GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kargo, rqlite, spegel, ksops, restic, opa, kaniko, hubble-ui, spire-server, step-ca, k3d, fulcio, step, cert-manager-cmctl, osv-scanner, grpc-health-probe, k8sgpt-operator, sigstore-scaffolding, zot, kots, falcosidekick, minio, dbmate, kubernetes-csi-driver-hostpath,...

CLEANSTART-2026-PR41614 Security fixes in k8sgpt-operator 0.2.27-r2

Package k8sgpt-operator version 0.2.27-r2 fixes 1 vulnerabilities: CVE-2026-27145...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kargo, rancher-agent, trivy-operator, jitsucom-bulker, argo-workflows, kubevela, cluster-api, percona-server-mongodb-operator, kube-arangodb, terraform-provider-kubernetes, cilium, cri-tools, teleport, hubble, gitlab-runner, rancher, gitlab-kas, emissary, headlamp,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kargo, rancher-agent, trivy-operator, jitsucom-bulker, argo-workflows, kubevela, cluster-api, percona-server-mongodb-operator, kube-arangodb, terraform-provider-kubernetes, cilium, cri-tools, teleport, hubble, gitlab-runner, rancher, gitlab-kas, emissary, headlamp,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: coredns, kube-logging-operator-custom-runner, crossplane-provider-aws-kinesis, argo-workflows, rootlesskit, pdfcpu, yq, cri-tools, nats, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, op-geth, metrics-agent, go-licenses, gh,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: coredns, kube-logging-operator-custom-runner, crossplane-provider-aws-kinesis, argo-workflows, rootlesskit, pdfcpu, cri-tools, nats, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, op-geth, metrics-agent, go-licenses, gh,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, apm-server-fips, memcached-exporter-fips, terraform-provider-tls-fips, dagdotdev, vault-k8s, cloud-provider-aws, azurefile-csi-fips, secrets-store-csi-driver-fips, mattmoor-chainit, bank-vaults, prometheus-node-exporter-fips, blobfuse2, git-lfs,...

GHSA-W32M-9786-JP63 vulnerabilities

Vulnerabilities for packages: tekton-chains, crossplane-provider-aws-kinesis, argo-workflows, rootlesskit, yq, cri-tools, nats, secrets-store-csi-driver-provider-azure, crossplane-provider-aws, go-licenses, gh, kubernetes-dashboard-metrics-scraper, spicedb, vcluster, flannel, envoy-gateway,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: tekton-chains, pulumi, flux-helm-controller, grpcurl, yq, hugo, nats, up, dynamic-localpv-provisioner, kind, crossplane-provider-aws, kots, kubernetes-dashboard-metrics-scraper, kube-state-metrics, trillian, gomplate, kubernetes-csi-livenessprobe, runc, k8sgpt,...