GO-2026-4600 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni-fips, flux-helm-controller, metacontroller, flux-source-watcher, grafana-operator, flux-notification-controller, victorialogs, grafana-rollout-operator, podinfo, aws-ebs-csi-driver-fips, stakater-reloader, victoriametrics, nova, victoriametrics-cluster...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, k8sgpt, kubescape, k9s, goreleaser, wolfictl, scorecard, nuclei, guac, pulumi-language-yaml, melange, pulumi-language-java, zot, trivy, argo-events, gitsign, syft, chezmoi, dagger, grype, pulumi-kubernetes-operator, src-fingerprint,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, k8sgpt, kubescape, k9s, goreleaser, wolfictl, scorecard, nuclei, guac, pulumi-language-yaml, melange, pulumi-language-java, zot, trivy, argo-events, gitsign, syft, chezmoi, dagger, grype, pulumi-kubernetes-operator, src-fingerprint,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, gomplate, trivy-operator, rancher-fleet, teleport, kubescape, k9s, wolfictl, scorecard, trufflehog, nuclei, guac, pulumi-language-yaml, cerbos, melange, pulumi-language-java, zot, trivy, argo-events, gitsign, syft, chezmoi, argo-cd, dagger,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: osv-scanner, kubernetes-dashboard, crossplane-provider-aws-memorydb, kubescape, crossplane-provider-aws-sqs, gatus, containerd, buildah, aactl, melange, pulumi-language-java, ksops, kubernetes, zot, act, flux-notification-controller, syft, buildkitd, hcloud, chezmoi,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: govulncheck, osv-scanner, grafana-rollout-operator, kubernetes-dashboard, cri-tools, vault-secrets-webhook, gatekeeper, pgtimetable, aws-sigv4-proxy, azcopy, ctop, opensearch-k8s-operator, vault-k8s, amazon-cloudwatch-agent-operator, clickhouse-operator, ghaudit,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, step-ca, gomplate, flux-image-reflector-controller, slsa-verifier, rabbitmq-messaging-topology-operator, crossplane-provider-azure-authorization, kubescape, tekton-chains, goreleaser, crossplane-provider-azure-sql, kubernetes-event-exporter,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nerdctl, gitlab-kas, commercial-grafana, gitea-fips, gitlab-rails-ce-fips, opentelemetry-collector, seaweedfs-rocksdb-fips, tekton-pipelines, terraform, trivy, cloudbeat, zot, etcd, snyk-cli, argocd-image-updater, vitess, harbor-fips, frankenphp-8.3,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: nerdctl, seaweedfs-rocksdb-fips, crossplane-provider-aws-sqs-fips, crossplane-provider-aws-s3control-fips, neuvector-sigstore-interface, vitess, crossplane-aws-provider, steampipe, harbor-fips, caddy-fips, crossplane-provider-azure-policyinsights, mapotf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: osv-scanner, kubernetes-dashboard, kubescape, gatus, containerd, buildah, aactl, melange, pulumi-language-java, ksops, kubernetes, zot, act, flux-notification-controller, syft, buildkitd, hcloud, chezmoi, grype, glab, external-dns, knative-serving, go-discover, nfpm,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, pinniped-fips, ratify, seaweedfs-rocksdb-fips, crossplane-provider-aws-sqs-fips, tetragon, k8ssandra-client-fips, crossplane-provider-aws-s3control-fips, neuvector-sigstore-interface, newrelic-k8s-metrics-adapter, secrets-store-csi-driver-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, pinniped-fips, ratify, seaweedfs-rocksdb-fips, crossplane-provider-aws-sqs-fips, tetragon, k8ssandra-client-fips, crossplane-provider-aws-s3control-fips, neuvector-sigstore-interface, newrelic-k8s-metrics-adapter, secrets-store-csi-driver-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventsearch, osv-scanner, grafana-rollout-operator, spire-server, temporal, flux-image-reflector-controller, ingress-nginx-controller, aws-privateca-issuer, newrelic-infra-operator, karpenter, rabbitmq-messaging-topology-operator, envoy-ratelimit, oras,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, terraform-provider-aws, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, kubernetes, zot, litefs, opa-envoy, syft, tetragon, newrelic-fluent-bit-output,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: nerdctl, gitlab-rails-ce-fips, cert-manager-cmctl-fips, chaos-mesh-fips, terraform, spicedb-operator-fips, vale, cloudbeat, etcd, beats, terraform-provider-pagerduty-fips, vitess, gitlab-runner-fips, steampipe, croc, prometheus-mongodb-exporter,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: govulncheck, yunikorn-web, ctop, amazon-cloudwatch-agent-operator, mkcert, nri-mssql, ksops, kubernetes, zot, litefs, syft, newrelic-fluent-bit-output, kubernetes-csi-external-attacher, prometheus-adapter, grype, trust-manager, wireguard-go, thanos-operator, capslock...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: govulncheck, yunikorn-web, ctop, amazon-cloudwatch-agent-operator, mkcert, nri-mssql, ksops, kubernetes, zot, litefs, syft, newrelic-fluent-bit-output, kubernetes-csi-external-attacher, prometheus-adapter, grype, trust-manager, wireguard-go, thanos-operator, capslock...