CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, grafana-operator, newrelic-infrastructure-agent, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, vault-env, polaris, nri-elasticsearch, flux-source-controller, sonobuoy, regclient,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: nri-apache, policy-controller, headlamp, newrelic-infrastructure-agent, pgtimetable, ko, kubeflow, kubelet-csr-approver, kubernetes-event-exporter, gogatekeeper, rancher-telemetry, terraform-mcp-server, harbor-scanner-trivy, osv-scanner, polaris, rancher-system-agent...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: nri-apache, policy-controller, headlamp, newrelic-infrastructure-agent, pgtimetable, ko, kubeflow, kubelet-csr-approver, kubernetes-event-exporter, gogatekeeper, rancher-telemetry, terraform-mcp-server, harbor-scanner-trivy, osv-scanner, polaris, rancher-system-agent...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, kubo-fips, keda-fips, temporal-server, dragonfly-operator-fips, nvidia-nsight-compute-13.2, rook-fips, azuredisk-csi-fips, cluster-api-aws-controller-fips, gpu-operator-fips, gatekeeper-fips, protoc-gen-go, mkcert, grafana-pyroscope,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kapp-controller, nri-apache, nri-redis, buildkitd, headlamp, docker-cli-buildx, kor, cni-plugins, dive, ko, step-kms-plugin, kyverno-notation-aws, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, helm-set-status, k3s, chart-testing,...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, grafana-operator, cni-plugins, fluent-bit-plugin-loki, mage, flux-source-controller, sonobuoy, regclient, kaniko, cloudnative-pg, multus-cni, secrets-store-csi-driver-provider-azure, velero-plugin-for-csi, litefs, skopeo, falco-exporter,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubernetes-dashboard-fips, nri-prometheus, caddy-fips, overmind, certificate-transparency-fips, opa, chainctl, fulcio, timoni, terraform-docs, secrets-store-csi-driver-provider-gcp, falcoctl, cortex-fips, rclone, kube-bench, prometheus-pushgateway,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: grype, helm-push, melange, neuvector-scanner, buf, policy-controller-fips, syft, wolfictl, docker-compose, cri-tools, harbor-scanner-trivy, harbor-scanner-trivy-fips, dagger, kaniko, k3d, policy-controller, docker...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: docker, kaniko, melange, policy-controller, dagger, grype, k3d, syft, wolfictl, helm-push, cri-tools, neuvector-scanner, harbor-scanner-trivy, buf, docker-compose...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: grype, helm-push, melange, neuvector-scanner, buf, policy-controller-fips, syft, wolfictl, docker-compose, cri-tools, harbor-scanner-trivy, harbor-scanner-trivy-fips, dagger, kaniko, k3d, policy-controller, docker...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: docker, kaniko, melange, policy-controller, dagger, grype, k3d, syft, wolfictl, helm-push, cri-tools, neuvector-scanner, harbor-scanner-trivy, buf, docker-compose...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: cilium-cli, k8sgpt, helm-push, trivy, zarf, eksctl, kubescape, kots, chartmuseum, flux-helm-controller, kubevela, up, helm-operator, flux-source-controller, zot, k9s...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: k8sgpt, cilium-cli, flux-source-controller, kubevela, eksctl, flux-helm-controller, k9s, up, chartmuseum, helm-push, zot, helm-operator, zarf, kots, kubescape, trivy...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: cilium-cli, k8sgpt, helm-push, trivy, zarf, eksctl, kubescape, kots, chartmuseum, flux-helm-controller, kubevela, up, helm-operator, flux-source-controller, zot, k9s...