CLEANSTART-2026-VP35771 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-QV19791 Security fix for GHSA-gcjh-h69q-9w9g applied in: external-secrets-operator-fips 2.12.0-r1, flux-helm-controller 1.6.4-r1

GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VN99750 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-AH23737 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, manifest-tool, maru, cluster-api-helm-controller, kube-arangodb, rancher-helm, k8sgpt, opentofu, helm-set-status, kargo, gitness, helm-mapkubeapis, flux-helm-controller, helm-push, k9s, kyverno-notation-aws, xeol...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, manifest-tool, maru, cluster-api-helm-controller, kube-arangodb, rancher-helm, k8sgpt, opentofu, helm-set-status, kargo, gitness, helm-mapkubeapis, flux-helm-controller, helm-push, k9s, kyverno-notation-aws, xeol...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, manifest-tool, maru, cluster-api-helm-controller, kube-arangodb, rancher-helm, k8sgpt, opentofu, helm-set-status, kargo, gitness, helm-mapkubeapis, flux-helm-controller, helm-push, k9s, kyverno-notation-aws, xeol...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes, spqr, metrics-server, cilium, flux-notification-controller, caddy, argocd-image-updater, kuma, gatekeeper, kots, datadog-operator, cert-manager-istio-csr, rancher, fluent-operator, tekton-pipelines, emissary, gitlab-kas, cert-manager-webhook-pdns,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, teleport, flux-fips, eksctl, linkerd2-fips, harbor, linkerd2, kuma, helm-docs, chart-testing-fips, consul-k8s-fips, kargo, cilium-cli, k8sgpt, trivy, istio, flux, kots, cert-manager-cmctl, flux-helm-controller, flux-source-controller,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: up, eksctl, k8sgpt, chartmuseum, kubescape, kots, flux-helm-controller, flux-source-controller, helm-operator, kubevela, cilium-cli, trivy, zarf, helm-push, zot, k9s...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: up, eksctl, k8sgpt, chartmuseum, kubescape, kots, flux-helm-controller, flux-source-controller, helm-operator, kubevela, cilium-cli, trivy, zarf, helm-push, zot, k9s...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, nova, flux-fips, metacontroller, polaris, victoriametrics-cluster, victoriametrics-cluster-fips, flux-image-reflector-controller, aws-load-balancer-controller-fips, temporal-fips, victoriametrics, cluster-autoscaler-fips, amazon-k8s-cni-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, nova, flux-fips, metacontroller, polaris, victoriametrics-cluster, victoriametrics-cluster-fips, flux-image-reflector-controller, aws-load-balancer-controller-fips, temporal-fips, victoriametrics, cluster-autoscaler-fips, amazon-k8s-cni-fips,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, terraform-provider-sendgrid, harbor, temporal-fips, crossplane-provider-family-aws-fips, gitlab-operator-fips, thanos, dex, crossplane-provider-aws-sqs-fips, grafana-mimir, nvidia-nsight-compute-12.9, go, prometheus-podman-exporter-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: git-lfs-fips, terraform-provider-sendgrid, harbor, temporal-fips, consul-k8s-fips, cert-manager-istio-csr, trivy, actions-runner-controller-fips, actions-runner-controller, thanos, dex, grafana-mimir, hugo-fips, vendir-fips, kube-bench-fips, temporal,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubevela, zarf, cilium-cli, trivy, flux-source-controller, helm-operator, kots, eksctl, kubescape, up, k8sgpt, flux-helm-controller, zot, helm-push, k9s, chartmuseum...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: tw, trivy, rancher-helm, kots, kubescape, pluto, flux-helm-controller, helm-push, zarf, helm-docs, zot, k9s, flux, cert-manager-cmctl, flux-source-controller, helm-operator, eksctl, chart-testing, chartmuseum, cilium-cli, cluster-api-helm-controller, k8ssandra-client...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubevela, zarf, cilium-cli, trivy, flux-source-controller, helm-operator, kots, eksctl, kubescape, up, k8sgpt, flux-helm-controller, zot, helm-push, k9s, chartmuseum...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kubevela, tw, trivy, rancher-fleet, wolfictl, rancher-helm, newrelic-infrastructure-agent, kots, containerd, osv-scanner, docker-cli-buildx, opa-envoy, helm-mapkubeapis, flux-helm-controller, kubescape, helm-push, fuse-overlayfs-snapshotter, helm, spegel,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kubevela, trivy, newrelic-infrastructure-agent, kots, up, kubescape, flux-helm-controller, helm-push, fuse-overlayfs-snapshotter, helm, gitness, k3d, zot, ctop, kaniko, flux-source-controller, eksctl, grype, skaffold, melange, cilium-cli, buildkitd, k8sgpt...