GO-2026-4600 vulnerabilities

Vulnerabilities for packages: localstack, flux-operator-fips, nova-fips, victorialogs, grafana-rollout-operator, temporal-fips, victoriametrics-cluster, cluster-autoscaler-fips, steampipe, nova, loki-fips, aws-load-balancer-controller-fips, go, stakater-reloader, polaris, victoriametrics,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: zarf, crossplane, flux, guac, pulumi, bom, chezmoi, goreleaser, pulumi-kubernetes-operator, kubevela, flux-source-controller, snyk-cli, wolfictl, melange, pulumi-language-java, kargo, syft, grafana-alloy, task, flux-image-automation-controller, kubescape, k8sgpt,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: zarf, crossplane, flux, guac, pulumi, bom, chezmoi, goreleaser, pulumi-kubernetes-operator, kubevela, flux-source-controller, snyk-cli, wolfictl, melange, pulumi-language-java, kargo, syft, grafana-alloy, task, flux-image-automation-controller, kubescape, k8sgpt,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: zarf, crossplane, flux, steampipe, guac, pulumi, bom, chezmoi, teleport, pulumi-kubernetes-operator, kubevela, flux-source-controller, snyk-cli, wolfictl, xeol, melange, pulumi-language-java, gitlab-runner, kargo, grafana-alloy, syft, nfpm,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: prometheus, kubernetes, step, docker-cli-buildx, crossplane-provider-keycloak, cloudflared, knative-serving, telegraf, cilium, chisel, gitlab-kas, flux-source-controller, pulumi-language-java, gitlab-runner, flux-image-automation-controller, traefik,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, step, ghaudit, blobfuse2, kubeflow-katib, chart-testing, local-static-provisioner, juicefs, k8sgateway, opencost, kube-bench, telegraf, bom, thanos-operator, chisel, kubernetes-csi-node-driver-registrar, kubeflow-pipelines,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, aactl, zarf, tkn, rekor, flux, terragrunt, guac, pulumi, vexctl, goreleaser, pulumi-kubernetes-operator, snyk-cli, flux-source-controller, neuvector-sigstore-interface, spire-server, buildkitd, sigstore-scaffolding, kargo, grafana-mimir, falcoctl,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, cloudbeat-fips, knative-kafka-broker, frankenphp-8.4, omnictl-multiarch-fips, frankenphp-8.2, kine, zot, k9s, argo-workflows-fips, harbor, snyk-cli, kubescape, minio, etcd, argo-workflows, vault-fips, kyverno, drone, drone-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: frankenphp-8.4, crossplane-provider-aws-redshiftserverless, crossplane-provider-aws-kendra, kine, crossplane-provider-aws-route53resolver, crossplane-provider-aws-route53, harbor, snyk-cli, crossplane-provider-aws-acm, crossplane-provider-aws-s3control-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: prometheus, kubernetes, step, docker-cli-buildx, knative-serving, telegraf, cilium, chisel, gitlab-kas, flux-source-controller, pulumi-language-java, gitlab-runner, flux-image-automation-controller, crossplane-provider-azure-sql, argocd-image-updater,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, crossplane-provider-aws-redshiftserverless, authentik, kine, cert-manager-openshift-routes, crossplane-provider-aws-route53resolver, crossplane-provider-aws-route53, grafana-pyroscope-fips, harbor, snyk-cli, kubescape-operator-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, crossplane-provider-aws-redshiftserverless, authentik, kine, cert-manager-openshift-routes, crossplane-provider-aws-route53resolver, crossplane-provider-aws-route53, grafana-pyroscope-fips, harbor, snyk-cli, kubescape-operator-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, zot, k9s, argo-workflows-fips, snyk-cli, kubescape, argo-workflows, kaniko, kyverno, gptscript, apko, grafana-alloy-fips, terragrunt, syft-fips, jfrog-cli, gitaly, trivy-operator, grype, grafana-alloy, kubevela-fips, cg, kaniko-fips, mapotf, gorelease...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, zot, k9s, argo-workflows-fips, snyk-cli, kubescape, argo-workflows, kaniko, kyverno, gptscript, apko, grafana-alloy-fips, terragrunt, syft-fips, jfrog-cli, gitaly, trivy-operator, grype, grafana-alloy, kubevela-fips, cg, kaniko-fips, mapotf, gorelease...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, volume-modifier-for-k8s, grafana-rollout-operator, fluxcd-kustomize-mutating-webhook, karpenter, newrelic-k8s-metadata-injection, nova, newrelic-infra-operator, envoy-ratelimit, flux, victoriametrics-cluster, dgraph, goreleaser,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus, nri-prometheus, nova, crossplane-provider-keycloak, local-static-provisioner, harbor, dfc, knative-operator, chisel, flux-source-controller, kubernetes-csi-node-driver-registrar, tetragon, argocd-image-updater, doppler-kubernetes-operator, oauth2-proxy,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: apm-server-fips, kubo-fips, cloudbeat-fips, gpu-operator-fips, cert-manager-cmctl-fips, dask-gateway, aws-flb-kinesis, kine, agentbeat, kubernetes-dashboard-api-fips, rke2-runtime, croc, minio, etcd, ingress-nginx-controller, nvidia-nsight-compute-13.2, conftest,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-keycloak, local-static-provisioner, flux-source-controller, kubernetes-dns-node-cache, doppler-kubernetes-operator, oauth2-proxy, go-bindata, nri-kafka, kubernetes-dashboard, influx, crossplane-provider-azure-managedidentity, frp, gh,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: prometheus, crossplane-provider-keycloak, local-static-provisioner, flux-source-controller, kubernetes-dns-node-cache, doppler-kubernetes-operator, oauth2-proxy, go-bindata, nri-kafka, kubernetes-dashboard, influx, crossplane-provider-azure-managedidentity, frp, gh,...