CLEANSTART-2026-VN99750 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-VP35771 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-QV19791 Security fix for GHSA-gcjh-h69q-9w9g applied in: external-secrets-operator-fips 2.12.0-r1, flux-helm-controller 1.6.4-r1

GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AH23737 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: k8sgpt, cluster-api-helm-controller, gitness, maru, kyverno-notation-aws, kube-arangodb, manifest-tool, k9s, helm-set-status, kargo, helm-mapkubeapis, cert-manager-cmctl, flux-helm-controller, helm-push, rancher-helm, opentofu, xeol...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k8sgpt, cluster-api-helm-controller, gitness, maru, kyverno-notation-aws, kube-arangodb, manifest-tool, k9s, helm-set-status, kargo, helm-mapkubeapis, cert-manager-cmctl, flux-helm-controller, helm-push, rancher-helm, opentofu, xeol...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: k8sgpt, cluster-api-helm-controller, gitness, maru, kyverno-notation-aws, kube-arangodb, manifest-tool, k9s, helm-set-status, kargo, helm-mapkubeapis, cert-manager-cmctl, flux-helm-controller, helm-push, rancher-helm, opentofu, xeol...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: descheduler, cloud-provider-gcp-cloud-controller-manager, cluster-api-helm-controller, kubernetes-csi-external-attacher, kubernetes-csi-external-snapshotter, hubble, cluster-api-gcp-controller, keda, tkn, flux-helm-controller, gatekeeper, kubernetes,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, helm-operator-fips, envoy-gateway-fips, flux-helm-controller-fips, cerbos-fips, zot, zarf, helm-operator, kots, pluto, trivy-operator-fips, flux-source-controller-fips, cilium-cli, trivy-fips, tw, cert-manager-cmctl-fips, harbor, chartmuseum,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: eksctl, kubescape, trivy, k9s, flux-helm-controller, zot, zarf, flux-source-controller, helm-operator, up, chartmuseum, kots, kubevela, k8sgpt, cilium-cli, helm-push...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: eksctl, kubescape, trivy, k9s, flux-helm-controller, zot, zarf, flux-source-controller, helm-operator, up, chartmuseum, kots, kubevela, k8sgpt, cilium-cli, helm-push...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, temporal-fips, aws-ebs-csi-driver-fips, flux-image-automation-controller, grafana-fips, pluto, flux-source-watcher, victoriametrics-fips, gotenberg, terragrunt, polaris, stakater-reloader, victorialogs, loki-fips, metacontroller, victorialogs-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, temporal-fips, aws-ebs-csi-driver-fips, flux-image-automation-controller, grafana-fips, pluto, flux-source-watcher, victoriametrics-fips, gotenberg, terragrunt, polaris, stakater-reloader, victorialogs, loki-fips, metacontroller, victorialogs-fips,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: gitaly, spiffe-helper, cephcsi, envoy-gateway-fips, flux-image-automation-controller, peerdb-flow, aws-fsx-csi-driver-fips, karma, kubernetes, argo-cd, amazon-ecs-agent, helm-diff-fips, sftpgo-plugin-eventstore, falcoctl, commercial-expanso-edge, kube-oidc-proxy,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: minio-operator, spiffe-helper, flux-image-automation-controller, trust-manager, kubernetes, argo-cd, crossplane-provider-azure-sql, k6, sftpgo-plugin-eventstore, falcoctl, local-path-provisioner, kafkaexporter, packer, actions-runner-controller-fips,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubevela, trivy, helm-operator, eksctl, k9s, cilium-cli, flux-helm-controller, up, zot, chartmuseum, helm-push, kubescape, kots, flux-source-controller, zarf...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, flux-helm-controller, tw, chart-testing, zarf, helm-docs, pluto, helm-operator, eksctl, k9s, cilium-cli, rancher-helm, kots, flux-source-controller, trivy, k8ssandra-client, zot, cert-manager-cmctl, helm-push, kubescape, flux, chartmuseum...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubevela, trivy, helm-operator, eksctl, k9s, cilium-cli, flux-helm-controller, up, zot, chartmuseum, helm-push, kubescape, kots, flux-source-controller, zarf...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8sgpt, cluster-api-helm-controller, flux-helm-controller, rancher-fleet, cerbos, tw, kargo, chart-testing, zarf, envoy-gateway, linkerd2, helm-docs, pluto, helm-operator, eksctl, k9s, cilium-cli, istio, rancher-helm, kots, flux-source-controller, trivy,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: k8sgpt, osv-scanner, trivy-operator, cluster-api-helm-controller, opa, falco-no-driver, newrelic-infrastructure-agent, flux-helm-controller, rancher-fleet, kubescape-operator, wolfictl, syft, spegel, grype, kubevela, tw, kargo, zarf, envoy-gateway, nerdctl, skaffold,...