GHSA-G3XR-5W5J-W4Q4 vulnerabilities

Vulnerabilities for packages: external-dns-fips, external-dns...

GHSA-X4MJ-7F9G-29H4 vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, external-dns-fips, external-dns, k8sgateway...

CVE-2026-41246 vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, external-dns-fips, external-dns, k8sgateway...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating-fips, crossplane-provider-aws-efs-fips, cert-manager, temporal-server, gomplate, k8s-metacollector-fips, docker-credential-ecr-login-fips, prometheus-mysqld-exporter, cluster-api-gcp-controller-fips, apache-exporter, bom,...

CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation

Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...

GHSA-2HMF-46V7-V6FX vulnerabilities

Vulnerabilities for packages: melange, external-dns, dagger, guac, external-dns-fips, zot...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: hugo-extended, cert-manager, temporal-server, gomplate, prometheus-mysqld-exporter, volume-modifier-for-k8s, sigstore-scaffolding, supercronic, crossplane-provider-aws-elasticache, kuberay-operator, trivy, aws-efs-csi-driver, kwok, melange, buildkitd,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, terraform-provider-sendgrid, falcoctl-fips, prometheus-blackbox-exporter, smarter-device-manager-fips, kubernetes-csi-livenessprobe, metrics-server-fips, conftest-fips, kiam, scorecard, src, kubeflow-fips, kubeflow, kube-oidc-proxy,...