GO-2026-4985 vulnerabilities

Vulnerabilities for packages: containerd, datadog-agent, traefik, weaviate, octo-sts, cloudprober, kiali, argo-workflows, cilium, ferretdb, gitaly, cerbos, terragrunt, spicedb, op-geth, docker-cli-buildx, falcosidekick, hubble, buildkitd, kubescape, knative-operator, tkn, cortex, knative-serving,...

CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1

Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: mariadb-operator, dataplaneapi, secrets-store-csi-driver-provider-aws, aws-network-policy-agent, newrelic-infra-operator, victoriametrics, omnibump, flux, newrelic-k8s-metadata-injection, victoriametrics-cluster, dbmate, dkron, supercronic, hubble, goreleaser, nova,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: rancher, kube-state-metrics, kubernetes-csi-driver-hostpath, newrelic-fluent-bit-output, sonobuoy, spqr, step-issuer, libnvidia-container, stern, podman, kyverno-notation-aws, kpt, sftpgo-plugin-eventstore, yunikorn-web, frp, cloud-sql-proxy, kaf, dockerize,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: prometheus-process-exporter, crossplane-provider-aws-sns, prometheus-statsd-exporter-fips, yunikorn-k8shim-fips, cri-tools, gatekeeper-fips, verticadb-operator-fips, xeol-fips, mariadb-operator-fips, sftpgo-plugin-geoipfilter, kubernetes-csi-external-resizer-fips,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cni-plugins, nri-mysql, newrelic-infra-operator, gitness, kubebuilder, kube-state-metrics, newrelic-fluent-bit-output, newrelic-infrastructure-agent, pulumi-language-java, sonobuoy, ytt, kind, nri-kafka, dive, goreleaser, nri-nagios, thanos-operator,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cni-plugins, nri-mysql, newrelic-infra-operator, gitness, kubebuilder, kube-state-metrics, newrelic-fluent-bit-output, newrelic-infrastructure-agent, pulumi-language-java, sonobuoy, ytt, kind, nri-kafka, dive, goreleaser, nri-nagios, thanos-operator,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cfssl, crossplane-provider-aws-sns, prometheus-statsd-exporter-fips, cri-tools, crossplane-provider-azure-authorization, chartmuseum, grype, ollama, prometheus-postgres-exporter, kube-bench, gcsfuse, minio-fips, rekor-fips, metallb, k3d, ferretdb, kubevela,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, hugo-extended, gitness, crossplane-provider-aws, crossplane-provider-aws-memorydb, kube-state-metrics, kubernetes-csi-driver-hostpath, newrelic-infrastructure-agent, pulumi-language-java, sonobuoy, falcoctl, goreleaser,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: cni-plugins, nri-mysql, newrelic-infra-operator, gitness, kubebuilder, kube-state-metrics, newrelic-fluent-bit-output, newrelic-infrastructure-agent, pulumi-language-java, sonobuoy, ytt, kind, nri-kafka, dive, goreleaser, nri-nagios, thanos-operator,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: cri-tools, k3s, kine, volume-modifier-for-k8s, kubevela, kubernetes-csi-external-resizer, envoy-ratelimit, temporal, temporal-server, buildkitd, kubescape, metrics-server, docker-compose, kubernetes...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, cortex, terraform-provider-sendgrid, kube-oidc-proxy, src, aactl, bank-vaults-fips, prometheus-stackdriver-exporter, kubeflow, slsa-verifier, prometheus-adapter-fips, kubernetes-csi-livenessprobe, timestamp-authority-fips, buildkitd...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: cortex, kubevela, scorecard, terraform-provider-sendgrid, slsa-verifier, spark-operator, aactl, src, k3d, buildkitd, kubescape, dgraph, kubeflow, up...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gitness, pulumi-language-java, newrelic-infrastructure-agent, kind, terraform-provider-azurerm, terraform-provider-sendgrid, weaviate, pulumi-language-dotnet, ollama, conftest, kpt, gomplate, aws-efs-csi-driver, frp, kaf, spark-operator, secrets-store-csi-driver, k3d...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: gitness, pulumi-language-java, newrelic-infrastructure-agent, kind, terraform-provider-azurerm, terraform-provider-sendgrid, weaviate, pulumi-language-dotnet, ollama, conftest, kpt, gomplate, aws-efs-csi-driver, frp, kaf, spark-operator, secrets-store-csi-driver, k3d...