GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, metacontroller, victoriametrics-cluster-fips, aws-ebs-csi-driver-fips, nova, polaris, nova-fips, victorialogs, victoriametrics, flux-fips, grafana-rollout-operator, victoriametrics-fips, temporal-fips, pluto, go, flux-source-controller,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gitsign, gitea, dagger, argo-events, k9s, grafana-alloy, argocd-image-updater, pulumi-language-java, flux, guac, trivy, flux-image-automation-controller, kaniko, gptscript, chezmoi, kubescape, pulumi-kubernetes-operator, go-licenses, k8sgpt, kargo, kots,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gitsign, gitea, dagger, argo-events, k9s, grafana-alloy, argocd-image-updater, pulumi-language-java, flux, guac, trivy, flux-image-automation-controller, kaniko, gptscript, chezmoi, kubescape, pulumi-kubernetes-operator, go-licenses, k8sgpt, kargo, kots,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: trufflehog, gitsign, cerbos, gitea, dagger, argo-events, k9s, witness, gitlab-runner, grafana-alloy, argocd-image-updater, teleport, pulumi-language-java, nfpm, kyverno, flux, guac, trivy, gomplate, argo-cd, flux-image-automation-controller, kaniko, gptscript,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cloudflared, cert-manager, k9s, kubernetes-dashboard, hcloud, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, nfpm, docker-cli-buildx, minio, tw, fscrypt, crossplane-provider-azure-authorization, rootlesskit, terragrunt, argo-cd,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: govulncheck, kubeflow-katib, pgtimetable, kubescape-operator, rancher-system-upgrade-controller, whereabouts, boring-registry, rancher-system-agent, rabbitmq-default-user-credential-updater, sftpgo-plugin-geoipfilter, kyverno-policy-reporter-ui, kubernetes-dashboard,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, gitsign, aactl, argo-events, k3s, opentelemetry-collector, glab, sigstore-scaffolding, ksops, crossplane-provider-azure-sql, buildkitd, falcoctl, tekton-chains, crossplane-provider-family-azure, vexctl, flux, bank-vaults,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cert-manager, gitlab-rails-ce, trivy-operator, knative-serving, gitea-fips, harbor-fips, tekton-pipelines, kubescape-server-fips, containerd, fscrypt, minio-fips, kots, helm, flux-source-controller, cilium, kube-arangodb-fips, trivy, nerdctl, vault-fips, cloudbeat,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-servicediscovery, syft, crossplane-provider-aws-chime-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-chime, crossplane-aws-provider, crossplane-provider-aws-directconnect, docker-compose, fscrypt,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cert-manager, k9s, kubernetes-dashboard, hcloud, nfpm, docker-cli-buildx, minio, fscrypt, crossplane-provider-azure-authorization, rootlesskit, terragrunt, argo-cd, flux-image-automation-controller, eksctl, gptscript, podman, policy-controller, chezmoi, steampipe,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: syft, crossplane-provider-aws-chime-fips, envoy-ratelimit-fips, knative-eventing, secrets-store-csi-driver-fips, crossplane-provider-aws-directconnect, kube-metrics-adapter, conftest, docker-compose, victoriametrics-operator, helm-operator-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: syft, crossplane-provider-aws-chime-fips, envoy-ratelimit-fips, knative-eventing, secrets-store-csi-driver-fips, crossplane-provider-aws-directconnect, kube-metrics-adapter, conftest, docker-compose, victoriametrics-operator, helm-operator-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: mapotf-fips, gitlab-rails-ce, syft, trivy-operator, tfsec, gitea-fips, trufflehog-fips, apko, kubescape-server-fips, trufflehog, mapotf, jfrog-cli, argo-events-fips, kots, cg, grype-fips, gomplate-fips, grype-db, kaniko-fips, gitaly, teleport, trivy, cloudbeat,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster, metacontroller, temporal, aws-load-balancer-controller, clickhouse-operator, github-mcp-server, go, oras, hubble, stakater-reloader, victoriametrics, dgraph, flux, aws-network-policy-agent, local-path-provisioner, pluto, dataplaneapi,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, boring-registry, kyverno-policy-reporter-ui, kubernetes-dashboard, delve, filebrowser, fscrypt, crossplane-provider-azure-authorization, argo-cd, podman, cloud-provider-azure, dapr, eksctl, supercronic, chezmoi, kubescape, grafana-operator,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kubecolor, kyverno-policy-reporter-ui, kubernetes-dashboard, filebrowser, elvish, tw, fscrypt, ini-file, crossplane-provider-azure-authorization, supercronic, kaniko, kubescape, cert-manager-istio-csr, crane, frp, kind, nri-cassandra,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kubecolor, kyverno-policy-reporter-ui, kubernetes-dashboard, filebrowser, elvish, tw, fscrypt, ini-file, crossplane-provider-azure-authorization, supercronic, kaniko, kubescape, cert-manager-istio-csr, crane, frp, kind, nri-cassandra,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, kubecolor, boring-registry, delve, elvish, fscrypt, ini-file, supercronic, podman, kaniko, grafana-operator, flannel, crane, frp, kind, nri-cassandra, nri-f5, kube-logging-operator, runc, extism, descheduler, local-static-provisioner, s5cmd,...