ratelimit, memcached-exporter, nerdctl, secrets-store-csi-driver-provider-gcp,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws, terraform-docs, fuse-overlayfs-snapshotter, prometheus-node-exporter, spicedb, trillian-fips, gitness, crossplane-provider-aws-sqs, prometheus-postgres-exporter, mc-fips, helm-push, cri-tools, cosign, cloudflared, flux, rekor-fips,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: tflint, kubernetes-dns-node-cache, eksctl, kor, kubewatch, hello-world-golang, nri-kafka, s5cmd, goreleaser, vt-cli, kpt, lazygit, envoy-ratelimit, docker-credential-gcr, memcached-exporter, nerdctl, secrets-store-csi-driver-provider-gcp, prometheus-pushgateway,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: cri-tools, kubernetes, docker-compose, k3s, kubescape, kubernetes-csi-external-resizer, kubevela, volume-modifier-for-k8s, buildkitd, temporal-server, envoy-ratelimit, metrics-server, kine, temporal...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, terraform-provider-sendgrid, cortex, kubeflow, kubescape, spark-operator, src, k3d, kubevela, scorecard, buildkitd, slsa-verifier, up, aactl...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, kubernetes-csi-livenessprobe-fips, prometheus-blackbox-exporter, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, k3d, smarter-device-manager-fips, kubeflow-fips, vault-csi-provider, scorecard, slsa-verifier, spark-operator, aws-efs-csi-driver-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nghttp2, kubewatch, kpt, envoy-ratelimit, memcached-exporter, secrets-store-csi-driver-provider-gcp, nginx-mainline, terraform-provider-azurerm, rqlite, flux-kustomize-controller, kubernetes-csi-livenessprobe, minio, bom, grype, terraform, aactl, aws-efs-csi-driver,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: nghttp2, kubewatch, kpt, envoy-ratelimit, memcached-exporter, secrets-store-csi-driver-provider-gcp, nginx-mainline, terraform-provider-azurerm, rqlite, flux-kustomize-controller, kubernetes-csi-livenessprobe, minio, bom, grype, terraform, aactl, aws-efs-csi-driver,...