GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: spire-server, osv-scanner, apko, aws-network-policy-agent, mountpoint-s3-csi-driver, actions-runner-controller, kubewatch, flux-helm-controller, metacontroller, aws-privateca-issuer, rabbitmq-messaging-topology-operator, hubble, nova, dbmate, flux-source-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: spire-server, db-operator, ko, aws-sigv4-proxy, descheduler, nri-redis, paranoia, metacontroller, kserve-modelmesh-serving, cluster-api-provider-vsphere, dockerize, secrets-store-csi-driver-provider-azure, kubernetes-dashboard-web, xeol, runc,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3-fips, dapr, prometheus-elasticsearch-exporter-fips, kuma, cloudflared, crossplane-provider-aws-firehose, flux-source-controller, cilium-envoy-fips, crossplane-provider-aws-ec2-fips, gitlab-kas-fips, syft-fips, prometheus-pgbouncer-exporter,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: esbuild, ferretdb, smarter-device-manager, vt-cli, minio, nri-redis, kor, paranoia, actions-runner-controller, nri-rabbitmq, go-bindata, metrics-server, fuse-overlayfs-snapshotter, cortex, dockerize, argo-workflows, secrets-store-csi-driver-provider-azure,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: esbuild, ferretdb, smarter-device-manager, vt-cli, minio, nri-redis, kor, paranoia, actions-runner-controller, nri-rabbitmq, go-bindata, metrics-server, fuse-overlayfs-snapshotter, cortex, dockerize, argo-workflows, secrets-store-csi-driver-provider-azure,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, ferretdb, smarter-device-manager, mc, minio, kor, actions-runner-controller, pulumi-language-dotnet, falcosidekick, metacontroller, metrics-server, fuse-overlayfs-snapshotter, external-dns, cortex, crossplane-provider-aws-kms,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, influx, cloudflared, crossplane-provider-aws-firehose, flux-source-controller, pgpool2exporter, falcosidekick-fips, oauth2-proxy, gitness, prometheus-beat-exporter-fips, prometheus-nats-exporter, k8ssandra-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: esbuild, ferretdb, smarter-device-manager, vt-cli, minio, nri-redis, kor, paranoia, actions-runner-controller, nri-rabbitmq, go-bindata, metrics-server, fuse-overlayfs-snapshotter, cortex, dockerize, argo-workflows, secrets-store-csi-driver-provider-azure,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: temporal, temporal-server, volume-modifier-for-k8s, k3s, kubernetes, buildkitd, docker-compose, envoy-ratelimit, cri-tools, kubescape, metrics-server, kubevela, kubernetes-csi-external-resizer, kine...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, up, aactl, dgraph, slsa-verifier, terraform-provider-sendgrid, buildkitd, src, kubescape, k3d, scorecard, kubeflow, kubevela, cortex, spark-operator...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, kubeflow-fips, metrics-server-fips, src, volume-modifier-for-k8s-fips, kubernetes-csi-livenessprobe-fips, kiam, up, falcoctl-fips, vault-csi-provider, slsa-verifier, prometheus-stackdriver-exporter, conftest-fips, smarter-device-manager-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: ko, mc, minio, pulumi-language-dotnet, metacontroller, metrics-server, fuse-overlayfs-snapshotter, cortex, git-lfs, wireguard-go, dynamic-localpv-provisioner, helm, atlantis, skaffold, terraform-provider-aws, hey, pulumi, dgraph, kind, terraform-provider-sendgrid,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: ko, mc, minio, pulumi-language-dotnet, metacontroller, metrics-server, fuse-overlayfs-snapshotter, cortex, git-lfs, wireguard-go, dynamic-localpv-provisioner, helm, atlantis, skaffold, terraform-provider-aws, hey, pulumi, dgraph, kind, terraform-provider-sendgrid,...