CVE-2026-25765 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng, logstash...

AZL-77010 CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77007 CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: k8sgateway, dask-gateway, terraform-provider-pagerduty, osv-scanner, helm-operator, kubernetes-dns-node-cache, gitness, nerdctl, opentofu, telegraf, flux-image-automation-controller, croc, falco-no-driver, kubeflow-katib, terraform, goreleaser, mc,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: k8sgateway, dask-gateway, terraform-provider-pagerduty, osv-scanner, helm-operator, kubernetes-dns-node-cache, gitness, nerdctl, opentofu, telegraf, flux-image-automation-controller, croc, falco-no-driver, kubeflow-katib, terraform, goreleaser, mc,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: grafana-operator, rancher-system-agent, aws-signer-notation-plugin, helm-docs, cargobump, gosu, kyverno-policy-reporter-ui, wgcf, pguser, steampipe, wave, fluxcd-kustomize-mutating-webhook, step, chisel, kuberlr, pgtimetable, tfsec, juicefs,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, opencost, osv-scanner, kubernetes-csi-external-resizer, wuzz, grafana-operator, gatus, harbor-registry, sriov-network-device-plugin, rancher-machine, dkron, undock, rancher-system-agent, aws-signer-notation-plugin,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: grafana-operator, rancher-system-agent, aws-signer-notation-plugin, helm-docs, cargobump, gosu, kyverno-policy-reporter-ui, wgcf, pguser, steampipe, wave, fluxcd-kustomize-mutating-webhook, step, chisel, kuberlr, pgtimetable, tfsec, juicefs,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: grafana-operator, rancher-system-agent, aws-signer-notation-plugin, helm-docs, cargobump, gosu, kyverno-policy-reporter-ui, wgcf, pguser, steampipe, wave, fluxcd-kustomize-mutating-webhook, step, chisel, kuberlr, pgtimetable, tfsec, juicefs,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: grafana-operator, rancher-system-agent, aws-signer-notation-plugin, helm-docs, cargobump, gosu, kyverno-policy-reporter-ui, wgcf, pguser, steampipe, wave, fluxcd-kustomize-mutating-webhook, step, chisel, kuberlr, pgtimetable, tfsec, juicefs,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, opencost, osv-scanner, kubernetes-csi-external-resizer, wuzz, grafana-operator, gatus, harbor-registry, sriov-network-device-plugin, rancher-machine, dkron, undock, rancher-system-agent, aws-signer-notation-plugin,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, opencost, osv-scanner, kubernetes-csi-external-resizer, wuzz, grafana-operator, gatus, harbor-registry, sriov-network-device-plugin, rancher-machine, dkron, undock, rancher-system-agent, aws-signer-notation-plugin,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, opencost, osv-scanner, kubernetes-csi-external-resizer, wuzz, grafana-operator, gatus, harbor-registry, sriov-network-device-plugin, rancher-machine, dkron, undock, rancher-system-agent, aws-signer-notation-plugin,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, spire-controller-manager-fips, kong-ingress-controller-fips, flux, newrelic-fluent-bit-output, neuvector-dbgen-fips, verticadb-operator, src, openbao-k8s-fips, tfsec, terraform-provider-kubernetes-fips, hubble-ui, langfuse,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, spire-controller-manager-fips, kong-ingress-controller-fips, flux, newrelic-fluent-bit-output, neuvector-dbgen-fips, verticadb-operator, src, openbao-k8s-fips, tfsec, terraform-provider-kubernetes-fips, hubble-ui, langfuse,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, spire-controller-manager-fips, kong-ingress-controller-fips, flux, newrelic-fluent-bit-output, neuvector-dbgen-fips, mockgen, src, openbao-k8s-fips, tfsec, terraform-provider-kubernetes-fips, hubble-ui, nri-cassandra-fips, langfuse,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, spire-controller-manager-fips, kong-ingress-controller-fips, flux, newrelic-fluent-bit-output, neuvector-dbgen-fips, mockgen, verticadb-operator, src, openbao-k8s-fips, tfsec, terraform-provider-kubernetes-fips, hubble-ui,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter-fips, spire-controller-manager-fips, kong-ingress-controller-fips, flux, newrelic-fluent-bit-output, neuvector-dbgen-fips, mockgen, src, openbao-k8s-fips, tfsec, terraform-provider-kubernetes-fips, hubble-ui, nri-cassandra-fips, langfuse,...

CLEANSTART-2026-BH03809 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the kube-rbac-proxy-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-RJ88561 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the kube-state-metrics-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...