GO-2026-4600 vulnerabilities

Vulnerabilities for packages: dkron, librechat, nova, metacontroller, flux-image-reflector-controller, steampipe, aws-ebs-csi-driver-fips, flux-fips, grafana-rollout-operator, omnictl-multiarch, temporal-fips, cert-manager-fips, nova-fips, flux-source-watcher, grafana-operator-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gptscript, crossplane, pulumi, apko, kaniko, kots, gitea, skaffold, pulumi-language-java, dagger, k8sgpt, pulumi-language-yaml, task, trivy, zarf, argo-events, scorecard, zot, timoni, goreleaser, tfsec, flux-image-automation-controller, go-licenses, grafana-alloy,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gptscript, crossplane, pulumi, apko, kaniko, kots, gitea, skaffold, pulumi-language-java, dagger, k8sgpt, pulumi-language-yaml, task, trivy, zarf, argo-events, scorecard, zot, timoni, goreleaser, tfsec, flux-image-automation-controller, go-licenses, grafana-alloy,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gptscript, crossplane, pulumi, xeol, apko, gitaly, gomplate, kaniko, kots, gitea, skaffold, pulumi-language-java, dagger, pulumi-language-yaml, trivy, zarf, witness, argo-events, nfpm, scorecard, zot, tfsec, flux-image-automation-controller, trivy-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, buildkitd, podman, falcoctl, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, spark-operator, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, gatekeeper, helm, metacontroller, aactl, esbuild, nri-nginx, sonobuo...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: terraform, buildkitd, pulumi, skopeo, falcoctl, cosign, gomplate, tkn, fulcio, aactl, zarf, actions-runner-controller, flux-notification-controller, opentelemetry-collector, kubernetes-event-exporter, crossplane-provider-azure, gh, scorecard, sigstore-scaffolding,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: snyk-cli, cloudbeat, commercial-expanso-edge, kube-arangodb-fips, etcd-fips, knative-eventing-fips, omnictl-multiarch, minio-fips, tigera-operator, istio, rancher, kuma, flux-image-automation-controller-fips, helm, seaweedfs-rocksdb, skaffold-fips, chisel,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, chainctl, longhorn-cli-fips, crossplane-provider-aws-backup, snyk-cli, commercial-expanso-edge, docker-compose, terragrunt-fips, hcloud, crossplane-provider-azure-securityinsights,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: step, buildkitd, podman, falcoctl, helm, gitea, aactl, skaffold, prometheus, pulumi-language-java, k8sgpt, cilium-cli, zot, crossplane-provider-azure-sql, cluster-api-azure-controller, cloud-provider-aws, wolfictl, buildah, gitlab-runner, syft, pulumi-language-dotnet...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, chainctl, snyk-cli, beats-fips, crossplane-provider-aws-backup, commercial-expanso-edge, goreleaser, aws-iam-authenticator-fips, docker-compose, kserve-localmodelnode-agent-fips, ld-relay-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, chainctl, snyk-cli, beats-fips, crossplane-provider-aws-backup, commercial-expanso-edge, goreleaser, aws-iam-authenticator-fips, docker-compose, kserve-localmodelnode-agent-fips, ld-relay-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: snyk-cli, chainctl, cloudbeat, syft-fips, goreleaser, terragrunt-fips, pulumi-kubernetes-operator, melange, trufflehog-fips, apko, grafana-alloy, syft, cerbos, flux-image-automation-controller-fips, grafana-alloy-fips, mapotf, skaffold-fips, argo-events, gitsign,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: snyk-cli, chainctl, cloudbeat, syft-fips, goreleaser, terragrunt-fips, pulumi-kubernetes-operator, melange, trufflehog-fips, apko, grafana-alloy, syft, cerbos, flux-image-automation-controller-fips, grafana-alloy-fips, mapotf, skaffold-fips, argo-events, gitsign,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: omnibump, dbmate, karpenter, smarter-device-manager, dgraph, metacontroller, apko, github-mcp-server, mariadb-operator, smokescreen, aws-load-balancer-controller, ingress-nginx-controller, actions-runner-controller, flux-notification-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: emissary, sftpgo, podman, cluster-api-ipam-provider-in-cluster, metacontroller, gitaly, rancher-webhook, nsc, mongo-tools, mariadb-operator, prometheus, nri-nginx, percona-server-mongodb-operator, kube-bench, juicefs-csi-driver, kpt, oauth2-proxy, pgpool2exporter,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: conftest-fips, cloudbeat, beats-fips, goreleaser, kube-arangodb, cilium-envoy-fips, helm-diff-fips, kube-arangodb-fips, newrelic-fluent-bit-output-fips, etcd-fips, terraform-provider-pagerduty, consul-k8s-fips, vale, listmonk, chaos-mesh-fips, mc, omnictl-multiarch,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: emissary, ini-file, mongo-tools, prometheus, nri-nginx, kube-bench, octo-sts, opa, kpt, oauth2-proxy, nri-cassandra, protoc-gen-go-grpc, kubeflow-katib, malcontent, dagdotdev, containerd, slsa-verifier, flannel-cni-plugin, prometheus-alertmanager,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: emissary, ini-file, mongo-tools, prometheus, nri-nginx, kube-bench, octo-sts, opa, kpt, oauth2-proxy, nri-cassandra, protoc-gen-go-grpc, kubeflow-katib, malcontent, dagdotdev, containerd, slsa-verifier, flannel-cni-plugin, prometheus-alertmanager,...