GO-2026-4985 vulnerabilities

Vulnerabilities for packages: buildkitd, kiali, terraform-mcp-server, falcosidekick, net-kourier, fluent-bit-plugin-loki, jaeger, thanos, opentelemetry-operator, weaviate, tekton-pipelines, argo-workflows, terragrunt, knative-eventing, envoy-ratelimit, kserve, opa, grafana-rollout-operator, zot,...

CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1

Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: hubble, nodetaint, kubewatch, rabbitmq-messaging-topology-operator, newrelic-infra-operator, dataplaneapi, grafana-rollout-operator, oras, temporal, external-secrets-operator, victoriametrics-cluster, flux-helm-controller, gh, grafana-operator, stakater-reloader,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nodetaint, spicedb-operator, bom, conjur-cli, temporal-ui-server, kyverno, terraform-docs, docker-machine-driver-linode, smarter-device-manager, kubeflow, terraform-provider-azapi, grafana-agent-operator, ghaudit, kustomize, descheduler, newrelic-fluent-bit-output,...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: fleet-server, flux-notification-controller, grafana, skopeo, dex, opentelemetry-collector-contrib, runc, amazon-ecs-agent-fips, vault-csi-provider, fuse-overlayfs-snapshotter, policy-controller-fips, sriov-network-device-plugin, trivy-operator-fips, gitaly,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, nri-mssql, go-md2man, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, tflint, cni-plugins, vertical-pod-autoscaler, grafana-operator, src-fingerprint, temporal-ui-server, vite, nri-kafka, metallb, ytt, terraform-docs,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, nri-mssql, go-md2man, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, tflint, cni-plugins, vertical-pod-autoscaler, grafana-operator, src-fingerprint, temporal-ui-server, vite, nri-kafka, metallb, ytt, terraform-docs,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, dynamic-localpv-provisioner, fuse-overlayfs-snapshotter, zarf, tflint, vertical-pod-autoscaler, restic, crossplane-provider-aws-s3, grafana-operator, atlantis, temporal-ui-server, conftest, falcosidekick, metallb, crossplane-provider-azure-sql,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: hubble-ui, trivy, skopeo, flux-notification-controller, kube-logging-operator, zot, crossplane-provider-aws, dex, runc, prometheus-beat-exporter, vault-csi-provider, fuse-overlayfs-snapshotter, policy-controller-fips, slsa-verifier, cass-operator-fips-no-pvc-delete,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, nri-mssql, go-md2man, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, tflint, cni-plugins, vertical-pod-autoscaler, grafana-operator, src-fingerprint, temporal-ui-server, vite, nri-kafka, metallb, ytt, terraform-docs,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubescape, buildkitd, metrics-server, volume-modifier-for-k8s, kubernetes, temporal, cri-tools, kubernetes-csi-external-resizer, kubevela, temporal-server, envoy-ratelimit, docker-compose, kine, k3s...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, terraform-provider-sendgrid, smarter-device-manager-fips, kube-oidc-proxy, prometheus-stackdriver-exporter, vault-csi-provider, conftest-fips, metrics-server-fips, slsa-verifier, kubernetes-csi-livenessprobe-fips, kubeflow-fips, src, kubescape, kubeflow, up,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, kubescape, buildkitd, up, scorecard, spark-operator, cortex, slsa-verifier, src, terraform-provider-sendgrid, kubeflow, kubevela, aactl, k3d...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, atlantis, conftest, kubeflow, grpcurl, grype, flux-source-controller, flux-kustomize-controller, slsa-verifier, weaviate, wireguard-go, scorecard, hugo, gke-gcloud-auth-plugin,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: nodetaint, buildkitd, dynamic-localpv-provisioner, bom, fuse-overlayfs-snapshotter, atlantis, conftest, kubeflow, grpcurl, grype, flux-source-controller, flux-kustomize-controller, slsa-verifier, weaviate, wireguard-go, scorecard, hugo, gke-gcloud-auth-plugin,...