CLEANSTART-2026-VP35771 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-QV19791 Security fix for GHSA-gcjh-h69q-9w9g applied in: external-secrets-operator-fips 2.12.0-r1, flux-helm-controller 1.6.4-r1

GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VN99750 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-AH23737 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, helm-set-status, manifest-tool, flux-helm-controller, cluster-api-helm-controller, maru, opentofu, xeol, k9s, cert-manager-cmctl, kube-arangodb, kargo, helm-mapkubeapis, rancher-helm, k8sgpt, helm-push, gitness...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, helm-set-status, manifest-tool, flux-helm-controller, cluster-api-helm-controller, maru, opentofu, xeol, k9s, cert-manager-cmctl, kube-arangodb, kargo, helm-mapkubeapis, rancher-helm, k8sgpt, helm-push, gitness...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: eksctl, helm-set-status, steampipe, grype, wolfictl, k3s, kubescape, fuse-overlayfs-snapshotter, xeol, nerdctl, syft, cluster-api-helm-controller, zarf, k9s, neuvector-scanner, skaffold, kargo, spegel, scorecard, falco-no-driver, helm-operator, kube-arangodb,...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, helm-set-status, manifest-tool, flux-helm-controller, cluster-api-helm-controller, maru, opentofu, xeol, k9s, cert-manager-cmctl, kube-arangodb, kargo, helm-mapkubeapis, rancher-helm, k8sgpt, helm-push, gitness...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, kyverno-notation-aws, hubble-ui, grafana, kapp-controller, kyverno, openbao, k3s, rancher-system-agent, pulumi-kubernetes-operator, cluster-api-azure-controller, flux-kustomize-controller, kubescape, gitlab-kas, spqr, caddy,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, k9s, linkerd2, flux-helm-controller-fips, zarf, cert-manager-cmctl, envoy-gateway-fips, cerbos-fips, k8ssandra-client, chart-testing-fips, flux-fips, harbor-fips, chart-testing, helm-docs, envoy-gateway, helm-operator-fips, flux-source-controller,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: cilium-cli, eksctl, helm-operator, flux-helm-controller, flux-source-controller, k9s, zarf, kubescape, zot, k8sgpt, up, trivy, kubevela, kots, helm-push, chartmuseum...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: cilium-cli, eksctl, helm-operator, flux-helm-controller, flux-source-controller, k9s, zarf, kubescape, zot, k8sgpt, up, trivy, kubevela, kots, helm-push, chartmuseum...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: zarf-fips, cert-manager-cmctl, kube-arangodb-fips, oras-fips, vcluster, argo-cd, tigera-operator-fips, rancher, drone, trivy-fips, cluster-api-helm-controller-fips, consul-k8s, helm-operator, cert-manager-cmctl-fips, drone-fips, kube-mgmt-fips, kubescape-server-fips,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: dkron, flux-source-watcher, grafana-operator-fips, cert-manager-fips, go, flux-operator, flux-fips, nova, victoriametrics-fips, omnictl-multiarch, flux-source-controller, grafana-operator, flux-image-automation-controller, steampipe, podinfo, gotenberg, terragrunt,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: dkron, flux-source-watcher, grafana-operator-fips, cert-manager-fips, go, flux-operator, flux-fips, nova, victoriametrics-fips, omnictl-multiarch, flux-source-controller, grafana-operator, flux-image-automation-controller, steampipe, podinfo, gotenberg, terragrunt,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: docker-cli, ingress-nginx-controller-fips, cert-manager-cmctl, kube-arangodb-fips, kyverno-policy-reporter, terraform-provider-databricks, prometheus-adapter, kubernetes-dashboard, rook-fips, fulcio-fips, calico, prometheus-node-exporter-fips, tetragon,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: skaffold, cert-manager-cmctl, scorecard, kyverno-policy-reporter, prometheus-adapter, kubernetes-dashboard, helm-docs, k3d, tekton-chains, temporal-ui-server, external-secrets-fips, vexctl, fulcio-fips, calico, velero-fips, crossplane-provider-azure-storage,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: eksctl, flux-source-controller, flux-helm-controller, helm-operator, zarf, k9s, chartmuseum, kubevela, trivy, cilium-cli, k8sgpt, kubescape, up, helm-push, zot, kots...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, tw, kubescape, flux, k8ssandra-client, cluster-api-helm-controller, zarf, k9s, cert-manager-cmctl, pluto, flux-source-controller, flux-helm-controller, helm-operator, chartmuseum, chart-testing, helm-docs, rancher-helm, trivy, cilium-cli, helm-push, zot, kots...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: eksctl, flux-source-controller, flux-helm-controller, helm-operator, zarf, k9s, chartmuseum, kubevela, trivy, cilium-cli, k8sgpt, kubescape, up, helm-push, zot, kots...