GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kots, eksctl, kubescape, helm-operator, up, chartmuseum, k9s, cilium-cli, flux-helm-controller, helm-push, k8sgpt, zot, trivy, kubevela, zarf, flux-source-controller...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kots, eksctl, kubescape, helm-operator, up, chartmuseum, k9s, cilium-cli, flux-helm-controller, helm-push, k8sgpt, zot, trivy, kubevela, zarf, flux-source-controller...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: melange, buf, grype, dagger, docker-compose, harbor-scanner-trivy, wolfictl, k3d, policy-controller, policy-controller-fips, harbor-scanner-trivy-fips, helm-push, syft, kaniko, cri-tools, neuvector-scanner...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, falcoctl, consul-k8s, cert-manager-cmctl-fips, kubescape, ocm-cli-fips, oras-fips, gogatekeeper, ocm-cli, redpanda-operator, falcoctl-fips, xeol, k8ssandra-client-fips, cloudbeat-fips, steampipe, gitlab-operator, k9s,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux, cert-manager-cmctl, helm-docs, helm-operator, pluto, k8ssandra-client, k9s, helm-push, cilium-cli, trivy, chartmuseum, chart-testing, cluster-api-helm-controller, flux-helm-controller, kubescape, tw, zot, flux-source-controller, eksctl, kots, zarf...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubescape, kubevela, up, trivy, chartmuseum, zot, flux-source-controller, k8sgpt, eksctl, k9s, kots, helm-push, flux-helm-controller, zarf, cilium-cli, helm-operator...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubescape, kubevela, up, trivy, chartmuseum, zot, flux-source-controller, k8sgpt, eksctl, k9s, kots, helm-push, flux-helm-controller, zarf, cilium-cli, helm-operator...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: flux-source-controller, rancher-fleet, cilium-cli, kots, flux, zarf, cert-manager-cmctl, kuma, helm-push...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k3d, skaffold, helm, newrelic-infrastructure-agent, kubevela, buildkitd, fuse-overlayfs-snapshotter, melange, grype, kaniko, helm-push, cilium-cli, trivy, up, ctop, k8sgpt, gitness, flux-helm-controller, kubescape, zot, flux-source-controller, eksctl, kots...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: headlamp, kargo, skaffold, rancher-helm, spegel, rancher-fleet, helm, trivy-operator, nerdctl, cert-manager-cmctl, manifest-tool, syft, helm-operator, newrelic-infrastructure-agent, kubevela, kubescape-operator, buildkitd, k8ssandra-client, k9s, dagger,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: headlamp, kargo, skaffold, rancher-helm, spegel, rancher-fleet, helm, trivy-operator, nerdctl, cert-manager-cmctl, manifest-tool, syft, helm-operator, newrelic-infrastructure-agent, kubevela, kubescape-operator, buildkitd, k8ssandra-client, k9s, dagger,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos, kargo, rancher-helm, rancher-fleet, cert-manager-cmctl, helm-docs, helm-operator, pluto, k8ssandra-client, k9s, helm-push, cilium-cli, trivy, chartmuseum, chart-testing, k8sgpt, cluster-api-helm-controller, flux-helm-controller, istio, linkerd2, tw, zot,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: k3d, policy-controller, dagger, helm-push, harbor-scanner-trivy, docker-compose, melange, neuvector-scanner, grype, cri-tools, syft, wolfictl, kaniko, buf...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, atlantis, ipfs-cluster, spqr, consul-k8s, kubernetes, cilium-cli, conjur-cli, external-dns, aws-flb-cloudwatch, harbor, metacontroller, witness, openbao, ingress-nginx-controller, step-issuer, kwok, pdfcpu, litestream, eksctl, envoy-gateway,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, kubernetes-csi-external-resizer, headlamp, kubelet-csr-approver, prometheus-operator, ipfs-cluster, spqr, chisel, helm-operator, newrelic-infrastructure-agent, pluto, frp, seaweedfs, kube-fluentd-operator, terraform-provider-azuread,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, kubernetes-csi-external-resizer, headlamp, kubelet-csr-approver, prometheus-operator, ipfs-cluster, spqr, chisel, helm-operator, newrelic-infrastructure-agent, pluto, frp, seaweedfs, kube-fluentd-operator, terraform-provider-azuread,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env-fips, hubble-ui-backend-fips, trillian-fips, gogatekeeper, chisel-fips, longhorn-manager-fips, mockery, secrets-store-csi-driver-provider-azure, keda, kubernetes-csi-node-driver-registrar-fips, task, octo-sts, go-discover,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: headlamp, controller-gen, prometheus-operator, ipfs-cluster, grafana-alloy, helm-operator, docker-credential-gcr, aws-application-networking-k8s, pluto, steampipe, cni-plugins, cilium-cli, fulcio, neuvector-sigstore-interface, mockgen, nova, prometheus, kapp,...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: atlantis, kubevela, kubernetes, mockgen, aws-flb-cloudwatch, ferretdb, metacontroller, kwok, pdfcpu, litestream, nri-cassandra, sonobuoy, flux-kustomize-controller, thanos-operator, opensearch-k8s-operator, gitsign, grpcurl, helm, nuclei, smarter-device-manager,...