GO-2026-4600 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, victorialogs-fips, cluster-autoscaler-fips, aws-load-balancer-controller-fips, dkron, gotenberg, flux-operator-fips, stakater-reloader, localstack, flux-notification-controller, victorialogs, polaris, terragrunt, flux-source-watcher,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kubevela, kaniko, pulumi-kubernetes-operator, flux-kustomize-controller, trivy, nuclei, grafana-alloy, flux-image-automation-controller, melange, scorecard, zarf, timoni, chezmoi, guac, syft, flux-source-controller, snyk-cli, flux, gptscript, pulumi-language-java,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kubevela, kaniko, pulumi-kubernetes-operator, flux-kustomize-controller, trivy, nuclei, grafana-alloy, flux-image-automation-controller, melange, scorecard, zarf, timoni, chezmoi, guac, syft, flux-source-controller, snyk-cli, flux, gptscript, pulumi-language-java,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: kubevela, kaniko, pulumi-kubernetes-operator, gitaly, gomplate, trivy, nuclei, grafana-alloy, flux-image-automation-controller, melange, scorecard, witness, zarf, chezmoi, guac, syft, flux-source-controller, snyk-cli, cerbos, flux, gptscript, trufflehog,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cilium-cli, gh, spire-server, crossplane-provider-aws-sns, go-discover, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, neuvector-sigstore-interface, kubernetes-dashboard, buildah, mods, aactl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, gitleaks, flux-kustomize-controller, ctop, apache-exporter, kyverno-policy-reporter-ui, cilium-cli, langfuse, golangci-lint, spire-server, crossplane-provider-aws-sns, local-path-provisioner, vault-k8s, mountpoint-s3-csi-driver,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kubevela, pulumi-kubernetes-operator, crossplane-provider-azure-storage, falcoctl, slsa-verifier, flux-kustomize-controller, rook, k3d, ksops, gomplate, sops, step-ca, nuclei, flux-image-automation-controller, scorecard, zarf, crossplane-provider-family-azure, gh,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: mattermost, k9s-fips, kubescape-server-fips, cloudbeat, elastic-agent-fips, drone, cert-manager, chisel, commercial-grafana, kubernetes-fips, zarf-fips, tekton-pipelines-fips, tigera-operator, zarf, tekton-pipelines, gatekeeper, vault, gatekeeper-fips, kots, k9s,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, crossplane-provider-aws-s3, k8sgpt, chainloop-control-plane, crossplane-provider-aws-ecs, tkn, gh, slsa-verifier, crossplane-provider-aws-cognitoidentity-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cilium-cli, gh, spire-server, go-discover, flux-source-controller, snyk-cli, neuvector-sigstore-interface, kubernetes-dashboard, buildah, mods, aactl, argo-events, splunk-otel-collector, teleport, mattermost, docker-cli-buildx, buildkitd,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8s-image-swapper, k8sgpt, temporal-server, vault-secrets-operator, cadence-fips, crossplane-provider-aws-ecs, velero, tkn,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, terraform-provider-acme-fips, docker-compose-fips, cluster-api-provider-vsphere, crossplane-provider-aws-s3, k8s-image-swapper, k8sgpt, temporal-server, vault-secrets-operator, cadence-fips, crossplane-provider-aws-ecs, velero, tkn,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, gomplate-fips, witness, pulumi, chainctl-fips, zarf-fips, terragrunt, act, grafana-alloy, zarf, src-fingerprint-fips, crossplane-fips, wolfictl, kots, k9s, pulumi-language-dotnet, pulumi-language-yaml, nfpm,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: go, aws-privateca-issuer, supercronic, hubble, victoriametrics, newrelic-infra-operator, mariadb-operator, flux-image-automation-controller, envoy-ratelimit, pluto, tailscale, gh, spire-server, smarter-device-manager, stakater-reloader, local-path-provisioner,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: render-template, kyverno-policy-reporter-ui, gh, trino, buildah, azcopy, dataplaneapi, fuse-overlayfs-snapshotter, vt-cli, temporal-server, crane, esbuild, kserve-rest-proxy, kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-aws, kubewatch,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: render-template, kyverno-policy-reporter-ui, gh, trino, buildah, azcopy, dataplaneapi, fuse-overlayfs-snapshotter, vt-cli, temporal-server, crane, esbuild, kserve-rest-proxy, kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-aws, kubewatch,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: render-template, thanos, prometheus-pushgateway, kubernetes-ingress-defaultbackend, trino, dataplaneapi, kiali, grafana-rollout-operator, vt-cli, temporal-server, crane, esbuild, kserve-rest-proxy, kubernetes-dashboard-metrics-scraper,...