GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kuma, flux-source-controller-fips, argo-workflows-fips, kube-state-metrics, helm, rancher, traefik, gitea, cert-manager, trivy-operator-fips, coder, kaf, traefik-fips, knative-kafka-broker, tekton-pipelines-fips, prometheus-mongodb-exporter, prometheus-fips, kubescap...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: kuma, flux-source-controller-fips, argo-workflows-fips, kube-state-metrics, helm, rancher, traefik, gitea, packer-fips, juicefs, jfrog-cli, cert-manager, splunk-otel-collector, trivy-operator-fips, coder, kaf, traefik-fips, knative-kafka-broker, datadog-agent-fips,...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, argo-workflows-fips, gitea, packer-fips, jfrog-cli, trivy-operator-fips, rancher-fleet, grype-fips, src-fingerprint-fips, kubescape, gitlab-rails-ce, zot, grype-db, external-secrets-operator-fips, gitlab-runner-fips, kargo,...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, cosign, flux-source-controller-fips, kube-state-metrics, newrelic-infrastructure-agent-fips, redpanda, kbld, rke2-runtime, juicefs, jfrog-cli, trivy-operator-fips, neuvector-scanner, extism, gitlab-pages, kaf, buildkite-agent, atlantis-fips, coredns...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, cosign, flux-source-controller-fips, kube-state-metrics, newrelic-infrastructure-agent-fips, redpanda, kbld, rke2-runtime, juicefs, jfrog-cli, trivy-operator-fips, neuvector-scanner, extism, gitlab-pages, kaf, buildkite-agent, atlantis-fips, coredns...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, karma-fips, cosign, flux-source-controller-fips, kube-state-metrics, harbor-registry-fips, newrelic-infrastructure-agent-fips, k8s-metacollector, crossplane-provider-aws-servicediscovery, gotrue-fips, redpanda, rke2-runtime, juicefs, jfrog-cli,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: addon-resizer-fips, dockerize-fips, helm-mapkubeapis, cosign, flux-source-controller-fips, karma-fips, harbor-registry-fips, kube-state-metrics, kubeflow-fips, victoriametrics-operator, newrelic-infrastructure-agent-fips, k8s-metacollector,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: harbor-registry-fips, redpanda, gotrue-fips, gitlab-pages, git-sync-fips, knative-operator-fips, gitlab-rails-ce, zot, esbuild, azurefile-csi-fips, crossplane-fips, k8sgpt-operator, kube-arangodb-fips, cert-manager-csi-driver-fips, spire-controller-manager-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: addon-resizer-fips, dockerize-fips, helm-mapkubeapis, cosign, flux-source-controller-fips, karma-fips, harbor-registry-fips, kube-state-metrics, kubeflow-fips, victoriametrics-operator, newrelic-infrastructure-agent-fips, k8s-metacollector,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: addon-resizer-fips, dockerize-fips, helm-mapkubeapis, cosign, flux-source-controller-fips, karma-fips, harbor-registry-fips, kube-state-metrics, kubeflow-fips, victoriametrics-operator, newrelic-infrastructure-agent-fips, k8s-metacollector,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, argo-workflows-fips, gitea, packer-fips, jfrog-cli, trivy-operator-fips, rancher-fleet, grype-fips, src-fingerprint-fips, kubescape, gitlab-rails-ce, zot, grype-db, external-secrets-operator-fips, gitlab-runner-fips, kargo,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, argo-workflows-fips, gitea, packer-fips, jfrog-cli, trivy-operator-fips, rancher-fleet, grype-fips, src-fingerprint-fips, kubescape, gitlab-rails-ce, zot, grype-db, external-secrets-operator-fips, gitlab-runner-fips, kargo,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, argo-workflows-fips, gitea, packer-fips, jfrog-cli, trivy-operator-fips, rancher-fleet, grype-fips, src-fingerprint-fips, kubescape, gitlab-rails-ce, zot, grype-db, external-secrets-operator-fips, gitlab-runner-fips, kargo,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: hydra-fips, flux-source-controller-fips, argo-workflows-fips, crossplane-provider-azure-authorization, helm, crossplane-provider-aws-kinesis-fips, kyverno-policy-reporter-plugins-kyverno, gitea, crossplane-provider-aws-sns-fips, packer-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: hydra-fips, flux-source-controller-fips, argo-workflows-fips, crossplane-provider-azure-authorization, helm, crossplane-provider-aws-kinesis-fips, kyverno-policy-reporter-plugins-kyverno, gitea, crossplane-provider-aws-sns-fips, packer-fips,...

CVE-2025-59937 vulnerabilities

Vulnerabilities for packages: gitea, sftpgo, gitea-fips...

GHSA-WPWJ-69CM-Q9C5 vulnerabilities

Vulnerabilities for packages: gitea, sftpgo, gitea-fips...