GO-2026-4600 vulnerabilities

Vulnerabilities for packages: librechat, amazon-k8s-cni-fips, flux-image-automation-controller, victoriametrics, grafana-rollout-operator, flux-image-reflector-controller, dkron, podinfo, aws-load-balancer-controller-fips, temporal-fips, victorialogs, aws-ebs-csi-driver,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, argocd-image-updater, flux-kustomize-controller, tfsec, argo-workflows, snyk-cli, scorecard, zarf, grype, zot, wolfictl, gptscript, src-fingerprint, gitsign, gitea, skaffold, k8sgpt, pulumi, pulumi-language-dotnet, goreleaser,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, argocd-image-updater, flux-kustomize-controller, tfsec, argo-workflows, snyk-cli, scorecard, zarf, grype, zot, wolfictl, gptscript, src-fingerprint, gitsign, gitea, skaffold, k8sgpt, pulumi, pulumi-language-dotnet, goreleaser,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitaly, argo-cd, argocd-image-updater, tfsec, argo-workflows, snyk-cli, scorecard, zarf, witness, grype, zot, wolfictl, cerbos, trufflehog, gptscript, src-fingerprint, trivy-operator, gitsign, gitea, steampipe, rancher-fleet, skaffol...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, crossplane-provider-aws-iam, terraform-provider-tls, zarf, podman, fscrypt, wolfictl, containerd, crossplane-provider-family-azure, glab, falco-no-driver, crossplane-provider-aws-sqs, pulumi-language-dotnet,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, grpcurl, ferretdb, crossplane-provider-aws-iam, fluxcd-kustomize-mutating-webhook, spire-controller-manager, gitleaks, nri-mongodb, local-path-provisioner, vault-k8s, paranoia, timescaledb-parallel-copy, crossplane-provider-sql,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, opentelemetry-collector, flux-kustomize-controller, terragrunt, policy-controller, skopeo, tkn, aactl, crossplane-provider-azure-authorization, snyk-cli, scorecard, sigstore-scaffolding, zarf, tekton-chains, rekor, zot, ksops,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: tigera-operator, kube-state-metrics, traefik-fips, elastic-agent-fips, gatekeeper, knative-eventing-fips, loki, omnictl-multiarch-fips, spire-server, zitadel, kubernetes-fips, keda-fips, grafana, gitea, cloudbeat, falco-no-driver, frankenphp-8.4,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: tigera-operator, knative-eventing-fips, omnictl-multiarch-fips, grafana, cluster-api-azure-controller-fips, cloudbeat, falco-no-driver, apko-fips, docker-machine-driver-linode, crossplane-provider-aws-kms, act, flux-kustomize-controller, chisel-fips, mapotf-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argocd-image-updater, terraform-provider-tls, zarf, podman, fscrypt, wolfictl, containerd, crossplane-provider-family-azure, glab, falco-no-driver, pulumi-language-dotnet, kyverno, cert-manager, pulumi-language-yaml, pulumi-kubernetes-operator, spire-server, kaf,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: volcano, kserve-localmodelnode-agent-fips, cluster-api-provider-vsphere, crossplane-provider-aws-imagebuilder, knative-eventing-fips, terraform-provider-grafana, blob-csi-fips, kube-logging-operator, ratify-fips, percona-xtradb-cluster-operator, grafana,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: volcano, kserve-localmodelnode-agent-fips, cluster-api-provider-vsphere, crossplane-provider-aws-imagebuilder, knative-eventing-fips, terraform-provider-grafana, blob-csi-fips, kube-logging-operator, ratify-fips, percona-xtradb-cluster-operator, grafana,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: melange, xeol-fips, cg, grype, gitlab-runner, grafana, pulumi-language-yaml, steampipe, wolfictl, gitea, cloudbeat, terragrunt-fips, apko-fips, act, gomplate, kubescape-server, k9s, mapotf-fips, pulumi-language-dotnet, argo-workflows-fips, chainctl-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, dgraph, sftpgo-plugin-eventsearch, dataplaneapi, fluxcd-kustomize-mutating-webhook, nova, local-path-provisioner, mariadb-operator, polaris, newrelic-infra-operator, temporal, kubewatch, grafana-rollout-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, fscrypt, protoc-gen-go, containerd, libnvidia-container, kserve-modelmesh-serving, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin, pulumi-kubernetes-operator, mage, yq, gobuster, sbom-scorecard, terraform-provider-acme,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, fscrypt, protoc-gen-go, containerd, libnvidia-container, kserve-modelmesh-serving, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin, pulumi-kubernetes-operator, mage, yq, gobuster, sbom-scorecard, terraform-provider-acme,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: podman, fscrypt, mockgen, containerd, kserve-modelmesh-serving, gke-gcloud-auth-plugin, nri-prometheus, mage, yq, gobuster, sbom-scorecard, sftpgo-plugin-auth, kyverno-policy-reporter-kyverno-plugin, prometheus-alertmanager, cloudnative-pg, atlantis, cosign,...