320 matches found
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: envoy-gateway, commercial-chainloop-backend, argo-workflows, pulumi-language-yaml, cerbos, traefik-fips, gitlab-rails-ce, vault-secrets-operator, trivy, loki, cosign, kbld-fips, karpenter-fips, kubescape, amazon-ecs-cni-plugins-fips, syncthing-fips, xeol,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: envoy-gateway, crossplane-provider-aws-ssm-fips, json-exporter, commercial-chainloop-backend, kubernetes-csi-driver-hostpath, spire-controller-manager-fips, jobset-fips, argo-workflows, longhorn-manager, mcp-grafana, pulumi-language-yaml, cis-operator, cerbos,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: envoy-gateway, commercial-chainloop-backend, argo-workflows, pulumi-language-yaml, cerbos, traefik-fips, gitlab-rails-ce, vault-secrets-operator, trivy, loki, cosign, kbld-fips, karpenter-fips, kubescape, amazon-ecs-cni-plugins-fips, syncthing-fips, xeol,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: envoy-gateway, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, json-exporter, pluto, commercial-chainloop-backend, kubernetes-csi-driver-hostpath, spire-controller-manager-fips, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: envoy-gateway, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, json-exporter, pluto, commercial-chainloop-backend, spire-controller-manager-fips, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows, jobset-fips, longhorn-manager,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: spire-controller-manager-fips, jobset-fips, configmap-reload-fips, argo-workflows, longhorn-manager, mcp-grafana, openbao-k8s, pulumi-language-yaml, cerbos, crossplane-provider-aws-acm-fips, kubernetes-dashboard-web, crossplane-aws-provider,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: envoy-gateway, crossplane-provider-aws-ssm-fips, amazon-vpc-cni-plugins-fips, json-exporter, pluto, commercial-chainloop-backend, kubernetes-csi-driver-hostpath, spire-controller-manager-fips, govulncheck, aws-sigv4-proxy-fips, configmap-reload-fips, argo-workflows,...
CLEANSTART-2026-YG73853 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2
Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-PH5J-38MG-J6HP vulnerabilities
Vulnerabilities for packages: stakater-reloader, victoriametrics-cluster, victorialogs-fips, grafana-operator-fips, pluto, temporal-fips, loki-fips, terragrunt, cert-manager-fips, grafana-operator, gotenberg, flux-source-watcher, aws-ebs-csi-driver, grafana-fips, flux-image-reflector-controller,...
CVE-2026-27137 vulnerabilities
Vulnerabilities for packages: stakater-reloader, victoriametrics-cluster, victorialogs-fips, grafana-operator-fips, pluto, temporal-fips, loki-fips, terragrunt, cert-manager-fips, grafana-operator, gotenberg, flux-source-watcher, aws-ebs-csi-driver, grafana-fips, flux-image-reflector-controller,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: terraform-provider-grafana-fips, json-exporter, kubernetes-csi-driver-hostpath, spire-controller-manager-fips, skopeo-fips, jobset-fips, mcp-grafana, longhorn-manager, pulumi-language-yaml, cerbos, kube-metrics-adapter, aws-load-balancer-controller,...
CVE-2026-25541 vulnerabilities
Vulnerabilities for packages: rustup, wadm, cargo-c, qdrant, tealdeer, mountpoint-s3, zellij, pgcat, kdash, buck2, zola, samply, pixi, wash, shadowsocks-rust, ntpd-rs, uv, ztunnel, atuin, linkerd2, linkerd-extension-init, mdbook, wasmtime, cargo-audit, py3-xet-core, netavark, berg, zed,...
GHSA-434X-W66G-QW3R vulnerabilities
Vulnerabilities for packages: rustup, wadm, cargo-c, qdrant, tealdeer, mountpoint-s3, zellij, pgcat, kdash, buck2, zola, samply, pixi, wash, shadowsocks-rust, ntpd-rs, uv, ztunnel, atuin, linkerd2, linkerd-extension-init, mdbook, wasmtime, cargo-audit, py3-xet-core, netavark, berg, zed,...
GHSA-434X-W66G-QW3R vulnerabilities
Vulnerabilities for packages: qdrant, sccache, xh, mdbook, nushell, linkerd2, uv, sqlx, guestproxyagent, sentry-cli, tealdeer, garage, linkerd-await, topgrade, pgcat, rustup, linkerd2-proxy, linkerd-extension-init, geckodriver, cargo-c, bootc, kdash, zellij, sdp-k8s-injector, yazi, buck2, komodo,...
CLEANSTART-2026-BT39952 Moby is an open source container framework developed by Docker Inc
Multiple security vulnerabilities affect the consul-k8s-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...
CLEANSTART-2026-ME47927 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...
CLEANSTART-2026-BQ46815 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the consul-k8s-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-PA85871 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the consul-k8s-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...