GO-2024-2978 vulnerabilities

Vulnerabilities for packages: osv-scanner, spire-server, step-ca, temporal, gomplate, rqlite, terraform-provider-google, vcluster, k8sgpt, grafana-agent-operator, tempo, dbmate, spegel, guac, k8sgpt-operator, melange, opa, cert-manager-cmctl, ksops, kwok, opentelemetry-collector,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, step-ca, trino, flux-image-reflector-controller, py3-cassandra-medusa, velero, k8sgpt, grafana-agent-operator, kubescape, tekton-chains, goreleaser, harbor-registry, secrets-store-csi-driver-provider-azure, tempo, flyte, cortex, guac, nuclei,...

CLEANSTART-2026-MO12071 Security fixes in grafana-agent-operator 0.44.8-r0

Package grafana-agent-operator version 0.44.8-r0 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: nerdctl, flux-helm-controller, crossplane-provider-aws-sqs-fips, tetragon, k8ssandra-client-fips, cluster-api-ipam-provider-in-cluster, haproxy-ingress, kubernetes-csi-external-snapshotter, crossplane-provider-azure-policyinsights, image-factory-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: osv-scanner, grafana-rollout-operator, libnvidia-container, crossplane, kubernetes-dashboard, cri-tools, vault-secrets-webhook, spiffe-helper, envoy-ratelimit, kubescape, terraform-provider-aws, amazon-cloudwatch-agent-operator, kubeflow-katib, aws-flb-firehose, gatu...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: hello-world-golang, caddy-fips, kubernetes-csi-external-provisioner, trillian-fips, tempo, policy-controller, buildkitd, docker-credential-gcr, hey, ko-fips, kwok, trillian, ferretdb, secrets-store-csi-driver-provider-azure, src, flyte, extism, newrelic-infra-operato...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, kubernetes-dashboard, spiffe-helper, buf, azcopy, crossplane-provider-aws-memorydb, kubescape, oras, crossplane-provider-aws-sqs, terraform-provider-aws, amazon-cloudwatch-agent-operator, harbor-registry, helm-operator, kubeflow-katib,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, step-ca, trino, flux-image-reflector-controller, py3-cassandra-medusa, velero, k8sgpt, grafana-agent-operator, kubescape, tekton-chains, goreleaser, harbor-registry, secrets-store-csi-driver-provider-azure, tempo, flyte, cortex, guac, nuclei,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: nerdctl, flux-helm-controller, request-1279, yam, neuvector-sigstore-interface, hello-world-golang, up, haproxy-ingress, caddy-fips, kubernetes-csi-external-provisioner, trillian-fips, nri-elasticsearch, tempo, policy-controller, aws-flb-cloudwatch, weaviate,...