GO-2026-4600 vulnerabilities

Vulnerabilities for packages: dkron, gotenberg, omnictl-multiarch, stakater-reloader, flux-operator, cluster-autoscaler-fips, flux-notification-controller, podinfo, steampipe, grafana-operator, loki-fips, metacontroller, polaris, victorialogs-fips, aws-ebs-csi-driver, localstack,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: wolfictl, timoni, crossplane, guac, pulumi, snyk-cli, k9s, gitsign, pulumi-language-yaml, grype, argo-events, scorecard, flux-kustomize-controller, kots, bom, nuclei, grafana-alloy, src-fingerprint, trivy, k8sgpt, dagger, melange, kaniko, kubescape, flux, zarf, syft,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: wolfictl, timoni, crossplane, guac, pulumi, snyk-cli, k9s, gitsign, pulumi-language-yaml, grype, argo-events, scorecard, flux-kustomize-controller, kots, bom, nuclei, grafana-alloy, src-fingerprint, trivy, k8sgpt, dagger, melange, kaniko, kubescape, flux, zarf, syft,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: nfpm, trivy-operator, wolfictl, crossplane, guac, pulumi, snyk-cli, witness, argo-cd, external-secrets-operator, k9s, gitsign, pulumi-language-yaml, argo-events, grype, xeol, scorecard, kyverno, trufflehog, cerbos, gitaly, kots, bom, nuclei, grafana-alloy,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fulcio, tkn, rekor, restic, opentelemetry-collector-contrib, terragrunt, guac, cosign, pulumi, up, spire-server, bank-vaults, py3-cassandra-medusa, timestamp-authority, py3-azure-identity, argo-events, rclone, grafana-mimir, flyte, flux-image-reflector-controller,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: hello-world-golang, nri-kafka, dex, fq, timoni, local-path-provisioner, kuberay-operator, go-md2man, dockerize, nri-nginx, pulumi, yam, kaf, govulncheck, nodetaint, prometheus-adapter, nri-nagios, volume-modifier-for-k8s, kor, kubernetes-event-exporter, wire-go,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, nvidia-container-toolkit, local-path-provisioner, nri-nginx, pulumi, stern, nri-consul, conftest, pluto, nri-rabbitmq, ytt, mkcert, cilium-envoy, octo-sts, aws-load-balancer-controller, dask-gateway, sonobuoy, go, gitea, step-ca,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, sftpgo-plugin-eventstore, rekor, timoni, envoy-gateway, crossplane, local-path-provisioner, kuberay-operator, crossplane-provider-aws-sqs, croc, terraform-provider-acme, external-secrets-operator, libnvidia-container, nri-consul, conftest...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tkn, crossplane-provider-aws-rds, docker, gitlab-kas, pulumi, crossplane-provider-aws-sqs, terraform-provider-acme, external-secrets-operator, kaf, crossplane-provider-aws-eks, gitlab-pages, cilium, telegraf, crossplane-provider-aws-s3, podman, aactl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, kubernetes-csi-driver-nfs, dex, timoni, ipfs-cluster, gatekeeper, local-path-provisioner, kuberay-operator, nri-nginx, dockerize, clickhouse-operator, croc, minio-operator, rabbitmq-default-user-credential-updater, cert-manager-istio-csr,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: fulcio, tkn, rekor, opentelemetry-collector-contrib, terragrunt, guac, cosign, pulumi, snyk-cli, spire-server, k3d, crossplane-provider-family-azure, bank-vaults, timestamp-authority, gitsign, k3s, argo-events, grafana-mimir, rabbitmq-messaging-topology-operator,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: istio, grafana, frankenphp-8.2, gitlab-rails-ce, gitlab-workhorse-ce, prometheus-mongodb-exporter, kubernetes-dashboard, zot, argo-workflows, terraform, kyverno-fips, minio, kubescape-server, trivy-operator-fips, harbor-fips, kots, trivy-operator, zarf-fips, vault,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane-provider-aws-elasticache, crossplane-provider-aws-networkmanager, splunk-otel-collector, redpanda-console, crossplane-provider-aws-athena-fips, flux-kustomize-controller, prometheus-podman-exporter-fips, crossplane-provider-azure-web,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tkn, docker, gitlab-kas, pulumi, external-secrets-operator, kaf, cilium, telegraf, podman, aactl, melange, chisel, kubescape, flux, gatus, gitea, opentelemetry-collector, gptscript, pulumi-kubernetes-operator, kargo, osv-scanner,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane-provider-aws-elasticache, kaniko, chaos-mesh, metrics-server, rancher-system-agent, xeol-fips, flux-kustomize-controller, prometheus-podman-exporter-fips, crossplane-provider-aws-imagebuilder, thanos-receive-controller, knative-operator,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane-provider-aws-elasticache, kaniko, chaos-mesh, metrics-server, rancher-system-agent, xeol-fips, flux-kustomize-controller, prometheus-podman-exporter-fips, crossplane-provider-aws-imagebuilder, thanos-receive-controller, knative-operator,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: crossplane-fips, kaniko, grafana, terragrunt-fips, redpanda-console, xeol-fips, gitlab-rails-ce, gomplate, zot, argo-workflows, kyverno-fips, grype, terragrunt, kubescape-server, trivy-operator-fips, tfsec, gitlab-runner-fips, pulumi-language-yaml, bom, melange, kots...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: crossplane-fips, kaniko, grafana, terragrunt-fips, redpanda-console, xeol-fips, gitlab-rails-ce, gomplate, zot, argo-workflows, kyverno-fips, grype, terragrunt, kubescape-server, trivy-operator-fips, tfsec, gitlab-runner-fips, pulumi-language-yaml, bom, melange, kots...