CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, configmap-reload, croc, mockery, k8ssandra-operator, openbao-k8s, authservice, neuvector-dbgen, telegraf, cluster-autoscaler, manifest-tool, kube-arangodb, mountpoint-s3-csi-driver, terraform-provider-aws, azure-service-operato...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: snyk-cli, chisel, mockery, pluto, metrics-agent, kubelet-csr-approver, src, temporal, kube-metrics-adapter, postgres-operator, telegraf, thanos-operator, grafana-pyroscope, kserve-rest-proxy, mountpoint-s3-csi-driver, rabbitmq-messaging-topology-operator,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: snyk-cli, chisel, mockery, pluto, metrics-agent, kubelet-csr-approver, src, temporal, kube-metrics-adapter, postgres-operator, telegraf, thanos-operator, grafana-pyroscope, kserve-rest-proxy, mountpoint-s3-csi-driver, rabbitmq-messaging-topology-operator,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver-fips, kube-fluentd-operator, eck-operator-fips, pulumi-kubernetes-operator, grafana-pyroscope, grpcurl-fips, nvidia-nsight-compute-13.1, whereabouts-fips, crossplane-provider-sql-fips, dataplaneapi-fips, promxy-fips,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, lazydocker, pluto, nri-memcached, src, caddy, kubernetes-csi-driver-hostpath, cis-operator, fulcio, rancher-system-upgrade-controller, glow, cerbos, thanos-operator, grafana-pyroscope, kubernetes-csi-driver-nfs,...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, configmap-reload, croc, nri-cassandra, mockery, distribution, k8ssandra-operator, openbao-k8s, thanos, velero-plugin-for-microsoft-azure, neuvector-dbgen, docker-compose, crossplane-provider-aws, cluster-autoscaler, wuzz, podma...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, pulumi-kubernetes-operator, melange, timoni, crossplane-provider-aws, cortex, docker-credential-acr-env, gosu, secrets-store-csi-driver, govulncheck, http-echo, sonobuoy, q, git-lfs, ctop, capslock, multus-cni-fips, crane,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: grype, buf, neuvector-scanner, syft, docker-compose, cri-tools, melange, helm-push, policy-controller, harbor-scanner-trivy, k3d, kaniko, dagger, wolfictl, docker...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: docker-compose, harbor-scanner-trivy, k3d, neuvector-scanner, syft, kaniko, dagger, grype, policy-controller, wolfictl, cri-tools, docker, helm-push, melange, policy-controller-fips, harbor-scanner-trivy-fips, buf...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: docker-compose, harbor-scanner-trivy, k3d, neuvector-scanner, syft, kaniko, dagger, grype, policy-controller, wolfictl, cri-tools, docker, helm-push, melange, policy-controller-fips, harbor-scanner-trivy-fips, buf...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: grype, buf, neuvector-scanner, syft, docker-compose, cri-tools, melange, helm-push, policy-controller, harbor-scanner-trivy, k3d, kaniko, dagger, wolfictl, docker...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kubevela, cert-manager-fips, chartmuseum, k8sgpt, helm-operator, k9s, zarf, kots, flux-source-controller, cilium-cli, helm-push, eksctl, zot, kubescape, trivy, cert-manager, up, flux-helm-controller...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: zot, helm-operator, kubevela, chartmuseum, kubescape, k9s, flux-source-controller, eksctl, helm-push, k8sgpt, kots, cilium-cli, zarf, flux-helm-controller, up, trivy...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubevela, cert-manager-fips, chartmuseum, k8sgpt, helm-operator, k9s, zarf, kots, flux-source-controller, cilium-cli, helm-push, eksctl, zot, kubescape, trivy, cert-manager, up, flux-helm-controller...