GO-2026-4600 vulnerabilities

Vulnerabilities for packages: nova, cluster-autoscaler-fips, omnictl-multiarch, pgwatch, aws-ebs-csi-driver-fips, pluto, grafana-fips, victoriametrics, temporal-fips, aws-ebs-csi-driver, terragrunt, flux-source-watcher, flux-notification-controller, flux-fips, gotenberg, go, victorialogs-fips,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, syft, argo-events, pulumi, goreleaser, wolfictl, flux-source-controller, zot, scorecard, apko, kaniko, zarf, melange, osv-scanner, flux, pulumi-language-java, pulumi-kubernetes-operator, flux-image-automation-controller, k8sgpt, kargo, bom,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, syft, argo-events, pulumi, goreleaser, wolfictl, flux-source-controller, zot, scorecard, apko, kaniko, zarf, melange, osv-scanner, flux, pulumi-language-java, pulumi-kubernetes-operator, flux-image-automation-controller, k8sgpt, kargo, bom,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, syft, argo-events, pulumi, argo-cd, wolfictl, flux-source-controller, zot, scorecard, rancher-fleet, trufflehog, apko, kaniko, zarf, melange, gitlab-runner, flux, osv-scanner, pulumi-language-java, nfpm, flux-image-automation-controller,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, splunk-otel-collector, flux-source-controller, docker-machine-driver-linode, containerd, openbao, crossplane-provider-aws-cloudformation, opentelemetry-collector, crossplane-provider-aws-cloudfront, chisel, sealed-secrets,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ytt, hydra, kubeflow-katib, http-echo, kubernetes-replicator, pvc-autoresizer, docker-machine-driver-linode, ip-masq-agent, crossplane-provider-aws-cloudformation, crossplane-provider-aws-cloudfront, headlamp, container-object-storage-interface, hubble,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: aactl, kubernetes-event-exporter, argo-events, pulumi, goreleaser, zot, flux-source-controller, crossplane-provider-azure-sql, rook, scorecard, policy-controller, opentelemetry-collector, timestamp-authority, grafana-mimir, flux-notification-controller, zarf,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: skaffold, mattermost, fscrypt, frankenphp-8.2, kubevela-fips, grafana-fips, vault, external-secrets-operator, kubernetes-dashboard, frankenphp-8.5, trivy-operator, grafana, cloud-provider-aws, trivy, kine, etcd, mattermost-fips, gatekeeper, helm, cilium, cert-manager...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicelinker, apko, crossplane-provider-aws-ram, kubevela-fips, crossplane-provider-aws-secretsmanager-fips, gitlab-runner, vault, crossplane-provider-aws-elasticsearch, crossplane-provider-azure-security, crossplane-provider-family-aws,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, splunk-otel-collector, flux-source-controller, containerd, openbao, opentelemetry-collector, chisel, flux-image-automation-controller, prometheus-operator, telegraf, nerdctl, pulumi-language-yaml, rancher-agent, buildkitd, skaffold,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator, crossplane-provider-azure-servicelinker, aws-ebs-csi-driver-fips, crossplane-provider-kubernetes, kubevela-fips, kubernetes-csi-external-health-monitor, consul-k8s-fips, crossplane-provider-aws-secretsmanager-fips, azuredisk-csi-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator, crossplane-provider-azure-servicelinker, aws-ebs-csi-driver-fips, crossplane-provider-kubernetes, kubevela-fips, kubernetes-csi-external-health-monitor, consul-k8s-fips, crossplane-provider-aws-secretsmanager-fips, azuredisk-csi-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: skaffold, grafana-alloy-fips, apko, kubevela-fips, grafana-fips, gitlab-runner, external-secrets-operator, chainctl-fips, trufflehog-fips, mapotf, grype-db, trivy-operator, crossplane-fips, pulumi-language-dotnet, grafana, trivy, amazon-ssm-agent, cerbos-fips, witnes...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: skaffold, grafana-alloy-fips, apko, kubevela-fips, grafana-fips, gitlab-runner, external-secrets-operator, chainctl-fips, trufflehog-fips, mapotf, commercial-chainloop-cli, grype-db, trivy-operator, crossplane-fips, pulumi-language-dotnet, grafana, trivy,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: tailscale, goreleaser, flux-source-controller, victoriametrics-cluster, nodetaint, mountpoint-s3-csi-driver, flux-notification-controller, hubble, go, osv-scanner, flux, flux-image-automation-controller, aws-network-policy-agent, victoriametrics, aws-privateca-issuer...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: ytt, tailscale, kubeflow-katib, http-echo, flux-source-controller, k8sgpt-operator, mockery, container-object-storage-interface, kubernetes-csi-driver-hostpath, nri-apache, aws-network-policy-agent, dataplaneapi, spegel, cis-operator, temporal, aws-nuke,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: qemu-guesthelper, mattermost, helm-operator, kubeflow-katib, coredns-fips, kubevela-fips, grafana-fips, terraform-provider-kubernetes-fips, consul-k8s-fips, vault, external-secrets-operator, timoni, trufflehog-fips, terraform-provider-pagerduty-fips,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: ytt, tailscale, kubeflow-katib, http-echo, flux-source-controller, kubernetes-csi-driver-hostpath, cert-manager-istio-csr, nri-apache, aws-network-policy-agent, dataplaneapi, temporal-server, spegel, temporal, gptscript, flux-helm-controller, buildah, spire-server,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: ytt, tailscale, kubeflow-katib, http-echo, flux-source-controller, kubernetes-csi-driver-hostpath, cert-manager-istio-csr, nri-apache, aws-network-policy-agent, dataplaneapi, temporal-server, spegel, temporal, gptscript, flux-helm-controller, buildah, spire-server,...