CLEANSTART-2026-RU97646 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the helm-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references fo...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, cert-manager, crossplane, tekton-pipelines, cluster-api-ipam-provider-in-cluster, cilium, keda, gatekeeper, kubernetes-csi-external-snapshotter, kots, cluster-api-gcp-controller, node-feature-discovery, tkn, spicedb, flux-notification-controller,...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: sftpgo, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, smarter-device-manager, step, buildkitd, dgraph, tekton-pipelines, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kinesis, falcoctl, gatekeeper, helm, vcluster, kitty,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, up, flux-source-controller, kubescape, kubevela, zarf, chartmuseum, k8sgpt, zot, kots, eksctl, k9s, helm-operator, helm-push, cilium-cli, trivy...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, k8ssandra-client-fips, zarf, chartmuseum, cluster-api-helm-controller, zot, consul-k8s-fips, k9s, helm-docs, flux-fips, cert-manager-cmctl, kots, eksctl, helm-operator, helm-push, kuma, chart-testing-fips, chart-testing, flux-source-controller, plut...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, up, flux-source-controller, kubescape, kubevela, zarf, chartmuseum, k8sgpt, zot, kots, eksctl, k9s, helm-operator, helm-push, cilium-cli, trivy...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: conftest-fips, k8ssandra-client, cloudbeat, kube-arangodb, kube-arangodb-fips, consul-k8s-fips, chaos-mesh-fips, maru, tigera-operator, eksctl, rancher, linkerd2, tw, helm, kgateway-fips, cluster-api-helm-controller-fips, conftest, helm-mapkubeapis, falcoctl-fips,...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: conftest-fips, k8ssandra-client, cloudbeat, kube-arangodb, kube-arangodb-fips, consul-k8s-fips, chaos-mesh-fips, maru, tigera-operator, eksctl, rancher, linkerd2, tw, helm, kgateway-fips, cluster-api-helm-controller-fips, conftest, helm-mapkubeapis, falcoctl-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, chainctl, cloudbeat, beats-fips, kube-arangodb, docker-compose, helm-diff-fips, kube-arangodb-fips, consul-k8s-fips, opa, helm-fips, melange, eksctl, rancher, syft, tw, helm, skaffold-fips, buildkitd, cluster-api-helm-controller-fips,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, chainctl, cloudbeat, beats-fips, kube-arangodb, docker-compose, helm-diff-fips, kube-arangodb-fips, consul-k8s-fips, opa, helm-fips, melange, eksctl, rancher, syft, tw, helm, skaffold-fips, buildkitd, cluster-api-helm-controller-fips,...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-family-aws, goreleaser, docker-compose, logstash-exporter-fips, cortex, pulumi-kubernetes-operator, rclone, minio-fips, tigera-operator, vault-csi-provider, crossplane-provider-aws-firehose, frp, atlantis-fips,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: helm-operator, helm-push, cilium-cli, up, kubescape, eksctl, trivy, zot, kots, flux-helm-controller, kubevela, k9s, k8sgpt, flux-source-controller, chartmuseum, zarf...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-push, kots, trivy, zarf, helm-operator, cilium-cli, zot, flux-helm-controller, k8ssandra-client, tw, cert-manager-cmctl, eksctl, kubescape, pluto, k9s, cluster-api-helm-controller, flux-source-controller, flux, rancher-helm, chart-testing, chartmuseum, helm-docs...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: helm-operator, helm-push, cilium-cli, up, kubescape, eksctl, trivy, zot, kots, flux-helm-controller, kubevela, k9s, k8sgpt, flux-source-controller, chartmuseum, zarf...

GO-2026-5622 vulnerabilities

Vulnerabilities for packages: helm-push, buildkitd, envoy-gateway, ctop, xeol, docker-cli-buildx, helm, gatekeeper, kaniko, kots, kubescape-operator, skaffold, fuse-overlayfs-snapshotter, dagger, k8sgpt, tigera-operator, trivy, zarf, helm-operator, rancher-agent, kube-arangodb, scorecard, zot,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: helm-push, buildkitd, envoy-gateway, ctop, xeol, docker-cli-buildx, helm, kaniko, kots, kubescape-operator, skaffold, fuse-overlayfs-snapshotter, dagger, k8sgpt, trivy, zarf, helm-operator, cilium-cli, opa, zot, headlamp, manifest-tool, flux-helm-controller,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: helm-push, buildkitd, envoy-gateway, ctop, xeol, docker-cli-buildx, helm, kaniko, kots, kubescape-operator, skaffold, fuse-overlayfs-snapshotter, dagger, k8sgpt, trivy, zarf, helm-operator, cilium-cli, opa, zot, headlamp, manifest-tool, flux-helm-controller,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-push, envoy-gateway, kots, k8sgpt, trivy, zarf, helm-operator, cilium-cli, zot, flux-helm-controller, k8ssandra-client, kargo, tw, linkerd2, cert-manager-cmctl, eksctl, pluto, cerbos, k9s, cluster-api-helm-controller, flux-source-controller, rancher-helm, istio,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-rds, step, spark-operator, cluster-api-ipam-provider-in-cluster, crossplane-provider-aws-kinesis, crossplane-provider-aws-elasticache, gatekeeper, helm, metacontroller, aactl, esbuild, nri-nginx, sonobuo...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: emissary, spark-operator, buildkitd, dgraph, falcoctl, ini-file, aactl, mongo-tools, prometheus, k8sgpt, nri-nginx, kube-bench, mockgen, cilium-cli, opa, kubecolor, zot, aws-eks-pod-identity-agent, envconsul, cluster-api-azure-controller, kpt, oauth2-proxy,...