GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, falcosidekick, temporal, ferretdb, tempo, dbmate, kots, spicedb, guac, cilium-cli, k3d, ksops, osv-scanner, sigstore-scaffolding, k8sgpt, minio, pulumi-language-dotnet, k3s, step, zarf, kubernetes-csi-driver-hostpath, spegel, step-ca,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: airflow, rekor, secrets-store-csi-driver-provider-azure, bank-vaults, tempo, pulumi, goreleaser, guac, sigstore-scaffolding, velero, ksops, argo-workflows, zarf, k8sgpt, chezmoi, cortex, argo-events, fluent-bit-plugin-loki, policy-controller,...

CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds-fips, aws-privateca-issuer, db-operator, yunikorn-k8shim-fips, crossplane-provider-aws-cloudwatchevents, crossplane-provider-aws-elbv2, act, crossplane-provider-aws-sqs, tempo, cert-manager-google-cas-issuer-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: net-kourier, terraform-provider-time, memcached-exporter, rabbitmq-messaging-topology-operator, cilium, sftpgo-plugin-eventsearch, newrelic-fluent-bit-output, argo-cd, crossplane, telegraf, kots, goreleaser, litestream, amazon-cloudwatch-agent-operator, cilium-cli,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: vault-k8s, flyte, secrets-store-csi-driver-provider-aws, kube-oidc-proxy, prometheus-postgres-exporter, atlantis-fips, tempo, go-md2man, smarter-device-manager-fips, gosu, flux-image-reflector-controller, fulcio-fips, metrics-server-fips, mods,...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: k9s, falcosidekick, memcached-exporter, rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, ferretdb, tfsec, crossplane, crossplane-provider-aws-cloudformation, dockerize, kiali, kots, goreleaser, litestream, amazon-cloudwatch-agent-operator, cilium-cli,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: airflow, rekor, secrets-store-csi-driver-provider-azure, bank-vaults, tempo, pulumi, goreleaser, guac, sigstore-scaffolding, velero, ksops, argo-workflows, zarf, k8sgpt, chezmoi, cortex, argo-events, fluent-bit-plugin-loki, policy-controller,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: vault-k8s, swagger, flyte, secrets-store-csi-driver-provider-aws, kube-logging-operator, kube-oidc-proxy, prometheus-postgres-exporter, atlantis-fips, nsc, tempo, go-md2man, smarter-device-manager-fips, gosu, flux-image-reflector-controller, fulcio-fips,...