GHSA-9JJ7-4M8R-RFCM vulnerabilities

Vulnerabilities for packages: k3s, kots, envoy-gateway-fips, commercial-expanso-edge, envoy-gateway, commercial-chainloop-backend, kine, commercial-grafana, spire-server...

CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: k3s, kots, envoy-gateway-fips, commercial-expanso-edge, envoy-gateway, commercial-chainloop-backend, kine, commercial-grafana, spire-server...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux-fips, cloudbeat, chaos-mesh, chartmuseum, gitlab-operator-fips, helm-operator, trivy-fips, kube-arangodb-fips, eksctl, kube-arangodb, helm-exporter, consul-k8s, envoy-gateway, cerbos, zarf-fips, tw, kuma, tigera-operator-fips, harbor-fips, cloudbeat-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, pluto, nfs-subdir-external-provisioner, secrets-store-csi-driver-provider-aws, flux-helm-controller, hubble, aws-privateca-issuer, flux-notification-controller, github-mcp-server, malcontent, flux,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: gitlab-pages, kubernetes-dashboard, coredns, libnvidia-container, aactl, istio, falco-no-driver, flux, kots, runc, argo-cd, nerdctl, snyk-cli, ingress-nginx-controller, aws-flb-firehose, gitaly, zot, external-secrets-operator, kube-fluentd-operator, k3s, kyverno,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, kubernetes-dashboard-api, flux, promxy, victoriametrics-cluster, knative-serving, terraform-mcp-server, flux-source-controller, minio-object-browser, terraform-docs, rancher-telemetry, croc, crossplane-provider-azure-sql, scorecard,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: net-kourier, timoni, pulumi-language-yaml, spqr, cloudnative-pg, grafana, amazon-cloudwatch-agent-operator, kubernetes-dashboard-api, rook, flux, argo-rollouts, mc, flannel, promxy, nerdctl, temporal, snyk-cli, flux-image-automation-controller,...

GHSA-3P65-76G6-3W7R vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: portieris, gitlab-rails-ce, gitlab-rails-ce-fips, argocd-image-updater-fips, kots, gitness, envoy-gateway-fips, zot, argocd-image-updater, portieris-fips, envoy-gateway...

GHSA-3P65-76G6-3W7R vulnerabilities

Vulnerabilities for packages: portieris, gitlab-rails-ce, gitlab-rails-ce-fips, argocd-image-updater-fips, kots, gitness, envoy-gateway-fips, zot, argocd-image-updater, portieris-fips, envoy-gateway...

GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: portieris, gitlab-rails-ce, gitlab-rails-ce-fips, argocd-image-updater-fips, kots, gitness, envoy-gateway-fips, zot, argocd-image-updater, portieris-fips, envoy-gateway...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: portieris, gitlab-rails-ce, gitlab-rails-ce-fips, argocd-image-updater-fips, kots, gitness, envoy-gateway-fips, zot, argocd-image-updater, portieris-fips, envoy-gateway...

CLEANSTART-2026-YL47233 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 0.0.0_git20251231-r0, 0.0.0_git20251231-r1

Multiple security vulnerabilities affect the envoy-ratelimit package. These issues are resolved in later releases. See references for individual vulnerability details...

Amazon Linux 2 : ecs-service-connect-agent, --advisory ALAS2ECS-2026-100 (ALASECS-2026-100)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.34.13.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-100 advisory. Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and...

Important: ecs-service-connect-agent

Issue Overview: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC Role-Based Access Control filter contains a logic vulnerability in how it validates HTTP headers when multiple values are present for the same header name. Instead o...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2026-1532)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1532 advisory. Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC Role-Based Access Control filter contains a logic vulnerability in how it...

Important: ecs-service-connect-agent

Issue Overview: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC Role-Based Access Control filter contains a logic vulnerability in how it validates HTTP headers when multiple values are present for the same header name. Instead o...