GO-2024-2554 vulnerabilities

Vulnerabilities for packages: eksctl, flux-source-controller, helm-operator, up, trivy, flux-helm-controller, kubescape, zot, kubevela, kots, k9s, k8sgpt, zarf, helm-push, cilium-cli, chartmuseum...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: eksctl, flux-source-controller, helm-operator, up, trivy, flux-helm-controller, kubescape, zot, kubevela, kots, k9s, k8sgpt, zarf, helm-push, cilium-cli, chartmuseum...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: policy-controller, harbor-scanner-trivy-fips, neuvector-scanner, wolfictl, policy-controller-fips, docker-compose, k3d, kaniko, cri-tools, melange, buf, grype, docker, syft, dagger, helm-push, harbor-scanner-trivy...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kyverno-fips, trivy, tigera-operator, drone-fips, oras-fips, gitlab-operator, kyverno-notation-aws-fips, k9s-fips, headlamp, gitlab-operator-fips, gitness, drone, cluster-api-helm-controller, conftest-fips, helm-exporter-fips, helm-mapkubeapis, ocm-cli-fips, kubescap...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: eksctl, helm-push, flux-source-controller, k9s, zarf, helm-operator, kubescape, chartmuseum, zot, flux-helm-controller, cilium-cli, trivy, kots, kubevela, up, k8sgpt...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k9s, helm-operator, tw, kots, k8ssandra-client, chartmuseum, zot, helm-docs, pluto, cert-manager-cmctl, helm-push, kubescape, flux, chart-testing, eksctl, zarf, rancher-helm, flux-helm-controller, cilium-cli, trivy, cluster-api-helm-controller...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: eksctl, helm-push, flux-source-controller, k9s, zarf, helm-operator, kubescape, chartmuseum, zot, flux-helm-controller, cilium-cli, trivy, kots, kubevela, up, k8sgpt...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: kuma, helm-push, flux-source-controller, zarf, cilium-cli, kots, flux, rancher-fleet, cert-manager-cmctl...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, flux-source-controller, helm-mapkubeapis, k9s, kaniko, helm-operator, tw, kots, docker-compose, k8ssandra-client, k8sgpt, steampipe, spegel, ctop, fuse-overlayfs-snapshotter, k3s, kargo, chartmuseum, grype, dagger, helm, gogatekeeper,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, flux-source-controller, helm-mapkubeapis, k9s, kaniko, helm-operator, tw, kots, docker-compose, k8ssandra-client, k8sgpt, steampipe, spegel, ctop, fuse-overlayfs-snapshotter, k3s, kargo, chartmuseum, grype, dagger, helm, gogatekeeper,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kaniko, kots, k8sgpt, gitness, ctop, fuse-overlayfs-snapshotter, grype, helm, skaffold, zot, kubevela, helm-push, kubescape, melange, up, eksctl, buildkitd, k3d, flux-helm-controller, cilium-cli, trivy, newrelic-infrastructure-agent...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: flux-source-controller, k9s, linkerd2, helm-operator, tw, kots, k8ssandra-client, k8sgpt, kargo, chartmuseum, zot, helm-docs, cluster-api-helm-controller, rancher-fleet, pluto, cert-manager-cmctl, helm-push, cerbos, chart-testing, eksctl, zarf, envoy-gateway,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, cri-tools, harbor-scanner-trivy, helm-push, kaniko, wolfictl, syft, grype, buf, dagger, k3d, melange, policy-controller, docker, docker-compose...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: runc, spark-operator, kube-vip, kubeflow, apko, rabbitmq-messaging-topology-operator, gitlab-pages, pdfcpu, policy-controller, temporal-ui-server, kubescape-operator, terraform-provider-tls, controller-gen, kapp, rancher-fleet, malcontent,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: runc, rancher-loglevel, sftpgo-plugin-kms, kubeflow, k8ssandra-client, k8sgpt, terraform-provider-google, rabbitmq-messaging-topology-operator, kubeflow-pipelines, policy-controller, skaffold, opencost, timescaledb-tune, nri-f5, sftpgo-plugin-eventstore, nova,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: runc, rancher-loglevel, sftpgo-plugin-kms, kubeflow, k8ssandra-client, k8sgpt, terraform-provider-google, rabbitmq-messaging-topology-operator, kubeflow-pipelines, policy-controller, skaffold, opencost, timescaledb-tune, nri-f5, sftpgo-plugin-eventstore, nova,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: hydra-fips, spicedb-operator, cloud-provider-azure-fips, cue-fips, nvidia-nsight-compute-13.0, kubeflow, velero-plugin-for-aws-fips, slsa-verifier, gitness, prometheus-adapter, prometheus-mysqld-exporter-fips, polaris, sftpgo-plugin-eventsearch, etcd,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: cis-operator, cni-plugins, kapp-controller, kubernetes-csi-driver-hostpath, spark-operator, wire-go, cluster-api-azure-controller, k8sgpt, kyverno-notation-aws, ini-file, rabbitmq-messaging-topology-operator, gptscript, ratify, kubernetes-dashboard-api, lazydocker,...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: runc, minify, sftpgo-plugin-kms, kube-vip, wire-go, ini-file, rabbitmq-messaging-topology-operator, src-fingerprint, pdfcpu, policy-controller, temporal-ui-server, controller-gen, kapp, capslock, kwok, kind, tflint, yq, dataplaneapi, k9s, kubernetes,...