GO-2024-2554 vulnerabilities

Vulnerabilities for packages: k9s, chartmuseum, cilium-cli, flux-helm-controller, zarf, k8sgpt, kubevela, zot, up, eksctl, kubescape, trivy, helm-operator, flux-source-controller, helm-push, kots...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: k9s, chartmuseum, cilium-cli, flux-helm-controller, zarf, k8sgpt, kubevela, zot, up, eksctl, kubescape, trivy, helm-operator, flux-source-controller, helm-push, kots...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, neuvector-scanner, policy-controller, dagger, k3d, policy-controller-fips, docker-compose, docker, melange, kaniko, syft, grype, wolfictl, cri-tools, buf, helm-push, harbor-scanner-trivy...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, cluster-api-helm-controller-fips, drone, zarf-fips, helm-exporter, tigera-operator, helm-push, zarf, gitlab-operator, crossplane-fips, helm-mapkubeapis, kubescape-operator, cert-manager-cmctl, gatekeeper, maru, kots,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, k9s, chartmuseum, kubescape, kots, flux-source-controller, helm-operator, flux-helm-controller, k8sgpt, helm-push, trivy, up, cilium-cli, zarf, zot...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, flux-source-controller, flux, tw, cert-manager-cmctl, rancher-helm, kubescape, helm-operator, zot, k9s, chart-testing, k8ssandra-client, kots, flux-helm-controller...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, k9s, chartmuseum, kubescape, kots, flux-source-controller, helm-operator, flux-helm-controller, k8sgpt, helm-push, trivy, up, cilium-cli, zarf, zot...

GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, kots, flux-source-controller, flux, helm-push, rancher-fleet, cilium-cli, zarf, kuma...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, kaniko, opa, helm-mapkubeapis, chartmuseum, spegel, ctop, newrelic-infrastructure-agent, helm-push, trivy, cilium-cli, falco-no-driver, nerdctl, melange, opa-envoy, zarf, k3s, neuvector-scanner, kubescape-operator, syft, cluster-api-helm-controller,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, kaniko, opa, helm-mapkubeapis, chartmuseum, spegel, ctop, newrelic-infrastructure-agent, helm-push, trivy, cilium-cli, falco-no-driver, nerdctl, melange, opa-envoy, zarf, k3s, neuvector-scanner, kubescape-operator, syft, cluster-api-helm-controller,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, kaniko, gitness, ctop, k3d, up, newrelic-infrastructure-agent, helm-push, trivy, cilium-cli, melange, flux-source-controller, helm, grype, fuse-overlayfs-snapshotter, kubescape, buildkitd, zot, kots, k8sgpt, flux-helm-controller, skaffold...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, flux-source-controller, cerbos, tw, cert-manager-cmctl, kargo, rancher-helm, helm-operator, envoy-gateway, zot, istio, k9s, chart-testing, k8ssandra-client, kots,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: dagger, kaniko, neuvector-scanner, grype, syft, harbor-scanner-trivy, k3d, wolfictl, cri-tools, docker-compose, helm-push, policy-controller, buf, melange, docker...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: supercronic, terraform-provider-sendgrid, prometheus-adapter, kube-metrics-adapter, harbor-scanner-trivy, seaweedfs, go-discover, mountpoint-s3-csi-driver, polaris, secrets-store-csi-driver-provider-azure, nri-haproxy, rancher-loglevel, snyk-cli, nri-consul, mockery,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: supercronic, terraform-provider-sendgrid, prometheus-adapter, kube-metrics-adapter, harbor-scanner-trivy, seaweedfs, go-discover, mountpoint-s3-csi-driver, polaris, secrets-store-csi-driver-provider-azure, nri-haproxy, rancher-loglevel, snyk-cli, nri-consul, mockery,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator-fips, k8sgpt, temporal-server, kube-fluentd-operator, slsa-verifier, kyverno-policy-reporter-plugins-kyverno-fips, chisel, crossplane-function-environment-configs-fips, k8s-device-plugin, amazon-cloudwatch-agent-fips, opensearch-k8s-operator...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, cloud-provider-vsphere, kubecolor, render-template, cilium-cli, polaris, cluster-api-helm-controller, nri-haproxy, cluster-api-provider-vsphere, neuvector-sigstore-interface, nri-consul, kubernetes-dashboard, aactl, argo-events,...

SUSE-SU-2025:20278-1 Security update for helm

This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: render-template, thanos, prometheus-pushgateway, kubernetes-ingress-defaultbackend, trino, dataplaneapi, kiali, grafana-rollout-operator, vt-cli, temporal-server, crane, esbuild, kserve-rest-proxy, kubernetes-dashboard-metrics-scraper,...