GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, chartmuseum, helm-operator, k9s, zarf, k8sgpt, trivy, eksctl, zot, kots, kubevela, flux-source-controller, up, cilium-cli, kubescape, helm-push...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, chartmuseum, helm-operator, k9s, zarf, k8sgpt, trivy, eksctl, zot, kots, kubevela, flux-source-controller, up, cilium-cli, kubescape, helm-push...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: wolfictl, docker-compose, harbor-scanner-trivy, dagger, harbor-scanner-trivy-fips, buf, syft, neuvector-scanner, cri-tools, melange, policy-controller, policy-controller-fips, helm-push, grype, k3d, kaniko...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-exporter-fips, k8ssandra-client, k8ssandra-client-fips, rancher-agent, helm-exporter, oras, jfrog-cli, oras-fips, tigera-operator, zarf-fips, trivy, eksctl, opentofu, falcoctl-fips, redpanda-operator, helm-operator-fips, chaos-mesh, opentofu-fips, teleport,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux, zarf, chart-testing, eksctl, cert-manager-cmctl, pluto, kubescape, helm-push, chartmuseum, flux-helm-controller, zot, flux-source-controller, k9s, tw, helm-docs, k8ssandra-client, kots, trivy, cilium-cli, cluster-api-helm-controller, helm-operator, rancher-helm...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubescape, helm-push, k9s, zarf, eksctl, chartmuseum, helm-operator, kubevela, k8sgpt, flux-helm-controller, kots, trivy, up, zot, cilium-cli, flux-source-controller...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubescape, helm-push, k9s, zarf, eksctl, chartmuseum, helm-operator, kubevela, k8sgpt, flux-helm-controller, kots, trivy, up, zot, cilium-cli, flux-source-controller...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: flux, helm-push, zarf, rancher-fleet, kots, cert-manager-cmctl, kuma, cilium-cli, flux-source-controller...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: eksctl, up, k3d, newrelic-infrastructure-agent, kubescape, helm-push, helm, gitness, k8sgpt, flux-helm-controller, kaniko, skaffold, zot, flux-source-controller, kubevela, buildkitd, fuse-overlayfs-snapshotter, kots, trivy, cilium-cli, grype, melange, ctop...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: zarf, eksctl, kubescape-operator, steampipe, cert-manager-cmctl, falco-no-driver, docker-cli-buildx, wolfictl, syft, newrelic-infrastructure-agent, gogatekeeper, kubescape, containerd, dagger, helm, helm-push, opa-envoy, chartmuseum, trivy-operator, kaniko, k8sgpt,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: zarf, eksctl, kubescape-operator, steampipe, cert-manager-cmctl, falco-no-driver, docker-cli-buildx, wolfictl, syft, newrelic-infrastructure-agent, gogatekeeper, kubescape, containerd, dagger, helm, helm-push, opa-envoy, chartmuseum, trivy-operator, kaniko, k8sgpt,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zarf, chart-testing, eksctl, cerbos, cert-manager-cmctl, pluto, helm-push, linkerd2, chartmuseum, k8sgpt, flux-helm-controller, kargo, zot, flux-source-controller, k9s, tw, helm-docs, istio, k8ssandra-client, kots, trivy, cilium-cli, cluster-api-helm-controller,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: dagger, helm-push, melange, policy-controller, kaniko, neuvector-scanner, harbor-scanner-trivy, docker-compose, k3d, wolfictl, buf, syft, cri-tools, grype...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: haproxy-ingress, chart-testing, cert-exporter, splunk-otel-collector, temporal, x509-certificate-exporter, nri-mssql, act, aactl, kyverno-policy-reporter-ui, croc, newrelic-infrastructure-agent, otel-cli, helm-push, gh, metrics-agent, gitness, dask-gateway, mc, promx...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, nri-couchbase, splunk-otel-collector, temporal, rke2-cloud-provider, k3d, nri-mssql, opentelemetry-collector-contrib, newrelic-infrastructure-agent, nvidia-container-toolkit, helm-push, rabbitmq-messaging-topology-operator,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, nri-couchbase, splunk-otel-collector, temporal, rke2-cloud-provider, k3d, nri-mssql, opentelemetry-collector-contrib, newrelic-infrastructure-agent, nvidia-container-toolkit, helm-push, rabbitmq-messaging-topology-operator,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: terraform-provider-random-fips, etcd, localstack, k8ssandra-client, aws-flb-firehose-fips, opa-envoy, kubernetes-dashboard-auth-fips, nri-mssql, falco-no-driver, node-problem-detector-fips, vendir-fips, flux-source-controller-fips, helm-operator-fips, wave-fips, plut...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: render-template, aws-eks-pod-identity-agent, tekton-chains, nri-memcached, caddy, cni-plugins, chart-testing, grafana-alloy, docker-cli-buildx, k3d, aactl, tkn, helm-push, aws-application-networking-k8s, ip-masq-agent, chartmuseum, rabbitmq-messaging-topology-operato...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: yq, cert-manager-webhook-pdns, splunk-otel-collector, temporal, x509-certificate-exporter, dagdotdev, aactl, croc, helm-push, overmind, gitness, dask-gateway, promxy, terraform, kwok, multus-cni, prometheus-alertmanager, kubernetes-release, paranoia, vexctl, mockgen,...