CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: kube-logging-logging-operator, pgwatch, kyverno-policy-reporter-plugins-kyverno-fips, flux-image-automation-controller-fips, victoriametrics-cluster, fluxcd-kustomize-mutating-webhook, stakater-reloader, kubernetes-dashboard-metrics-scraper-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kots, harbor-fips, dive, podman, karpenter-fips, crossplane, nats, knative-operator-fips, nsc, knative-serving-fips, pulumi-language-yaml, aws-load-balancer-controller-fips, aactl, k9s-fips, zot, splunk-otel-collector-fips, gitea-fips, tekton-pipelines, flux, telegra...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kots, harbor-fips, dive, podman, karpenter-fips, crossplane, nats, knative-operator-fips, nsc, knative-serving-fips, pulumi-language-yaml, aws-load-balancer-controller-fips, aactl, k9s-fips, zot, splunk-otel-collector-fips, gitea-fips, tekton-pipelines, flux, telegra...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, harbor-fips, flux-image-automation-controller, crossplane-provider-aws-eks-fips, dive, kustomize-fips, grafana-beyla, eks-distro, neuvector, podman,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: dex, tempo, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, harbor-fips, crossplane-provider-aws-eks-fips, seaweedfs-operator-fips, crossplane-provider-aws-elasticache, syncthing, trivy, omni, crossplane-provider-aws-iam,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: dex, tempo, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, harbor-fips, crossplane-provider-aws-eks-fips, seaweedfs-operator-fips, crossplane-provider-aws-elasticache, syncthing, trivy, omni, crossplane-provider-aws-iam,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, kafka-proxy, dgraph, wireguard-go, cloudflared, temporal, crossplane-provider-aws-cloudwatchlogs, terraform-provider-google, op-geth, cadvisor, local-static-provisioner, xeol, docker, argo-workflows, crossplane-provider-aws-dynamod...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, kafka-proxy, dgraph, wireguard-go, cloudflared, crossplane-provider-aws-cloudwatchlogs, terraform-provider-google, cadvisor, local-static-provisioner, xeol, kubernetes-event-exporter, docker, argo-workflows,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, kafka-proxy, dgraph, wireguard-go, cloudflared, temporal, crossplane-provider-aws-cloudwatchlogs, terraform-provider-google, op-geth, cadvisor, local-static-provisioner, xeol, docker, argo-workflows, crossplane-provider-aws-dynamod...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, kafka-proxy, dgraph, wireguard-go, cloudflared, crossplane-provider-aws-cloudwatchlogs, terraform-provider-google, cadvisor, local-static-provisioner, xeol, kubernetes-event-exporter, docker, argo-workflows,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kots, kubernetes-csi-external-snapshotter-fips, harbor-fips, flux-image-automation-controller, dive, eks-distro, neuvector, podman, karpenter-fips, swagger, glab, nvidia-container-toolkit, step-fips, aws-iam-authenticator,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-push, kots, helm-operator, cilium-cli, consul-k8s, kubescape, zarf, k8ssandra-client, eksctl, chart-testing, pluto, trivy, zot, k9s, cluster-api-helm-controller, cert-manager-cmctl, flux-helm-controller, flux-source-controller, helm-docs, flux,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-push, kots, helm-operator, cilium-cli, consul-k8s, kubescape, zarf, k8ssandra-client, eksctl, chart-testing, pluto, trivy, zot, k9s, cluster-api-helm-controller, cert-manager-cmctl, flux-helm-controller, flux-source-controller, helm-docs, flux,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-push, kots, helm-operator, cilium-cli, consul-k8s, kubescape, zarf, k8ssandra-client, eksctl, chart-testing, pluto, trivy, zot, k9s, cluster-api-helm-controller, cert-manager-cmctl, flux-helm-controller, flux-source-controller, helm-docs, flux,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-push, kots, helm-operator, cilium-cli, consul-k8s, kubescape, zarf, k8ssandra-client, eksctl, chart-testing, pluto, trivy, zot, k9s, cluster-api-helm-controller, cert-manager-cmctl, flux-helm-controller, flux-source-controller, helm-docs, flux,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: buildkitd, neuvector-scanner, fuse-overlayfs-snapshotter, chartmuseum, syft, helm-push, gatekeeper, kots, helm-operator, kubevela, newrelic-infrastructure-agent, docker-compose, ctop, cilium-cli, grype, wolfictl, spegel, kubescape, zarf, k8ssandra-client, k3s, eksctl...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: kots, envoy-gateway, buildkitd, syft, neuvector, trivy, neuvector-fips, kargo, rancher-agent, cert-manager-cmctl, flux-helm-controller, chartmuseum, consul-k8s-fips, helm-operator, docker, flux-helm-controller-fips, dagger, docker-compose-fips, zot, grype-fips,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: kots, envoy-gateway, buildkitd, syft, neuvector, trivy, neuvector-fips, kargo, rancher-agent, cert-manager-cmctl, flux-helm-controller, chartmuseum, consul-k8s-fips, helm-operator, docker, flux-helm-controller-fips, dagger, docker-compose-fips, zot, grype-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: cortex, buildkitd, opentelemetry-collector, falcoctl, trino, external-dns, flux-kustomize-controller, fulcio, rekor, thanos, up, py3-azure-identity, restic, kubescape, zarf, boring-registry, step, nuclei, opentelemetry-collector-contrib, sqlpad, cluster-autoscaler,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: cert-manager, chartmuseum, trivy, kots, zarf, k9s, up, zot, helm-operator, k8sgpt, cert-manager-fips, kubevela, helm-push, flux-source-controller, cilium-cli, flux-helm-controller, eksctl, kubescape...