CLEANSTART-2026-LC49486 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1, cloud-provider-aws 1.34.1-r1

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AR39396 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EY57242 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, rancher-agent, secrets-store-csi-driver-provider-azure, kubeflow-pipelines, tempo, helm, kubeflow, gitlab-pages, kyverno, knative-serving, external-secrets-operator, cilium, bank-vaults, litestream, kserve, k8sgpt, lvm-driver,...

GCP Compute SSH BIND

BIND payload for listeners/gcp/computessh. Operator connects to a Compute Engine VM via gcloud compute ssh or direct Paramiko. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import class ModulePayload: info = "name": "GCP Compute SSH BIND", "description": "BIND payload for...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: kargo, flux-helm-controller, secrets-store-csi-driver-provider-azure, policy-controller, crossplane, k9s, docker-compose, rabbitmq-cluster-operator, boring-registry, gcsfuse, juicefs-csi-driver, lvm-driver, flux-source-controller, conftest, fulcio,...

GCP Compute Instances

Enumerate Compute Engine instances in the current GCP project !/usr/bin/env python3 -- coding: utf-8 -- import json from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Compute Instances", "description": "Enumerate Compute Engine...

GCP Compute SSH Pivot via Metadata

Pivot to a VM by injecting an SSH key into Compute metadata and preparing a Compute SSH session !/usr/bin/env python3 -- coding: utf-8 -- import json import time from kittysploit import from lib.post.gcp import GcpPostMixin class ModulePost, GcpPostMixin: info = "name": "GCP Compute SSH Pivot via...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: kargo, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, crossplane, grafana-operator, k9s, rabbitmq-cluster-operator, boring-registry, gcsfuse, juicefs-csi-driver, lvm-driver, delve, conftest, fulcio, velero-plugin-for-aws, pgtimetable,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, kube-arangodb-fips, knative-net-istio, cloudflared-fips, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, crossplane, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips, commercial-grafana, dynamic-localpv-provisioner-fips, kbld,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, docker-compose, rabbitmq-cluster-operator, boring-registry, nats, lvm-driver, delve, flux-source-controller, conftest, pgtimetable, rancher-machine,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: rancher-agent, crossplane-provider-aws-cloudformation, flux-helm-controller, prometheus, secrets-store-csi-driver-provider-azure, timoni, kubernetes-dashboard-auth, spire-controller-manager, tkn, terraform-provider-time, dkron, coredns, syft, docker-compose,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: rancher-agent, crossplane-provider-aws-cloudformation, flux-helm-controller, prometheus, secrets-store-csi-driver-provider-azure, timoni, kubernetes-dashboard-auth, spire-controller-manager, tkn, terraform-provider-time, dkron, coredns, syft, docker-compose,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, docker-compose, rabbitmq-cluster-operator, boring-registry, nats, lvm-driver, delve, flux-source-controller, conftest, pgtimetable, rancher-machine,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: supercronic, flux-helm-controller, secrets-store-csi-driver-provider-azure, timoni, grafana-operator, docker-compose, rabbitmq-cluster-operator, boring-registry, nats, lvm-driver, delve, flux-source-controller, conftest, pgtimetable, rancher-machine,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, rancher-security-scan-fips, dkron-fips, omnictl-multiarch, kube-arangodb-fips, knative-net-istio, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, cass-operator-fips, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: migrate, dkron-fips, omnictl-multiarch, kube-arangodb-fips, knative-net-istio, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, cass-operator-fips, gitlab-kas, dex, external-dns-fips, flagger-fips, teleport-operator-fips, knative-client, karpenter,...