CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: trivy, caddy, fulcio, http-echo, kube-bench, opa, kube-state-metrics, git-lfs, prometheus-beat-exporter-fips, snyk-cli, metacontroller, ko-fips, newrelic-nri-statsd, external-secrets-fips, cadvisor, sonobuoy, vertical-pod-autoscaler-fips, prometheus-pushgateway,...

GHSA-3669-72X9-R9P3 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, harbor-scanner-trivy-fips, zot...

GHSA-3669-72X9-R9P3 vulnerabilities

Vulnerabilities for packages: zot, harbor-scanner-trivy...

CVE-2024-37298 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, harbor-scanner-trivy-fips, zot...

CVE-2024-37298 vulnerabilities

Vulnerabilities for packages: zot, harbor-scanner-trivy...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: trivy, datadog-agent, restic-fips, caddy, fulcio, http-echo, kube-bench, opa, postgres-operator-fips, rabbitmq-messaging-topology-operator, kube-state-metrics, git-lfs, fq, prometheus-beat-exporter-fips, snyk-cli, metacontroller, velero-plugin-for-aws-fips, ko-fips,...