GO-2026-4340 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, actions-runner-controller, cluster-api-ipam-provider-in-cluster, terraform-provider-time, openbao-k8s, kubo, extism, rabbitmq-cluster-operator, fluxcd-kustomize-mutating-webhook, kubernetes-csi-external-resizer, flux-image-automation-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, docker-cli-buildx, fzf, rancher-system-upgrade-controller, wal-g, mongo-tools, libnvidia-container, headlamp, mockgen, cilium-cli, ipfs-cluster, cis-operator, nri-mysql, aactl, gobuster, gobump, step-kms-plugin, lazydocker,...

CLEANSTART-2026-WB27241 Security fixes in kor 0.5.9-r0

Package kor version 0.5.9-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...

CLEANSTART-2026-YC34389 Security fixes in kor 0.5.9-r1

Package kor version 0.5.9-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-IK47334 Security fixes in kor 0.3.8-r1

Package kor version 0.3.8-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-QK08594 Security fixes in kor 0.4.2-r0

Package kor version 0.4.2-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...

CLEANSTART-2026-XY20765 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63774

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TB18047 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH72202 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash

Multiple security vulnerabilities affect the kor package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. See references for individual vulnerability details...

PT-2026-56743

Multiple security vulnerabilities affect the kor package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. See references for individual vulnerability details...

CLEANSTART-2026-HV96032 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-OL12277 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-MD91760 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, terraform-provider-time, atlantis, fluxcd-kustomize-mutating-webhook, minio-object-browser, azure-ipam, falco-no-driver, k6, knative-client, aactl, crossplane-provider-aws-dynamodb, datadog-operator, src-fingerprint, kubernetes-csi-external-attacher,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, terraform-provider-time, atlantis, fluxcd-kustomize-mutating-webhook, minio-object-browser, azure-ipam, falco-no-driver, mockgen, yq, k6, petname, knative-client, aactl, crossplane-provider-aws-dynamodb, datadog-operator, go-jsonnet, src-fingerprint,...

Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155480 Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, docker-cli-buildx, fzf, rancher-system-upgrade-controller, wal-g, mongo-tools, libnvidia-container, headlamp, mockgen, cilium-cli, ipfs-cluster, cis-operator, nri-mysql, aactl, gobuster, gobump, step-kms-plugin, lazydocker,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, contour, tekton-pipelines, zot, vault, hubble, tigera-operator, nri-nginx, kapp-controller, terraform-provider-azapi, render-template, tflint, rabbitmq-cluster-operator, ko, kubernetes-dashboard-api, kor, eck-operator, ipfs-cluster,...