GO-2026-4600 vulnerabilities

Vulnerabilities for packages: librechat, grafana-rollout-operator, metacontroller, aws-ebs-csi-driver, victoriametrics-cluster-fips, victoriametrics-fips, aws-ebs-csi-driver-fips, victorialogs, localstack, podinfo, cluster-autoscaler-fips, flux-notification-controller, polaris,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: src-fingerprint, kubevela, melange, gptscript, flux-kustomize-controller, pulumi-language-dotnet, flux, flux-source-controller, k8sgpt, kaniko, guac, skaffold, timoni, chezmoi, kubescape, zarf, kargo, k9s, osv-scanner, wolfictl, pulumi, nuclei, syft, grype, gitsign,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: src-fingerprint, kubevela, melange, gptscript, flux-kustomize-controller, pulumi-language-dotnet, flux, flux-source-controller, k8sgpt, kaniko, guac, skaffold, timoni, chezmoi, kubescape, zarf, kargo, k9s, osv-scanner, wolfictl, pulumi, nuclei, syft, grype, gitsign,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, src-fingerprint, kubevela, melange, gptscript, pulumi-language-dotnet, gomplate, flux, flux-source-controller, kaniko, guac, skaffold, chezmoi, kubescape, zarf, kargo, k9s, osv-scanner, trufflehog, wolfictl, pulumi, nuclei, nfpm, syft, gryp...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitlab-kas, crossplane-provider-aws-iam, crossplane-provider-azure-managedidentity, eksctl, gomplate, pulumi-language-dotnet, helm, gatus, zarf, kubernetes, k3s, cluster-api-azure-controller, knative-serving, nfpm, syft, fulcio, zot, dagger, caddy, containerd,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubescape-operator, pgpool2exporter, src-fingerprint, govulncheck, timescaledb-parallel-copy, gatekeeper, kubernetes-csi-driver-nfs, gobuster, minio-object-browser, gcp-compute-persistent-disk-csi-driver, kubernetes-csi-node-driver-registrar,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: src-fingerprint, flux-image-reflector-controller, falcoctl, kubevela, crossplane-provider-azure-storage, spire-server, step-ca, flux-kustomize-controller, crossplane-provider-azure-managedidentity, gomplate, ksops, skopeo, flux, flux-source-controller, grafana-mimir,...

CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1

Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: knative-eventing-fips, etcd-fips, snyk-cli, frankenphp-8.3, rancher-agent, gatekeeper-fips, osv-scanner, spire-server, kube-arangodb-fips, vault, drone-fips, opentofu-fips, zot, external-secrets-operator-fips, argo-cd, backup-restore-operator, skaffold-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect-fips, crossplane-provider-aws-redshiftserverless, etcd-fips, snyk-cli, kargo, gitlab-runner-fips, docker-machine-driver-linode, crossplane-provider-aws-efs-fips, scorecard, crossplane-provider-aws-vpc-fips, spire-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gitlab-kas, crossplane-provider-azure-managedidentity, eksctl, gomplate, pulumi-language-dotnet, helm, gatus, zarf, kubernetes, k3s, cluster-api-azure-controller, knative-serving, nfpm, syft, fulcio, zot, dagger, caddy, containerd, flux-image-automation-controller,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: containerd-fips, crossplane-provider-aws-directconnect-fips, node-problem-detector-fips, crossplane-provider-aws-redshiftserverless, etcd-fips, snyk-cli, kargo, gitlab-runner-fips, jitsucom-bulker, gotrue, crossplane-provider-aws-efs-fips, scorecard,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: containerd-fips, crossplane-provider-aws-directconnect-fips, node-problem-detector-fips, crossplane-provider-aws-redshiftserverless, etcd-fips, snyk-cli, kargo, gitlab-runner-fips, jitsucom-bulker, gotrue, crossplane-provider-aws-efs-fips, scorecard,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, act, terragrunt-fips, amazon-ssm-agent-fips, cerbos, kargo, snyk-cli, gitlab-runner-fips, scorecard, witness, osv-scanner, amazon-ssm-agent, grafana-alloy, kaniko, rancher-fleet-fips, zot, grype, jfrog-cli, syft, apko-fips, grype-db,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, flux-image-reflector-controller, mariadb-operator, smarter-device-manager, kubewatch, spire-server, volume-modifier-for-k8s, grafana-rollout-operator, oras, flux, aws-privateca-issuer, flux-source-controller, aws-load-balancer-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-prometheus, govulncheck, kafkaexporter, nats, nri-f5, harbor, azure-service-operator, envconsul, kubeflow, knative-serving, bank-vaults, flux-image-automation-controller, tofu-controller, crossplane, argo-workflows, buf, terraform-provider-pagerduty, bom, ytt,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: govulncheck, kafkaexporter, trino, nri-f5, azure-service-operator, fulcio, bank-vaults, flux-image-automation-controller, crossplane, argo-workflows, terraform-provider-pagerduty, terraform-provider-grafana, bom, ytt, speedtest-go, dex, k3d, fluent-operator, glab,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: govulncheck, kafkaexporter, trino, nri-f5, azure-service-operator, fulcio, bank-vaults, flux-image-automation-controller, crossplane, argo-workflows, terraform-provider-pagerduty, terraform-provider-grafana, bom, ytt, speedtest-go, dex, k3d, fluent-operator, glab,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nri-prometheus, govulncheck, kafkaexporter, trino, nats, nri-f5, bank-vaults, flux-image-automation-controller, argo-workflows, minify, bom, ytt, speedtest-go, dex, fluent-operator, hcloud, gke-gcloud-auth-plugin, argo-events, vt-cli, mockgen, nri-jmx,...