GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, delve, polaris, gcsfuse, rclone, oauth2-proxy, nri-mysql, swagger, kubernetes-csi-external-health-monitor, kapp, rancher-system-upgrade-controller, docker-cli, nginx-prometheus-exporter, terraform-mcp-server, k3s, src, cis-operator, ini-file,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: spire-server, nfs-subdir-external-provisioner, step-ca, crossplane-provider-family-aws, vault-benchmark, aws-load-balancer-controller, authservice, kapp, addon-resizer, grype, trust-manager, flannel, harbor-registry, trillian, crossplane-provider-sql, restic,...

CLEANSTART-2026-HC35488 Security fixes in kube-bench-fips 0.14.1-r0

Package kube-bench-fips version 0.14.1-r0 fixes 4 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-VV16787 Security fixes in kube-bench 0.15.0-r1

Package kube-bench version 0.15.0-r1 fixes 23 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, flux-source-controller-fips, aws-privateca-issuer-fips, crossplane-function-environment-configs-fips, crossplane-provider-aws-ecs-fips, haproxy-ingress-fips, rke2-runtime, dataplaneapi-fips, trillian, docker-credential-ecr-login-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, crossplane-function-environment-configs-fips, rke2-runtime, virt-handler, docker-credential-ecr-login-fips, wave-fips, opentelemetry-operator, amazon-k8s-cni-fips, litestream, syncthing-fips, podinfo-fips, cilium-fips, nri-mysql,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: teleport, chartmuseum, rke2-runtime, kyverno-notation-aws, nri-haproxy, kyverno, nri-apache, kubernetes-dashboard-api, tekton-chains, wgcf, kubernetes-dashboard-auth, clickhouse-operator, cloud-provider-vsphere, gendesk, src, helm-push, eksctl, step-kms-plugin, nucle...

PT-2025-33645 · Undefined · Undefined

🚨 URGENT: Kubernetes admins must patch CVE-2025-02383 SUSE-2025-02383-2 ✅ Affects: kube-apiserver v1.26.x ✅ Risk: Moderate-severity RBAC bypass. ✅ Fix: Apply SUSE patches NOW + validate with kube-bench. Read more: 👉 https://t.co/VRCE9nkHn3 https://t.co/ukAF3LWe56...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: vgpu-util, gitlab-cng, flux-source-controller-fips, aws-privateca-issuer-fips, rke2-runtime, trillian, promxy-fips, velero-fips, kubernetes-dashboard-api, wave-fips, fuse-overlayfs-snapshotter, ytt, kubo-fips, crossplane-provider-azure-sql, cilium-fips, nri-mysql,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, delve, actions-runner-controller, flannel-cni-plugin, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, aws-load-balancer-controller, nri-mysql, pulumi, wazero,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, delve, actions-runner-controller, flannel-cni-plugin, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, aws-load-balancer-controller, nri-mysql, pulumi, wazero,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, terraform-provider-azurerm, protoc-gen-go, fluent-operator, dataplaneapi-fips, trillian, velero-fips, wave-fips, fuse-overlayfs-snapshotter, ytt, prometheus-alertmanager, crane, litestream, cilium-fips, nri-mysql, azure-aad-pod-identity-mic...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kube-bench, ferretdb, trillian, spicedb, temporal-server, argo-workflows, trillian-fips, src, wavefront-collector-for-kubernetes, caddy, kine, kots, falcosidekick-fips, amass, temporal-server-fips, kube-bench-fips, step, caddy-fips, k3s, step-ca, argo-workflows-fips...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: caddy, kine, argo-workflows, kots, spicedb, temporal-server, amass, ferretdb, step, step-ca, trillian, k3s, src, kube-bench...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kyverno-policy-reporter-kyverno-plugin, nfs-subdir-external-provisioner, spire-server, gitsign, actions-runner-controller, zarf, gcsfuse, kubernetes-csi-livenessprobe, kubernetes-event-exporter, step-ca, rclone, crossplane-provider-family-aws,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: caddy, kine, argo-workflows, kots, spicedb, temporal-server, amass, ferretdb, step, step-ca, trillian, k3s, src, kube-bench...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kube-bench, ferretdb, trillian, spicedb, temporal-server, argo-workflows, trillian-fips, src, wavefront-collector-for-kubernetes, caddy, kine, kots, falcosidekick-fips, amass, temporal-server-fips, kube-bench-fips, step, caddy-fips, k3s, step-ca, argo-workflows-fips...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: kube-bench, ferretdb, trillian, spicedb, temporal-server, argo-workflows, trillian-fips, src, wavefront-collector-for-kubernetes, caddy, kine, kots, falcosidekick-fips, amass, temporal-server-fips, kube-bench-fips, step, caddy-fips, k3s, step-ca, argo-workflows-fips...

Critical Photon OS Security Update - PHSA-2023-3.0-0606

Updates of 'linux-aws', 'kube-bench', 'nginx-ingress', 'linux', 'nodejs', 'linux-secure', 'linux-esx', 'linux-rt', 'nxtgn-openssl', 'ntp' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0417

Updates of 'bindutils', 'kube-bench', 'nodejs', 'protobuf', 'binutils', 'binutils-aarch64-linux-gnu', 'libarchive', 'libtiff', 'samba-client', 'docker-compose', 'ntp', 'libXi' packages of Photon OS have been released...