CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, kubernetes-csi-external-snapshotter, infinispan-operator, kubernetes-dashboard-metrics-scraper, eksctl, mc, flux-operator, kserve-modelmesh-serving, newrelic-nri-statsd, gatekeeper, kubeflow-katib, sftpgo,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: kiali, php-fpmexporter, infinispan-operator, telegraf, spicedb-operator, rabbitmq-messaging-topology-operator, kserve-rest-proxy, terraform-mcp-server, pulumi-kubernetes-operator, opentelemetry-collector, opentofu, postgres-operator, gatekeeper, kubeflow-katib,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: kiali, php-fpmexporter, infinispan-operator, telegraf, spicedb-operator, rabbitmq-messaging-topology-operator, kserve-rest-proxy, terraform-mcp-server, pulumi-kubernetes-operator, opentelemetry-collector, opentofu, postgres-operator, gatekeeper, kubeflow-katib,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: kube-bench, custom-pod-autoscaler-fips, opa, terraform-provider-azuread, rabbitmq-messaging-topology-operator, prometheus-beat-exporter-fips, snyk-cli, flux-kustomize-controller-fips, velero-plugin-for-aws-fips, karma-fips, gatekeeper-fips, ko-fips,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: dgraph, gptscript, undock, eksctl, consul-k8s, glow, rabbitmq-messaging-topology-operator, flux-operator, aws-privateca-issuer, rancher-agent, terraform-mcp-server, rclone, opentofu, blob-csi, k3s, docker-cli, cerbos, cilium-cli, aws-otel-collector, gatekeeper,...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, gptscript, kubernetes-dashboard-metrics-scraper, kserve-modelmesh-serving, newrelic-nri-statsd, kubeflow-katib, metrics-server, sftpgo, kubernetes-dashboard-web, kwok, gobump, tfsec, dockerize, go-bindata, kpt, overmind,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: trivy, caddy, fulcio, http-echo, kube-bench, opa, kube-state-metrics, git-lfs, prometheus-beat-exporter-fips, snyk-cli, metacontroller, ko-fips, newrelic-nri-statsd, external-secrets-fips, cadvisor, sonobuoy, vertical-pod-autoscaler-fips, prometheus-pushgateway,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: melange, k3d, syft, wolfictl, dagger, policy-controller-fips, docker, harbor-scanner-trivy-fips, harbor-scanner-trivy, helm-push, policy-controller, grype, neuvector-scanner, buf, kaniko, docker-compose, cri-tools...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, docker, cri-tools, policy-controller, helm-push, buf, kaniko, grype, harbor-scanner-trivy, melange, k3d, syft, dagger, docker-compose, wolfictl...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: melange, k3d, syft, wolfictl, dagger, policy-controller-fips, docker, harbor-scanner-trivy-fips, harbor-scanner-trivy, helm-push, policy-controller, grype, neuvector-scanner, buf, kaniko, docker-compose, cri-tools...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, docker, cri-tools, policy-controller, helm-push, buf, kaniko, grype, harbor-scanner-trivy, melange, k3d, syft, dagger, docker-compose, wolfictl...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: cilium-cli, cert-manager, trivy, kots, zarf, chartmuseum, eksctl, flux-source-controller, k8sgpt, helm-operator, helm-push, up, zot, kubescape, kubevela, k9s, cert-manager-fips, flux-helm-controller...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: cilium-cli, kubevela, flux-source-controller, k9s, chartmuseum, zarf, kots, eksctl, helm-push, up, trivy, flux-helm-controller, kubescape, zot, k8sgpt, helm-operator...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: cilium-cli, cert-manager, trivy, kots, zarf, chartmuseum, eksctl, flux-source-controller, k8sgpt, helm-operator, helm-push, up, zot, kubescape, kubevela, k9s, cert-manager-fips, flux-helm-controller...