GO-2026-4985 vulnerabilities

Vulnerabilities for packages: opentofu, flyte, containerd, terraform-mcp-server, weaviate, kube-logging-operator, net-kourier, datadog-agent, terragrunt, kubeflow-pipelines, envoy-ratelimit, falcosidekick, opentelemetry-collector, grafana, spicedb, knative-eventing, hubble,...

CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1

Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-image-reflector-controller, supercronic, oras, victoriametrics-cluster, mountpoint-s3-csi-driver, external-secrets-operator, dgraph, nodetaint, envoy-ratelimit, temporal, sftpgo-plugin-eventsearch, grafana-rollout-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kapp, kuberay-operator, kbld, weaviate, mattermost, hugo, aws-load-balancer-controller, frp, witness, gatus, juicefs-csi-driver, nri-discovery-kubernetes, otel-cli, go-licenses, newrelic-infrastructure-agent, spire-controller-manager, cue, bank-vaults, rqlite,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider, flux, step-kms-plugin, kubernetes-csi-external-attacher, tempo-fips, buildkite-agent, kube-arangodb-fips, crossplane-function-environment-configs, gogatekeeper, cerbos, kubernetes-csi-external-snapshotter-fips, etcd, xeol-fips,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kuberay-operator, terraform, go-bindata, shfmt, kubernetes-csi-external-provisioner, nri-cassandra, aws-flb-kinesis, gomplate, ip-masq-agent, kpt, kube-logging-operator, cri-tools, speedtest-go, k3d, kind, nats, kubeflow-pipelines, envoy-ratelimit,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kuberay-operator, terraform, go-bindata, shfmt, kubernetes-csi-external-provisioner, nri-cassandra, aws-flb-kinesis, gomplate, ip-masq-agent, kpt, kube-logging-operator, cri-tools, speedtest-go, k3d, kind, nats, kubeflow-pipelines, envoy-ratelimit,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flux, trivy, ip-masq-agent, etcd, cert-exporter, k3d, kubernetes-csi-external-resizer, cosign-fips, node-problem-detector, restic, grafana-operator-fips, skaffold, caddy-fips, osv-scanner, prometheus-mysqld-exporter, kube-bench, kubernetes-dashboard-metrics-scraper,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kuberay-operator, crossplane-provider-aws-cloudfront, terraform, trust-manager, conftest, kubernetes-csi-external-provisioner, weaviate, aws-flb-kinesis, gomplate, ip-masq-agent, kpt, kube-logging-operator, cri-tools, k3d, hugo, terragrunt, nats, cosign,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kuberay-operator, terraform, go-bindata, shfmt, kubernetes-csi-external-provisioner, nri-cassandra, aws-flb-kinesis, gomplate, ip-masq-agent, kpt, kube-logging-operator, cri-tools, speedtest-go, k3d, kind, nats, kubeflow-pipelines, envoy-ratelimit,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kubernetes-csi-external-resizer, temporal, kine, metrics-server, temporal-server, volume-modifier-for-k8s, kubevela, kubernetes, k3s, buildkitd, docker-compose, cri-tools, kubescape...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, buildkitd, terraform-provider-sendgrid, prometheus-blackbox-exporter, bank-vaults-fips, kubeflow-fips, slsa-verifier, kubescape, kubernetes-csi-livenessprobe, volume-modifier-for-k8s-fips, src, timestamp-authority-fips, scorecard,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: cortex, terraform-provider-sendgrid, k3d, up, kubevela, kubeflow, buildkitd, scorecard, src, spark-operator, slsa-verifier, aactl, dgraph, kubescape...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: terraform, conftest, weaviate, gomplate, ip-masq-agent, kpt, k3d, hugo, kind, cosign, nats, envoy-ratelimit, git-lfs, frp, flux-helm-controller, newrelic-infrastructure-agent, cue, rqlite, ko, kubescape, terraform-provider-azurerm, nghttp2, kubevela, hey, kubewatch,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: terraform, conftest, weaviate, gomplate, ip-masq-agent, kpt, k3d, hugo, kind, cosign, nats, envoy-ratelimit, git-lfs, frp, flux-helm-controller, newrelic-infrastructure-agent, cue, rqlite, ko, kubescape, terraform-provider-azurerm, nghttp2, kubevela, hey, kubewatch,...