GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: mattermost, ko, secrets-store-csi-driver-provider-aws, cloudnative-pg, emissary, amazon-cloudwatch-agent-operator, kube-state-metrics, go-discover, secrets-store-csi-driver, terraform-provider-aws, nerdctl, traefik, grpcurl, k8sgpt, pulumi-language-java,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: mattermost, ko, secrets-store-csi-driver-provider-aws, cloudnative-pg, emissary, amazon-cloudwatch-agent-operator, kube-state-metrics, go-discover, secrets-store-csi-driver, terraform-provider-aws, nerdctl, traefik, grpcurl, k8sgpt, pulumi-language-java,...

CLEANSTART-2026-NS41924 Within HostnameError

Multiple security vulnerabilities affect the helm-operator package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-TS12850 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RD08428 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the helm-operator-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: zarf, headlamp, flux-helm-controller, eksctl, pluto, helm-docs, kots, helm-set-status, rancher-fleet, helm-mapkubeapis, flux-source-controller, k8ssandra-client, kubescape, trivy, trivy-operator, tw, kargo, flux, envoy-gateway, k8sgpt, helm-push, nova, chart-testing,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: zarf, headlamp, flux-helm-controller, eksctl, pluto, helm-docs, kots, helm-set-status, rancher-fleet, helm-mapkubeapis, flux-source-controller, k8ssandra-client, kubescape, trivy, trivy-operator, kargo, flux, envoy-gateway, k8sgpt, helm-push, nova, chart-testing, k9s...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: zarf, headlamp, flux-helm-controller, eksctl, pluto, helm-docs, kots, helm-set-status, rancher-fleet, helm-mapkubeapis, flux-source-controller, k8ssandra-client, kubescape, trivy, trivy-operator, kargo, flux, envoy-gateway, k8sgpt, helm-push, nova, chart-testing, k9s...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: zarf, headlamp, flux-helm-controller, eksctl, pluto, helm-docs, kots, helm-set-status, rancher-fleet, helm-mapkubeapis, flux-source-controller, k8ssandra-client, kubescape, trivy, trivy-operator, tw, kargo, flux, envoy-gateway, k8sgpt, helm-push, nova, chart-testing,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: gofumpt, spire-server, hugo-extended, nuclei, cloud-provider-azure, trivy-fips, amass, fixuid, cargobump, tofu-controller, loki-fips, databricks-cli, kapp-controller-fips, karma, spegel-fips, dapr-fips, kyverno, dragonfly-operator, fluxcd-kustomize-mutating-webhook,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, eksctl, pluto, helm-docs, kots, flux-source-controller, k8ssandra-client, kubescape, trivy, tw, flux, helm-push, chart-testing, k9s, cluster-api-helm-controller, zot, helm-operator, chartmuseum, cilium-cli, cert-manager-cmctl, rancher-helm...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, eksctl, pluto, helm-docs, kots, flux-source-controller, k8ssandra-client, kubescape, trivy, tw, flux, helm-push, chart-testing, k9s, cluster-api-helm-controller, zot, helm-operator, chartmuseum, cilium-cli, cert-manager-cmctl, rancher-helm...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, eksctl, pluto, helm-docs, kots, flux-source-controller, k8ssandra-client, kubescape, trivy, tw, flux, helm-push, chart-testing, k9s, cluster-api-helm-controller, zot, helm-operator, chartmuseum, cilium-cli, cert-manager-cmctl, rancher-helm...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, eksctl, pluto, helm-docs, kots, flux-source-controller, k8ssandra-client, kubescape, trivy, tw, flux, helm-push, chart-testing, k9s, cluster-api-helm-controller, zot, helm-operator, chartmuseum, cilium-cli, cert-manager-cmctl, rancher-helm...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, cert-manager-cmctl, trivy-fips, chartmuseum-fips, k8ssandra-client-fips, helm-operator-fips, harbor-fips, consul-k8s-fips, chart-testing, flux-helm-controller, kots, pluto, cilium-cli, zarf, cert-manager-cmctl-fips, chart-testing-fips,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, cert-manager-cmctl, trivy-fips, chartmuseum-fips, k8ssandra-client-fips, helm-operator-fips, harbor-fips, consul-k8s-fips, chart-testing, flux-helm-controller, kots, pluto, cilium-cli, zarf, cert-manager-cmctl-fips, chart-testing-fips,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, eksctl, wolfictl, neuvector-scanner, kots, grype, rancher-fleet, buildkitd, osv-scanner, ctop, flux-source-controller, k8ssandra-client, kubescape, trivy, fuse-overlayfs-snapshotter, nerdctl, docker-compose, opa-envoy, spegel, kargo,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, eksctl, wolfictl, neuvector-scanner, kots, grype, rancher-fleet, buildkitd, osv-scanner, ctop, flux-source-controller, k8ssandra-client, kubescape, trivy, fuse-overlayfs-snapshotter, nerdctl, docker-compose, opa-envoy, spegel, kargo,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: govulncheck, prometheus-alertmanager, yq, speedtest-go, up, go-md2man, gke-gcloud-auth-plugin, secrets-store-csi-driver-provider-aws, gosu, dataplaneapi, kor, aws-load-balancer-controller, nri-rabbitmq, buildkitd, kube-state-metrics, bazelisk, local-path-provisioner,...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: spire-server, aws-application-networking-k8s, cloud-provider-azure, nuclei, linkerd2-proxy-init, secrets-store-csi-driver-provider-gcp-fips, kapp-controller-fips, prometheus-adapter-fips, karma, prometheus-mongodb-exporter-fips, src-fingerprint, vault-k8s-fips,...