GO-2026-4600 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, aws-load-balancer-controller-fips, flux-operator, flux-operator-fips, omnictl-multiarch, stakater-reloader, temporal-fips, flux-helm-controller, podinfo, flux-notification-controller, gotenberg, victoriametrics-cluster, nova-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux, kargo, goreleaser, kaniko, flux-image-automation-controller, nuclei, pulumi-language-yaml, kubescape, pulumi, src-fingerprint, gitea, kots, skaffold, kubevela, zot, chezmoi, crossplane, argocd-image-updater, timoni, pulumi-language-java, flux-source-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux, kargo, goreleaser, kaniko, flux-image-automation-controller, nuclei, pulumi-language-yaml, kubescape, pulumi, src-fingerprint, gitea, kots, skaffold, kubevela, zot, chezmoi, crossplane, argocd-image-updater, timoni, pulumi-language-java, flux-source-controller,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux, kargo, nfpm, teleport, kaniko, flux-image-automation-controller, witness, nuclei, pulumi-language-yaml, xeol, kubescape, pulumi, rancher-fleet, src-fingerprint, gitea, kots, steampipe, trufflehog, gitlab-runner, skaffold, trivy-operator, gomplate, argo-cd,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux, prometheus-operator, timestamp-authority, step-ca, sigstore-scaffolding, rclone, goreleaser, cosign, grafana-mimir, restic, grafana-agent-operator, flux-image-reflector-controller, nuclei, hugo-extended, py3-azure-identity, hugo, kubescape, pulumi, druid,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, knative-client, clickhouse-operator, kubernetes-dns-node-cache, wgcf, git-sync, cluster-api-azure-controller, crossplane-provider-aws-cloudfront, pdfcpu, tflint, nri-nginx, cilium, timoni, terraform-provider-time, vertical-pod-autoscaler,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: flux, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, nri-cassandra, helm-push, amass, nri-nagios, hey, kubernetes-csi-external-resizer, litefs, newrelic-prometheus-configurator, petname, kpt, kubernetes-dns-node-cache, kustomize, docker-credential-gcr,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: flux, kubescape-operator, kubernetes-csi-livenessprobe, continuity, fuse-overlayfs-snapshotter, sigstore-scaffolding, helm-push, kapp-controller, amazon-cloudwatch-agent-operator, kyverno, opa, litefs, tofu-controller, datadog-agent, tetragon, nri-haproxy, flannel,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux, crossplane-provider-aws-eks, kyverno, cosign, datadog-agent, cilium-cli, act, cluster-api-azure-controller, gitea, docker-cli-buildx, go-discover, crossplane-provider-aws-cloudfront, trivy-operator, tflint, argo-cd, crossplane-provider-aws-elasticache,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, pguser, amass, kapp-controller, amazon-cloudwatch-agent-operator, hey, cosign, git-lfs, clickhouse-operator, kubernetes-csi-external-resizer, blobfuse2, litefs, restic,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux, kargo, timestamp-authority, step-ca, sigstore-scaffolding, kubernetes-event-exporter, goreleaser, cosign, glab, flux-image-automation-controller, grafana-mimir, vexctl, flux-image-reflector-controller, nuclei, actions-runner-controller, aactl, kubescape, pulumi...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vitess, k9s, kubevela-fips, reports-server, chisel-fips, seaweedfs-rocksdb-fips, zitadel, rancher, prometheus-elasticsearch-exporter, prometheus-operator, kuma, external-secrets-operator, zarf, cloudbeat-fips, calico-fips, trivy, snyk-cli, prometheus-mongodb-exporter...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: vitess, crossplane-provider-aws-cloudwatch, juicefs, seaweedfs-rocksdb-fips, act, prometheus-elasticsearch-exporter, crossplane-provider-aws-s3control, crossplane-provider-aws-mediapackage-fips, trufflehog-fips, cluster-api-azure-controller-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux, cosign, age, datadog-agent, cilium-cli, act, cluster-api-azure-controller, gitea, docker-cli-buildx, go-discover, trivy-operator, tflint, argo-cd, cilium, crossplane-provider-family-azure, slsa-verifier, buildah, pulumi-language-java, buildkitd, atlantis,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: vitess, cluster-api-aws-controller, crossplane-provider-aws-cloudwatch, terraform-provider-google-fips, cert-manager-istio-csr-fips, juicefs, seaweedfs-rocksdb-fips, act, gitlab-operator, chronograf-fips, kserve-fips, crossplane-provider-aws-s3control,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: vitess, cluster-api-aws-controller, crossplane-provider-aws-cloudwatch, terraform-provider-google-fips, cert-manager-istio-csr-fips, juicefs, seaweedfs-rocksdb-fips, act, gitlab-operator, chronograf-fips, kserve-fips, crossplane-provider-aws-s3control,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy-fips, k9s, kubevela-fips, act, trufflehog-fips, external-secrets-operator, google-osconfig-agent, steampipe, zarf, xeol-fips, grype-fips, cloudbeat-fips, apko-fips, gitsign, pulumi-language-dotnet, snyk-cli, trivy, nemo, bom, zot, dagger, gomplate...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy-fips, k9s, kubevela-fips, act, trufflehog-fips, external-secrets-operator, google-osconfig-agent, steampipe, zarf, xeol-fips, grype-fips, cloudbeat-fips, apko-fips, gitsign, pulumi-language-dotnet, snyk-cli, trivy, nemo, bom, zot, dagger, gomplate...