GO-2026-4985 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubescape, cilium, opentelemetry-collector, flux-notification-controller, weaviate, flyte, kots, external-dns, thanos, external-secrets-operator, grafana-rollout-operator, zot, k6, buildkitd, ferretdb, opa-envoy, gatekeeper, kube-logging-operator,...

CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1

Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-network-policy-agent, aws-privateca-issuer, kubewatch, tailscale, fluxcd-kustomize-mutating-webhook, temporal, clickhouse-operator, malcontent, omnibump, grafana-operator, aws-load-balancer-controller, flux-helm-controller, flux-notification-controller...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: hcloud, aws-node-termination-handler, maru, nerdctl, redis-operator, clickhouse-operator, frp, chezmoi, oras, victoriametrics, filebrowser, slsa-verifier, task, crossplane-provider-family-azure, gcsfuse, wal-g, nri-mssql, db-operator, mongo-tools,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: azcopy, buildah, cluster-api-gcp-controller-fips, external-dns-fips, kube-arangodb-fips, prometheus-postgres-exporter, coredns, apm-server-fips, restic, helm, langfuse-fips, cass-operator-fips-no-pvc-delete, steampipe, terraform-provider-sendgrid,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: bazelisk, kube-bench, kubewatch, nerdctl, newrelic-infrastructure-agent, speedtest-go, temporal, kubevela, nri-cassandra, newrelic-fluent-bit-output, kaf, volume-modifier-for-k8s, flux-helm-controller, ip-masq-agent, go-md2man, mockery, cue, oras, fq, slsa-verifier,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: bazelisk, kube-bench, kubewatch, nerdctl, newrelic-infrastructure-agent, speedtest-go, temporal, kubevela, nri-cassandra, newrelic-fluent-bit-output, kaf, volume-modifier-for-k8s, flux-helm-controller, ip-masq-agent, go-md2man, mockery, cue, oras, fq, slsa-verifier,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: step-ca, crossplane-provider-aws-elasticache, crossplane-provider-aws-sns, kube-bench, kubewatch, nerdctl, newrelic-infrastructure-agent, kubescape, temporal, kubevela, timestamp-authority, kaf, frp, crossplane-provider-aws-route53, flux-helm-controller,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: prometheus-postgres-exporter, crossplane-provider-azure-authorization, nri-discovery-kubernetes, restic, vault-k8s, vault-k8s-fips, cfssl, logstash-exporter-fips, helm, terraform-docs, cass-operator-fips-no-pvc-delete, envoy-ratelimit, grpc-health-probe,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: bazelisk, kube-bench, kubewatch, nerdctl, newrelic-infrastructure-agent, speedtest-go, temporal, kubevela, nri-cassandra, newrelic-fluent-bit-output, kaf, volume-modifier-for-k8s, flux-helm-controller, ip-masq-agent, go-md2man, mockery, cue, oras, fq, slsa-verifier,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, metrics-server, temporal-server, kubescape, temporal, buildkitd, kubernetes-csi-external-resizer, kubevela, kine, cri-tools, volume-modifier-for-k8s, envoy-ratelimit, docker-compose...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, conftest-fips, timestamp-authority-fips, spark-operator, src, kubescape, dgraph, vault-csi-provider, slsa-verifier, metrics-server-fips, kiam, terraform-provider-sendgrid-fips, buildkitd, volume-modifier-for-k8s-fips, terraform-provider-sendgrid,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, cortex, aactl, kubeflow, spark-operator, slsa-verifier, kubescape, buildkitd, kubevela, src, scorecard, dgraph, up...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubewatch, newrelic-infrastructure-agent, ko, kubescape, nginx-stable, kubevela, kaf, frp, nghttp2, flux-helm-controller, flux-notification-controller, ip-masq-agent, cosign, cue, weaviate, slsa-verifier, kubeflow-katib, kots, pulumi-language-dotnet, pulumi,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubewatch, newrelic-infrastructure-agent, ko, kubescape, nginx-stable, kubevela, kaf, frp, nghttp2, flux-helm-controller, flux-notification-controller, ip-masq-agent, cosign, cue, weaviate, slsa-verifier, kubeflow-katib, kots, pulumi-language-dotnet, pulumi,...