GO-2026-4600 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, loki-fips, victoriametrics-fips, terragrunt, victoriametrics-cluster-fips, amazon-k8s-cni-fips, localstack, flux-image-reflector-controller, nova-fips, go, flux-helm-controller, flux-source-watcher, grafana-rollout-operator, cert-manager-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: crossplane, flux-image-automation-controller, guac, dagger, go-licenses, chezmoi, flux-source-controller, pulumi-language-dotnet, kots, timoni, src-fingerprint, k9s, kubevela, snyk-cli, trivy, zarf, kargo, wolfictl, argocd-image-updater, tfsec, k8sgpt, task,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: crossplane, flux-image-automation-controller, guac, dagger, go-licenses, chezmoi, flux-source-controller, pulumi-language-dotnet, kots, timoni, src-fingerprint, k9s, kubevela, snyk-cli, trivy, zarf, kargo, wolfictl, argocd-image-updater, tfsec, k8sgpt, task,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, gitlab-runner, crossplane, flux-image-automation-controller, guac, chezmoi, nfpm, flux-source-controller, pulumi-language-dotnet, kots, src-fingerprint, k9s, kubevela, snyk-cli, trivy, zarf, kargo, xeol, wolfictl, argocd-image-updater, tfse...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: tkn, guac, sqlpad, up, timestamp-authority, py3-azure-identity, chezmoi, cortex, harbor-registry, step-ca, flyte, flux-source-controller, airflow, step, trino, hugo, rclone, bank-vaults, prometheus-operator, boring-registry, sops, spire-server, velero, buildkitd,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: capslock, flux-image-automation-controller, docker-cli, ferretdb, esbuild, go-licenses, aws-load-balancer-controller, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, shfmt, nri-redis, nri-mysql, velero, buildkitd, newrelic-infrastructure-agent, gh,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: prometheus, azure-ipam, gogatekeeper, step-ca, nats-top, spqr, crossplane-provider-aws-ec2, nri-redis, bank-vaults, newrelic-k8s-metadata-injection, nginx-prometheus-exporter, kyverno-policy-reporter, kyverno, terraform-provider-tls, gitlab-kas, php-fpmexporter,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus, guac, vcluster, apache-exporter, authservice, gogatekeeper, step-ca, kubescape-operator, hubble, neuvector-dbgen, fuse-overlayfs-snapshotter, conjur-cli, spqr, neuvector-scanner, crossplane-provider-aws-ec2, rancher, bank-vaults...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus, flux-image-automation-controller, guac, cilium-cli, flux-source-controller, nfpm, pulumi-language-dotnet, crossplane-provider-aws-ec2, rancher, go-discover, cert-manager, buildkitd, docker-machine-driver-linode,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: x509-certificate-exporter, flux-image-automation-controller, guac, ferretdb, apache-exporter, yace, esbuild, authservice, go-licenses, gogatekeeper, pgtimetable, spegel, kubescape-operator, cilium-cli, hubble, maru, cluster-api-gcp-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: tkn, flux-image-automation-controller, guac, timestamp-authority, crossplane-provider-family-azure, step-ca, flux-source-controller, crossplane-provider-azure, crossplane-provider-azure-authorization, neuvector-sigstore-interface, slsa-verifier,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: etcd, prometheus-operator, kots, commercial-expanso-edge, zarf-fips, frankenphp-8.2, containerd, frankenphp-8.3, kubevela-fips, k9s, rancher-agent, knative-kafka-broker-fips, telegraf, kubernetes-dashboard, aactl, flux-fips, skaffold, harbor-fips, knative-serving-fip...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-aws-provider-fips, podman, packer, crossplane-provider-aws-kinesis-fips, prometheus-podman-exporter-fips, commercial-expanso-edge, frankenphp-8.2, containerd, kubevela-fips, step-issuer, crossplane-provider-aws-datasync, crossplane-provider-aws-sesv2-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: external-secrets-operator, prometheus, flux-image-automation-controller, guac, cilium-cli, flux-source-controller, nfpm, pulumi-language-dotnet, rancher, go-discover, cert-manager, buildkitd, flux-notification-controller, gh, wolfictl, trivy-operator, k8sgpt,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: terraform-provider-databricks-fips, podman, packer, amazon-eks-ami, crossplane-provider-aws-kinesis-fips, cloud-provider-gcp-cloud-controller-manager-fips, prometheus-podman-exporter-fips, promxy-fips, ld-relay-fips, weaviate, commercial-expanso-edge, containerd,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: terraform-provider-databricks-fips, podman, packer, amazon-eks-ami, crossplane-provider-aws-kinesis-fips, cloud-provider-gcp-cloud-controller-manager-fips, prometheus-podman-exporter-fips, promxy-fips, ld-relay-fips, weaviate, commercial-expanso-edge, containerd,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: packer, terragrunt, chainloop-cli-fips, argo-events, amazon-ssm-agent-fips, kots, zarf-fips, gitlab-runner, kubevela-fips, k9s, pulumi, kaniko, packer-fips, trufflehog-fips, flux-fips, skaffold, gptscript, google-osconfig-agent, src-fingerprint-fips, kaniko-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: packer, terragrunt, chainloop-cli-fips, argo-events, amazon-ssm-agent-fips, kots, zarf-fips, gitlab-runner, kubevela-fips, k9s, pulumi, kaniko, packer-fips, trufflehog-fips, flux-fips, skaffold, gptscript, google-osconfig-agent, src-fingerprint-fips, kaniko-fips,...