GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: coder-fips, goreleaser, argocd-image-updater-fips, kubevela-fips, guac, packer-fips, kubescape-server, kots, tfsec, grype-fips, pulumi-language-dotnet, cloudbeat, trivy-operator-fips, xeol-fips, gitea, cerbos, dagger, argo-workflows, crossplane-fips, rancher-fleet,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: coder-fips, goreleaser, argocd-image-updater-fips, kubevela-fips, guac, packer-fips, kubescape-server, kots, tfsec, grype-fips, pulumi-language-dotnet, cloudbeat, trivy-operator-fips, xeol-fips, gitea, cerbos, dagger, argo-workflows, crossplane-fips, rancher-fleet,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: coder-fips, goreleaser, argocd-image-updater-fips, kubevela-fips, guac, packer-fips, kubescape-server, kots, tfsec, grype-fips, pulumi-language-dotnet, cloudbeat, trivy-operator-fips, xeol-fips, gitea, cerbos, dagger, argo-workflows, crossplane-fips, rancher-fleet,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: coder-fips, goreleaser, argocd-image-updater-fips, kubevela-fips, guac, packer-fips, kubescape-server, kots, tfsec, grype-fips, pulumi-language-dotnet, cloudbeat, trivy-operator-fips, xeol-fips, gitea, cerbos, dagger, argo-workflows, crossplane-fips, rancher-fleet,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: zot, flux-image-automation-controller, pulumi, argocd-image-updater, pulumi-language-dotnet, pulumi-language-yaml, gitaly, k9s, argo-events, kaniko, witness, kots, gomplate, scorecard, flux-notification-controller, crossplane, bom, trivy-operator, gitsign,...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: zot, flux-image-automation-controller, pulumi, argocd-image-updater, pulumi-language-dotnet, pulumi-language-yaml, gitaly, k9s, argo-events, kaniko, witness, kots, gomplate, scorecard, flux-notification-controller, crossplane, bom, trivy-operator, gitsign,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: zot, flux-image-automation-controller, pulumi, argocd-image-updater, pulumi-language-dotnet, pulumi-language-yaml, gitaly, k9s, argo-events, kaniko, witness, kots, gomplate, scorecard, flux-notification-controller, crossplane, bom, trivy-operator, gitsign,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: zot, flux-image-automation-controller, pulumi, argocd-image-updater, pulumi-language-dotnet, pulumi-language-yaml, gitaly, k9s, argo-events, kaniko, witness, kots, gomplate, scorecard, flux-notification-controller, crossplane, bom, trivy-operator, gitsign,...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: aactl, prometheus, omnictl-multiarch, k3d, kots, spire-server, nerdctl, kine, elastic-agent-fips, snyk-cli, zitadel, k3s, terraform, minio, cilium, kyverno, telegraf, containerd, omnictl-multiarch-fips, flux, reports-server, prometheus-mongodb-exporter, kaf,...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854. Spring Framework is used as part of our microservices. These vulnerabilities have been addressed. Please read the detai...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, cloud-provider-vsphere, azure-service-operator, jobset, tekton-pipelines-fips, argocd-image-updater-fips, kapp-controller-fips, image-factory, omnictl-multiarch, cloud-provider-azure-fips, kubernetes-csi-external-snapshotter-fips, kubescape-server,...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: kubernetes, kubo, hubble, loki, cert-manager, kube-fluentd-operator, minio, cilium, helm, external-dns, kubernetes-dashboard, runc, kine, telegraf, flux, kaf, opentelemetry-collector, kyverno, k3s, aactl, snyk-cli, containerd, fuse-overlayfs-snapshotter...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: kubernetes, kubo, hubble, loki, cert-manager, kube-fluentd-operator, minio, cilium, helm, external-dns, kubernetes-dashboard, runc, kine, telegraf, flux, kaf, opentelemetry-collector, kyverno, k3s, aactl, snyk-cli, containerd, fuse-overlayfs-snapshotter...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: coder-fips, aactl, hubble, prometheus, helm, kubernetes-dashboard, kine, opentelemetry-collector, commercial-grafana, runc, cilium-envoy-fips, fuse-overlayfs-snapshotter, kubernetes, coder, snyk-cli, k3s, azure-aad-pod-identity-mic, kube-fluentd-operator, minio,...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: coder-fips, aactl, hubble, prometheus, helm, kubernetes-dashboard, kine, opentelemetry-collector, commercial-grafana, runc, cilium-envoy-fips, fuse-overlayfs-snapshotter, kubernetes, coder, snyk-cli, k3s, azure-aad-pod-identity-mic, kube-fluentd-operator, minio,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, flux-source-watcher-fips, tekton-pipelines-fips, zarf, atlantis-fips, azurefile-csi-fips, prometheus, helm, consul-fips, docker, cloud-provider-azure-fips, commercial-chainloop-backend, nerdctl-fips, src, k8s-device-plugin, etcd, kots,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kubernetes, melange, libnvidia-container, pulumi, pulumi-language-yaml, pulumi-language-dotnet, prometheus, traefik, dask-gateway, mattermost, nerdctl, kots, hubble, kubeflow-katib, loki, kube-fluentd-operator, buildkitd, prometheus-operator, caddy, src, vexctl, apko...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape, falcoctl, ratify, zarf, undock, skopeo, aactl, gitsign, podman, slsa-verifier, witness, kots, kyverno, buildah, flux-source-controller, tekton-chains...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape, falcoctl, ratify, zarf, undock, skopeo, aactl, gitsign, podman, slsa-verifier, witness, kots, kyverno, buildah, flux-source-controller, tekton-chains...