GHSA-WF45-Q9CH-Q8GH vulnerabilities

Vulnerabilities for packages: agentbeat, amazon-cloudwatch-agent, falcosidekick, grafana-alloy-fips, grafana-alloy, splunk-otel-collector, seaweedfs-rocksdb, commercial-expanso-edge, jitsucom-bulker, nri-cassandra, bento, milvus, apm-server-fips, opentelemetry-collector-contrib-fips, grafana,...

CVE-2026-41602 vulnerabilities

Vulnerabilities for packages: agentbeat, amazon-cloudwatch-agent, falcosidekick, grafana-alloy-fips, grafana-alloy, splunk-otel-collector, seaweedfs-rocksdb, commercial-expanso-edge, jitsucom-bulker, nri-cassandra, bento, milvus, apm-server-fips, opentelemetry-collector-contrib-fips, grafana,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, cloudprober-fips, migrate, jitsucom-bulker, wal-g, timescaledb-parallel-copy, commercial-grafana, seaweedfs-fips, gitaly-fips, step-ca-fips, openbao-fips, harbor, caddy-fips, openfga-fips, openfga, goose-fips, step-ca, dapr, cloudnative-pg,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: chisel, falco-no-driver, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, octo-sts, whereabouts, terraform-provider-time, kserve-modelmesh-serving, pgpool2exporter, actions-runner-controller, eksctl, harbor-registry, tofu-controller, neuvector-sigstore-interface,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, protoc-gen-go-grpc, kserve-modelmesh-serving, actions-runner-controller, neuvector-sigstore-interface, descheduler, kubernetes-dashboard, langfuse, minio-operator, nri-rabbitmq, docker-credential-ecr-login, tekton-pipelines, knative-servin...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: chisel, falco-no-driver, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, octo-sts, whereabouts, kserve-modelmesh-serving, pgpool2exporter, actions-runner-controller, eksctl, harbor-registry, tofu-controller, neuvector-sigstore-interface, argo-cd, nats-top,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, protoc-gen-go-grpc, kserve-modelmesh-serving, actions-runner-controller, neuvector-sigstore-interface, descheduler, kubernetes-dashboard, langfuse, minio-operator, nri-rabbitmq, docker-credential-ecr-login, tekton-pipelines, knative-servin...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: chisel, falco-no-driver, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, octo-sts, whereabouts, kserve-modelmesh-serving, pgpool2exporter, actions-runner-controller, eksctl, harbor-registry, tofu-controller, neuvector-sigstore-interface, argo-cd, nats-top,...

CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

GHSA-32FW-GQ77-F2F2 vulnerabilities

Vulnerabilities for packages: bento, telegraf, dapr, minio, falcosidekick...

CVE-2025-10543 vulnerabilities

Vulnerabilities for packages: bento, telegraf, dapr, minio, falcosidekick...

GHSA-32FW-GQ77-F2F2 vulnerabilities

Vulnerabilities for packages: dapr-fips, agentbeat, elastic-agent-fips, falcosidekick, telegraf, zabbix-agent2-fips, falcosidekick-fips, beats, beats-fips, influxd, dapr, zabbix-agent2, minio-fips, agentbeat-fips, bento, elastic-agent, minio...

CVE-2025-10543 vulnerabilities

Vulnerabilities for packages: dapr-fips, agentbeat, elastic-agent-fips, falcosidekick, telegraf, zabbix-agent2-fips, falcosidekick-fips, beats, beats-fips, influxd, dapr, zabbix-agent2, minio-fips, agentbeat-fips, bento, elastic-agent, minio...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: tkn, octo-sts, actions-runner-controller, eksctl, harbor-registry, kaniko, weaviate, pulumi, falcoctl, minio-operator, chezmoi, crossplane-provider-azure, flux-source-controller, seaweedfs, terragrunt, argo-rollouts, step, hydra, opentelemetry-collector, coredns, gua...

CVE-2024-28110 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, falcosidekick, guac, keda-fips...

GHSA-5PF6-2QWX-PXM2 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, falcosidekick, guac, keda-fips...

GHSA-5PF6-2QWX-PXM2 vulnerabilities

Vulnerabilities for packages: guac, falcosidekick...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kine, kube-bench-fips, trillian, trillian-fips, kots, keda-fips, argo-workflows-fips, caddy-fips, argo-workflows, ferretdb, step, temporal-server-fips, k3s, step-ca, amass, src, wavefront-collector-for-kubernetes, spicedb, temporal-server, falcosidekick-fips,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kine, kube-bench-fips, trillian, trillian-fips, kots, keda-fips, argo-workflows-fips, caddy-fips, argo-workflows, ferretdb, step, temporal-server-fips, k3s, step-ca, amass, src, wavefront-collector-for-kubernetes, spicedb, temporal-server, falcosidekick-fips,...