GO-2024-2978 vulnerabilities

Vulnerabilities for packages: zot, dex, spicedb, kots, tflint, kwok, restic, terraform-docs, fulcio, conftest, zarf, guac, k8sgpt, terragrunt, osv-scanner, opa, ferretdb, cert-manager-cmctl, melange, kargo, certificate-transparency, kubernetes-csi-driver-hostpath, trivy,...

CLEANSTART-2026-PR41614 Security fixes in k8sgpt-operator 0.2.27-r2

Package k8sgpt-operator version 0.2.27-r2 fixes 1 vulnerabilities: CVE-2026-27145...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: istio, argo-rollouts, cert-manager-istio-csr, emissary, kots, kwok, rancher-fleet, postgres-operator, cluster-api, gitlab-runner, zarf, k8sgpt, rancher, argo-workflows, aws-node-termination-handler, k9s, kargo, headlamp, kubeflow-pipelines, kubernetes, argo-cd,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: istio, argo-rollouts, cert-manager-istio-csr, emissary, kots, kwok, rancher-fleet, postgres-operator, cluster-api, gitlab-runner, zarf, k8sgpt, rancher, argo-workflows, aws-node-termination-handler, k9s, kargo, headlamp, kubeflow-pipelines, kubernetes, argo-cd,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kind, aws-network-policy-agent, kubernetes-csi-external-attacher, crossplane-provider-keycloak, libnvidia-container, prometheus-alertmanager, certificate-transparency, cni-plugins, octo-sts, influx, syft, helm, metrics-agent, victoriametrics, pulumi-language-java,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kind, aws-network-policy-agent, kubernetes-csi-external-attacher, crossplane-provider-keycloak, libnvidia-container, prometheus-alertmanager, certificate-transparency, octo-sts, influx, syft, helm, metrics-agent, victoriametrics, pulumi-language-java, kubeflow,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, secrets-store-csi-driver-fips, kuberay-operator, gitsign, gcp-compute-persistent-disk-csi-driver-fips, prometheus-node-exporter-fips, hivemind, vault-benchmark, ctop, stakater-reloader, terraform-provider-sendgrid-fips,...

GHSA-W32M-9786-JP63 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, kubernetes-csi-external-attacher, crossplane-provider-keycloak, rabbitmq-cluster-operator, prometheus-alertmanager, certificate-transparency, cni-plugins, octo-sts, syft, helm, victoriametrics, pulumi-language-java, kubeflow, openbao, glab,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: git-lfs, dex, kind, up, aws-efs-csi-driver, cosign, kubernetes-csi-livenessprobe, prometheus-alertmanager, secrets-store-csi-driver, helm, pulumi-language-java, kubeflow, memcached-exporter, kubernetes-dashboard-metrics-scraper, timoni, rqlite, buildkitd, mc,...