CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: rustup, sdp-k8s-injector, valkey-ldap, sccache, deno, typst, vector, ztunnel-fips, rpm-sequoia, guestproxyagent, bootc, rustls-openssl-client, sqlx, komodo, sentry-cli...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: rustup, sdp-k8s-injector, valkey-ldap, sccache, deno, typst, vector, ztunnel-fips, rpm-sequoia, guestproxyagent, bootc, rustls-openssl-client, sqlx, komodo, sentry-cli...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubevela, eksctl, tigera-operator, falcoctl, hubble, rancher-agent, trivy, cilium-cli, datadog-agent, zarf, k3s, percona-server-mongodb-operator, headlamp, cilium, cert-manager-istio-csr, infinispan-operator, kpt, aws-node-termination-handler, kubernetes-dashboard-ap...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, k8s-driver-manager-fips, k8sgpt, cloudbeat, velero, commercial-grafana, plugin-barman-cloud, hubble, zarf-fips, rke2-runtime, gitlab-kas-fips, tigera-operator, eck-operator-fips, zarf, sonobuoy, kubernetes-dashboard-api, kots,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: tigera-operator, eksctl, helm-mapkubeapis, chartmuseum, helm-docs, helm-push, trivy, cilium-cli, pluto, zarf, cluster-api-helm-controller, headlamp, flux-source-controller, cerbos, flux, tw, kuma, cert-manager-cmctl, kubescape, helm-operator, consul-k8s, envoy-gatewa...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: rancher-fleet, chart-testing, k9s-fips, kubescape-server-fips, linkerd2-fips, cloudbeat, trivy-fips, chaos-mesh, cluster-api-helm-controller-fips, zot, consul-k8s, chart-testing-fips, headlamp-fips, flux, istio, headlamp, helm-set-status, k8ssandra-client, cerbos-fip...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: go, aws-privateca-issuer, supercronic, hubble, victoriametrics, newrelic-infra-operator, mariadb-operator, flux-image-automation-controller, envoy-ratelimit, pluto, tailscale, gh, spire-server, smarter-device-manager, stakater-reloader, local-path-provisioner,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: go, external-dns, fscrypt, gitaly, hubble, aws-flb-cloudwatch, cilium-cli, falco-no-driver, nerdctl, datadog-agent, spire-server, k3s, chezmoi, libnvidia-container, prometheus-operator, cilium, snyk-cli, k8s-device-plugin, flux, kube-fluentd-operator, argo-cd,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cue, kyverno-policy-reporter-ui, cilium-cli, prometheus-pushgateway, gh, kubernetes-ingress-defaultbackend, polaris, cluster-api-provider-vsphere, buildah, docker-machine-driver-linode, fluxcd-kustomize-mutating-webhook, dataplaneapi, mattermost,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kafka-proxy, cloud-provider-vsphere, cue, falco-exporter, terraform-provider-sendgrid, prometheus-adapter, apache-exporter, kyverno-policy-reporter-ui, step-ca, cilium-cli, prometheus-pushgateway, apisix-ingress-controller, golangci-lint, gh, seaweedfs, spire-server,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, tkn, gh, slsa-verifier, net-kourier, k8s-device-plugin, witness, hubble, ipfs-cluster, envconsul-fips, qemu-guesthelper...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, tkn, gh, slsa-verifier, net-kourier, k8s-device-plugin, witness, hubble, ipfs-cluster, envconsul-fips, qemu-guesthelper...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips, tkn, gh, slsa-verifier,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gitleaks, cluster-api-provider-vsphere, cargobump, virt-handler-fips, cadence-fips, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, chisel, amazon-cloudwatch-agent-fips, hubble, ucd, local-path-provisioner-fips, nri-elasticsearch,...

CLEANSTART-2026-YG73853 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster-fips, victorialogs-fips, cluster-autoscaler-fips, aws-load-balancer-controller-fips, dkron, gotenberg, flux-operator-fips, stakater-reloader, localstack, flux-notification-controller, victorialogs, polaris, terragrunt, flux-source-watcher,...