GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, consul-k8s-fips, conftest-fips, conftest, kubescape-operator, crossplane, argo-cd, falcoctl, redpanda-operator, rancher-fleet-fips, argocd-image-updater-fips, k9s-fips, kargo, kubescape, steampipe, manifest-tool, ocm-cli, xeol, headlamp-fips, zarf,...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: argo-events-fips, kubernetes-event-exporter-fips, peerdb-flow, argo-rollouts-fips, kubewatch, ory-kratos-fips, argo-cd, kyverno-policy-reporter-fips, argo-rollouts, argo-cd-fips, atlantis, argo-events, kubernetes-event-exporter, bento-fips, goreleaser, bento,...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: argo-events-fips, kube-conformance, harbor-fips, flux, etcd, argo-workflows, kubernetes, prometheus-fips, kubernetes-fips, argo-cd, terragrunt, vault, etcd-fips, istio, kyverno-fips, upwind-agent, containerd, commercial-grafana, gitlab-rails-ce-fips, k3s,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: ghaudit, falco-exporter, cloud-provider-vsphere, helm-docs, dynamic-localpv-provisioner, kubelet-csr-approver, bom, oauth2-proxy-fips, crossplane, db-operator-fips, amazon-k8s-cni-fips, cluster-api-provider-vsphere-fips, jsonnet-bundler, opensearch-k8s-operator,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: helm, tflint, dynamic-localpv-provisioner, crossplane-provider-aws, crossplane, temporal-ui-server, rqlite, pulumi, falcosidekick, envoy-ratelimit-fips, aws-load-balancer-controller, atlantis, prometheus-elasticsearch-exporter, hugo, melange, fulcio,...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, kube-logging-logging-operator, flannel-cni-plugin, cass-operator-fips, grpcurl, influx, vertical-pod-autoscaler, go-md2man, kind, cni-plugins-fips, kubernetes-csi-livenessprobe-fips, prometheus-bind-exporter, kubeflow-katib,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-exporter, aws-privateca-issuer, cert-manager-cmctl...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: argo-cd, goreleaser, atlantis, argo-events, bento, argo-rollouts, kubernetes-event-exporter, kyverno-policy-reporter, kubewatch...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, croc, nova, manifest-tool, haproxy-ingress, policy-controller, gogatekeeper, envconsul, steampipe, newrelic-nri-kube-events, terraform-provider-azurerm, flux, falco-no-driver, govulncheck, nri-couchbase, flux-kustomize-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: yace, local-static-provisioner, croc, crossplane-provider-sql, kubernetes-dashboard-metrics-scraper, nri-redis, secrets-store-csi-driver-provider-aws, manifest-tool, terraform-provider-pagerduty, gatekeeper, policy-controller, undock, gogatekeeper, steampipe, dex,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: mongo-tools, dive, nri-redis, nova, undock, envconsul, steampipe, dex, regclient, nats-server-config-reloader, wgcf, flux, neuvector-sigstore-interface, kor, spire-controller-manager, k3s, opa, step-kms-plugin, wal-g, nri-consul, helm-operator, helm-push,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, docker, terraform-provider-pagerduty, flux, spire-controller-manager, memcached-exporter, wal-g, cue, glab, addon-resizer, tw, kots, harbor-registry, kube-bench, pulumi, vertical-pod-autoscaler, crossplane-provider-azure-storage,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: ksops, crossplane-provider-azure-authorization, flux-source-controller, gh, guac, timestamp-authority, vexctl, rekor, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, src-fingerprint, actions-runner-controller, opentelemetry-collector-contrib...

CLEANSTART-2026-DF29491 Security fixes in falco-exporter 0.8.7-r2

Package falco-exporter version 0.8.7-r2 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-ZQ87746 Security fixes in logstash-exporter-fips 1.7.1-r1

Package logstash-exporter-fips version 1.7.1-r1 fixes 1 vulnerabilities: CVE-2025-61726...

CLEANSTART-2026-RI85888 Security fixes in logstash-exporter-fips 1.6.4-r1

Package logstash-exporter-fips version 1.6.4-r1 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-LZ94818 Security fixes in logstash-exporter-fips 1.9.1-r1

Package logstash-exporter-fips version 1.9.1-r1 fixes 1 vulnerabilities: CVE-2025-61726...

CLEANSTART-2026-AV59470 Security fixes in prometheus-node-exporter 1.12.1-r0

Package prometheus-node-exporter version 1.12.1-r0 fixes 1 vulnerabilities: CVE-2026-28735...

CLEANSTART-2026-ZS75989 Security fixes in logstash-exporter-fips 1.8.4-r1

Package logstash-exporter-fips version 1.8.4-r1 fixes 1 vulnerabilities: CVE-2025-68121...

CVE-2026-68266 drm/xe: Hold a dma-buf reference for imported BOs

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttmbotypesg BO whose reservation object is the exporter's dmabuf-resv. The importer, however, only takes a dma-buf reference after a...