GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: polaris, secrets-store-csi-driver-provider-aws, smarter-device-manager, aws-privateca-issuer, apko, dbmate, grafana-operator, rabbitmq-messaging-topology-operator, fluxcd-kustomize-mutating-webhook, local-path-provisioner, spire-server, nodetaint,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: hugo-extended, grafana-operator, argo-rollouts, sftpgo-plugin-auth, pvc-autoresizer, vault-env, opentofu, whereabouts, envoy-gateway, pdfcpu, dgraph, vault-k8s, lazydocker, dkron, rancher-agent, github-mcp-server, task, kots, docker-machine-driver-linode,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: harbor-registry-fips, kyverno-policy-reporter-kyverno-plugin, crossplane-function-go-templating-fips, crossplane-provider-aws-cloudformation-fips, temporal-server-fips, xeol-fips, flux-source-controller-fips, crossplane-provider-aws-sns,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: src, kubernetes-csi-external-provisioner, kube-rbac-proxy, cortex, grafana-operator, metrics-server, pulumi, fuse-overlayfs-snapshotter, helm, kwok, flannel-cni-plugin, helm-operator, minio, vite, vt-cli, ip-masq-agent, dgraph, prometheus-blackbox-exporter, tflint,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: src, kubernetes-csi-external-provisioner, kube-rbac-proxy, cortex, grafana-operator, metrics-server, pulumi, fuse-overlayfs-snapshotter, helm, kwok, flannel-cni-plugin, helm-operator, minio, vite, vt-cli, ip-masq-agent, dgraph, prometheus-blackbox-exporter, tflint,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: hugo-extended, kubernetes-csi-external-provisioner, src, cortex, grafana-operator, metrics-server, pulumi, fuse-overlayfs-snapshotter, helm, ollama, kwok, skopeo, helm-operator, minio, docker, crossplane-provider-aws-sqs, ip-masq-agent, dgraph,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: scorecard, kyverno-policy-reporter-kyverno-plugin, wavefront-collector-for-kubernetes, configmap-reload, temporal-server-fips, metallb, crossplane-provider-azure-sql, gitsign, crossplane-provider-aws-sns, thanos-operator, vault-csi-provider,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: src, kubernetes-csi-external-provisioner, kube-rbac-proxy, cortex, grafana-operator, metrics-server, pulumi, fuse-overlayfs-snapshotter, helm, kwok, flannel-cni-plugin, helm-operator, minio, vite, vt-cli, ip-masq-agent, dgraph, prometheus-blackbox-exporter, tflint,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubernetes, buildkitd, metrics-server, docker-compose, cri-tools, kubevela, temporal, temporal-server, kubernetes-csi-external-resizer, volume-modifier-for-k8s, kubescape, k3s, kine, envoy-ratelimit...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, terraform-provider-sendgrid-fips, bank-vaults-fips, slsa-verifier, prometheus-adapter-fips, aws-efs-csi-driver-fips, falcoctl-fips, kubeflow-fips, kubescape, kubevela, conftest-fips, prometheus-stackdriver-exporter, metrics-server-fips, k3d,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: src, slsa-verifier, prometheus-blackbox-exporter, dgraph, cortex, buildkitd, kubevela, scorecard, up, kubeflow, terraform-provider-sendgrid, kubescape, spark-operator, aactl, k3d...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: src, cortex, pulumi, metrics-server, fuse-overlayfs-snapshotter, helm, ollama, minio, ip-masq-agent, dgraph, prometheus-blackbox-exporter, prometheus-adapter, aactl, pulumi-language-dotnet, hugo, kots, nginx-stable, nri-prometheus, terraform-provider-aws,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: src, cortex, pulumi, metrics-server, fuse-overlayfs-snapshotter, helm, ollama, minio, ip-masq-agent, dgraph, prometheus-blackbox-exporter, prometheus-adapter, aactl, pulumi-language-dotnet, hugo, kots, nginx-stable, nri-prometheus, terraform-provider-aws,...