CVE-2026-41602 vulnerabilities

Vulnerabilities for packages: commercial-grafana, elastic-agent-fips, nri-jmx-fips, nri-cassandra-fips, bento-fips, plutono, grafana, commercial-expanso-edge, minio, grafana-alloy, agentbeat, aws-otel-collector-fips, amazon-cloudwatch-agent, temporal, minio-fips, beats, beats-fips,...

GHSA-WF45-Q9CH-Q8GH vulnerabilities

Vulnerabilities for packages: commercial-grafana, elastic-agent-fips, nri-jmx-fips, nri-cassandra-fips, bento-fips, plutono, grafana, commercial-expanso-edge, minio, grafana-alloy, agentbeat, aws-otel-collector-fips, amazon-cloudwatch-agent, temporal, minio-fips, beats, beats-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: kine, grafana-alloy, spqr, kubeflow-pipelines, src, certificate-transparency-fips, falcosidekick-fips, keda-fips, opentelemetry-collector-contrib, vault, kube-bench, cerbos, opentelemetry-collector-contrib-fips, cloudprober, dapr, dapr-fips, hydra, kuma,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, ingress-nginx-controller, local-static-provisioner, grafana-rollout-operator, spqr, openbao-k8s, pguser, azure-workload-identity-webhook, kubeflow, newrelic-fluent-bit-output, rancher-system-agent,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, jaeger, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, eksctl, helm-set-status, litefs, terraform-provider-pagerduty, lazygit, opensearch-k8s-operator, ip-masq-agent,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, ingress-nginx-controller, local-static-provisioner, grafana-rollout-operator, spqr, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, newrelic-fluent-bit-output, rancher-system-agent,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, jaeger, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, eksctl, helm-set-status, litefs, terraform-provider-pagerduty, lazygit, opensearch-k8s-operator, ip-masq-agent,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, mongodb-kubernetes-operator, ingress-nginx-controller, local-static-provisioner, grafana-rollout-operator, spqr, openbao-k8s, pguser, azure-workload-identity-webhook, kubeflow, newrelic-fluent-bit-output, rancher-system-agent,...

CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

GHSA-32FW-GQ77-F2F2 vulnerabilities

Vulnerabilities for packages: falcosidekick, minio, bento...

CVE-2025-10543 vulnerabilities

Vulnerabilities for packages: falcosidekick, minio, bento...

GHSA-32FW-GQ77-F2F2 vulnerabilities

Vulnerabilities for packages: beats-fips, elastic-agent-fips, falcosidekick-fips, agentbeat-fips, zabbix-agent2, elastic-agent, dapr, dapr-fips, telegraf, bento, zabbix-agent2-fips, minio, falcosidekick, agentbeat, minio-fips, beats, influxd...

CVE-2025-10543 vulnerabilities

Vulnerabilities for packages: beats-fips, elastic-agent-fips, falcosidekick-fips, agentbeat-fips, zabbix-agent2, elastic-agent, dapr, dapr-fips, telegraf, bento, zabbix-agent2-fips, minio, falcosidekick, agentbeat, minio-fips, beats, influxd...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: gomplate, guac, wal-g, restic, openbao, docker, gitness, kine, flux, eksctl, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage, rclone, crossplane, sftpgo-plugin-pubsub, vexctl, crossplane-provider-family-azure, oauth2-proxy, boring-registr...

CVE-2024-28110 vulnerabilities

Vulnerabilities for packages: guac, falcosidekick-fips, falcosidekick...

GHSA-5PF6-2QWX-PXM2 vulnerabilities

Vulnerabilities for packages: guac, falcosidekick...

GHSA-5PF6-2QWX-PXM2 vulnerabilities

Vulnerabilities for packages: guac, falcosidekick-fips, falcosidekick...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: ferretdb, caddy-fips, kine, step-ca, step, src, falcosidekick-fips, trillian, spicedb, amass, kube-bench, k3s, argo-workflows-fips, kots, caddy, temporal-server, kube-bench-fips, argo-workflows, temporal-server-fips, wavefront-collector-for-kubernetes, trillian-fips...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: ferretdb, caddy-fips, kine, step-ca, step, src, falcosidekick-fips, trillian, spicedb, amass, kube-bench, k3s, argo-workflows-fips, kots, caddy, temporal-server, kube-bench-fips, argo-workflows, temporal-server-fips, wavefront-collector-for-kubernetes, trillian-fips...