GO-2026-4985 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer, tekton-pipelines, kiali, headlamp, gatekeeper, argo-workflows, tkn, grafana, loki, amazon-cloudwatch-agent, docker, cloudprober, kubo, kots, flyte, octo-sts, cilium, docker-compose, traefik, spicedb, grafana-mimir, keda,...

CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1

Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, karpenter, flux-helm-controller, clickhouse-operator, rabbitmq-messaging-topology-operator, apko, polaris, fluxcd-kustomize-mutating-webhook, tailscale, dkron, smarter-device-manager, external-secrets-operator, ingress-nginx-controlle...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: clickhouse-operator, apisix-ingress-controller, tkn, nsc, grafana, sftpgo-plugin-geoipfilter, argo-cd, mockery, policy-controller, syft, direnv, local-path-provisioner, oras, s5cmd, kubernetes-csi-external-attacher, sftpgo, aws-signer-notation-plugin, gatus, calico,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: helm-exporter, aws-load-balancer-controller, gitaly-fips, azure-service-operator-fips, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-aws-ec2-fips, neuvector-sigstore-interface, prometheus-process-exporter, teleport-operator-fips, bento-fips,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-kafka, cadvisor, kube-rbac-proxy, lazygit, k3d, prometheus-operator, src-fingerprint, argo-workflows, gcsfuse, kine, smarter-device-manager, pombump, gke-gcloud-auth-plugin, govulncheck, goreleaser, nerdctl, http-echo, mockery, dynamic-localpv-provisioner,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-kafka, cadvisor, kube-rbac-proxy, lazygit, k3d, prometheus-operator, src-fingerprint, argo-workflows, gcsfuse, kine, smarter-device-manager, pombump, gke-gcloud-auth-plugin, govulncheck, goreleaser, nerdctl, http-echo, mockery, dynamic-localpv-provisioner,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cadvisor, crossplane-provider-family-aws, k3d, prometheus-operator, atlantis, gitsign, apisix-ingress-controller, crossplane-provider-azure-storage, guac, argo-workflows, crossplane-provider-aws-eks, gcsfuse, kine, crossplane-provider-aws-elasticache,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, nri-prometheus, nuclei, kubernetes-csi-driver-hostpath, prometheus-alertmanager, argo-workflows-fips, prometheus-statsd-exporter, apisix-ingress-controller, k8sgpt-operator, prometheus-bind-exporter, flux-image-reflector-controller,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-kafka, cadvisor, kube-rbac-proxy, lazygit, k3d, prometheus-operator, src-fingerprint, argo-workflows, gcsfuse, kine, smarter-device-manager, pombump, gke-gcloud-auth-plugin, govulncheck, goreleaser, nerdctl, http-echo, mockery, dynamic-localpv-provisioner,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubescape, temporal, kubevela, envoy-ratelimit, cri-tools, docker-compose, kubernetes, metrics-server, temporal-server, k3s, volume-modifier-for-k8s, kine, buildkitd, kubernetes-csi-external-resizer...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, kubernetes-csi-livenessprobe-fips, terraform-provider-sendgrid, aws-efs-csi-driver-fips, kubeflow-fips, kubernetes-csi-livenessprobe, dgraph, timestamp-authority-fips, cortex, prometheus-adapter-fips, k3d, aactl, falcoctl-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubescape, kubevela, dgraph, aactl, spark-operator, k3d, slsa-verifier, up, terraform-provider-sendgrid, src, cortex, scorecard, buildkitd, kubeflow...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: k3d, atlantis, gke-gcloud-auth-plugin, cosign, dynamic-localpv-provisioner, pulumi-language-java, oauth2-proxy, gomplate, kots, nats, amass, kubeflow, kubewatch, hey, mc, skaffold, memcached-exporter, prometheus-adapter, pulumi-language-yaml, sigstore-scaffolding,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: k3d, atlantis, gke-gcloud-auth-plugin, cosign, dynamic-localpv-provisioner, pulumi-language-java, oauth2-proxy, gomplate, kots, nats, amass, kubeflow, kubewatch, hey, mc, skaffold, memcached-exporter, prometheus-adapter, pulumi-language-yaml, sigstore-scaffolding,...