GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: mountpoint-s3-csi-driver, secrets-store-csi-driver-provider-aws, dgraph, volume-modifier-for-k8s, gh, polaris, kubewatch, oras, actions-runner-controller, external-secrets-operator, aws-load-balancer-controller, newrelic-k8s-metadata-injection, local-path-provisioner...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: tofu-controller, secrets-store-csi-driver-provider-aws, volume-modifier-for-k8s, dgraph, kube-arangodb, telegraf, spicedb-operator, eksctl, mc, rabbitmq-messaging-topology-operator, dbmate, boring-registry, kserve-modelmesh-serving, kserve-rest-proxy, rancher-agent,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: tofu-controller, secrets-store-csi-driver-provider-aws, volume-modifier-for-k8s, dgraph, kube-arangodb, telegraf, spicedb-operator, eksctl, mc, rabbitmq-messaging-topology-operator, dbmate, boring-registry, kserve-modelmesh-serving, kserve-rest-proxy, rancher-agent,...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: jaeger, flux-operator, osv-scanner, datadog-agent, opencost, glab, ferretdb...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: jaeger, flux-operator, osv-scanner, datadog-agent, opencost, glab, ferretdb...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: jaeger, flux-operator, osv-scanner, datadog-agent, opencost, glab, ferretdb...

GHSA-89XV-2J6F-QHC8 vulnerabilities

Vulnerabilities for packages: ferretdb, jaeger-fips, opencost-fips, datadog-agent, datadog-agent-fips, flux-operator-fips, gitlab-workhorse-ce, jaeger, livekit-cli, osv-scanner, opencost, flux-operator, gitlab-workhorse-ce-fips, glab...

CVE-2026-33252 vulnerabilities

Vulnerabilities for packages: ferretdb, jaeger-fips, opencost-fips, datadog-agent, datadog-agent-fips, flux-operator-fips, gitlab-workhorse-ce, jaeger, livekit-cli, osv-scanner, opencost, flux-operator, gitlab-workhorse-ce-fips, glab...

GHSA-Q382-VC8Q-7JHJ vulnerabilities

Vulnerabilities for packages: ferretdb, jaeger-fips, opencost-fips, datadog-agent, datadog-agent-fips, flux-operator-fips, gitlab-workhorse-ce, jaeger, livekit-cli, osv-scanner, opencost, flux-operator, gitlab-workhorse-ce-fips, glab...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: ferretdb, jaeger-fips, opencost-fips, datadog-agent, datadog-agent-fips, flux-operator-fips, gitlab-workhorse-ce, jaeger, osv-scanner, opencost, flux-operator, github-mcp-server, gitlab-workhorse-ce-fips, gptscript...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: ferretdb, jaeger-fips, opencost-fips, datadog-agent, datadog-agent-fips, flux-operator-fips, gitlab-workhorse-ce, jaeger, osv-scanner, opencost, flux-operator, github-mcp-server, gitlab-workhorse-ce-fips, gptscript...

SUSE CVE-2026-23990

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator

Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...

GHSA-4XH5-JCJ2-CH8Q vulnerabilities

Vulnerabilities for packages: flux-operator...

CVE-2026-23990 vulnerabilities

Vulnerabilities for packages: flux-operator...

GHSA-4XH5-JCJ2-CH8Q vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-operator...

CVE-2026-23990 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, flux-operator...

CVE-2026-23990

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

CVE-2026-23990

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...

CVE-2026-23990

The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...