GO-2026-6433 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea...

GHSA-RCR6-4JQH-J84M vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea, sftpgo...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: gitea, mattermost-fips, gitea-fips, gitness, grafana...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.4, istio, loki, aactl, chisel, flux-source-controller-fips, minio-fips, cloud-provider-aws, frankenphp-8.5, flux, snyk-cli, commercial-grafana, zot, tekton-pipelines-fips, prometheus-operator, flux-image-automation-controller,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.4, argo-events, istio, jfrog-cli, loki, aactl, nfpm, grype-db, chisel, flux-source-controller-fips, amazon-ssm-agent-fips, chainctl-fips, minio-fips, cloud-provider-aws, frankenphp-8.5, dagger, flux, guac, longhorn-cli-fips, melange,...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-events, kaniko-fips, jfrog-cli, grype-db, flux-source-controller-fips, amazon-ssm-agent-fips, chainctl-fips, commercial-chainloop-cli, dagger, flux, guac, melange, snyk-cli, zot, rancher-fleet, pulumi-language-dotnet, gomplate, mapotf, gptscript,...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: tigera-operator, backup-restore-operator-fips, crane-fips, newrelic-fluent-bit-output-fips, jfrog-cli, aactl, tigera-operator-fips, cosign, licenseclassifier, nsc-fips, chezmoi, prometheus-podman-exporter-fips, kube-mgmt-fips, mattermost, rook-fips, falcoctl-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: tigera-operator, backup-restore-operator-fips, crane-fips, newrelic-fluent-bit-output-fips, jfrog-cli, aactl, tigera-operator-fips, cosign, licenseclassifier, nsc-fips, chezmoi, prometheus-podman-exporter-fips, kube-mgmt-fips, mattermost, rook-fips, falcoctl-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, prometheus-pgbouncer-exporter, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, tigera-operator, backup-restore-operator-fips, crossplane-provider-aws-rds-fips, crane-fips, listmonk, dbmate, jfrog-cli, newrelic-fluent-bit-output-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, aactl,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: crane-fips, prometheus-pgbouncer-exporter, aactl, kubernetes-csi-external-attacher, juicefs-csi-driver, percona-xtradb-cluster-operator-fips, victorialogs, licenseclassifier, lvm-driver, crossplane-provider-aws-ssm, metrics-agent-fips, cri-tools,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argo-events, kaniko-fips, jfrog-cli, nfpm, grype-db, flux-source-controller-fips, amazon-ssm-agent-fips, chainctl-fips, commercial-chainloop-cli, dagger, flux, guac, melange, snyk-cli, chezmoi, zot, rancher-fleet, pulumi-language-dotnet, gomplate, gptscript,...