GO-2026-6094 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, spqr, keda, tekton-pipelines, cloud-provider-aws, external-secrets-operator, rancher-system-agent, kubernetes-csi-external-health-monitor, cluster-api-aws-controller, cloud-provider-vsphere, cert-manager-webhook-pdns,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, kubernetes-replicator, runc, kuberay-operator, cert-manager-cmctl, headlamp, spqr, traefik, cloud-provider-aws, falco-no-driver, govulncheck, rancher-machine, dbmate, steampipe, flannel, crossplane-provider-sql, k8sgateway, nri-f5,...

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7. A patched version of the package is available...

CVE-2026-42506 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-42506 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...

CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...

CVE-2026-42502 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-42502 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...

CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5. A patched version of the package is available...

CVE-2025-11065 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26

CVE-2025-11065 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26. A patched version of the package is available...

CVE-2025-30204 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26

CVE-2025-30204 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26. A patched version of the package is available...

AZL-77010 CVE-2025-58190 affecting package kube-vip-cloud-provider 0.0.10-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-75491 CVE-2025-11065 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24

CVE-2025-65637 affecting package kube-vip-cloud-provider for versions less than 0.0.2-24. A patched version of the package is available...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar-fips, rancher-machine, cloud-provider-aws, prometheus-adapter, yace-fips, memcached-exporter-fips, gitsign, secrets-store-csi-driver-provider-aws-fips, azuredisk-csi-fips, git-lfs, grafana-operator, mattmoor-chainit,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar-fips, rancher-machine, cloud-provider-aws, prometheus-adapter, yace-fips, memcached-exporter-fips, gitsign, secrets-store-csi-driver-provider-aws-fips, azuredisk-csi-fips, git-lfs, grafana-operator, mattmoor-chainit,...

CVE-2025-22872 affecting package kube-vip-cloud-provider for versions less than 0.0.10-4

CVE-2025-22872 affecting package kube-vip-cloud-provider for versions less than 0.0.10-4. A patched version of the package is available...

CVE-2024-51744 affecting package kube-vip-cloud-provider for versions less than 0.0.2-22

CVE-2024-51744 affecting package kube-vip-cloud-provider for versions less than 0.0.2-22. A patched version of the package is available...

CVE-2025-27144 affecting package kube-vip-cloud-provider for versions less than 0.0.2-20

CVE-2025-27144 affecting package kube-vip-cloud-provider for versions less than 0.0.2-20. A patched version of the package is available...

CVE-2024-45338 affecting package kube-vip-cloud-provider for versions less than 0.0.10-3

CVE-2024-45338 affecting package kube-vip-cloud-provider for versions less than 0.0.10-3. A patched version of the package is available...

CVE-2024-28180 affecting package kube-vip-cloud-provider for versions less than 0.0.2-19

CVE-2024-28180 affecting package kube-vip-cloud-provider for versions less than 0.0.2-19. A patched version of the package is available...

CVE-2023-47108 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

CVE-2023-47108 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1. A patched version of the package is available...