GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cilium, crossplane, telegraf, kots, kubernetes-csi-external-snapshotter, cluster-api-aws-controller, node-feature-discovery, kubernetes-csi-external-provisioner, flux-helm-controller, yunikorn-k8shim, istio, tkn, external-secrets-operator, cert-manager-webhook-pdns,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: vault-k8s, metacontroller, secrets-store-csi-driver-provider-gcp, kube-logging-operator, kube-oidc-proxy, mc, prometheus-postgres-exporter, flux-source-controller, fuse-overlayfs-snapshotter, flux-image-reflector-controller, node-problem-detector, metrics-server-fips...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, falcosidekick, temporal, ferretdb, tempo, dbmate, kots, spicedb, guac, cilium-cli, k3d, ksops, osv-scanner, sigstore-scaffolding, k8sgpt, minio, pulumi-language-dotnet, k3s, step, zarf, kubernetes-csi-driver-hostpath, spegel, step-ca,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, memcached-exporter, vertical-pod-autoscaler, supercronic, ferretdb, newrelic-fluent-bit-output, vt-cli, dockerize, goreleaser, k3d, controller-gen, prometheus-alertmanager, nri-mysql, yq, k8sgpt, nri-couchbase, stakater-reloader,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: net-kourier, kube-logging-operator-custom-runner, k9s, kbld, cilium, vertical-pod-autoscaler, pgpool2exporter, crossplane, crossplane-provider-aws-cloudformation, kiali, percona-server-mongodb-operator, kots, goreleaser, litestream, kubernetes-csi-external-snapshotte...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: net-kourier, cilium, crossplane-provider-aws-cloudformation, blob-csi, percona-server-mongodb-operator, victoriametrics-operator, k8sgpt, crossplane-provider-aws-cloudwatchlogs, go-discover, aactl, eksctl, azuredisk-csi, crossplane-provider-aws-kms,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: kbld, cilium, argo-cd, crossplane, telegraf, kots, goreleaser, litestream, amazon-cloudwatch-agent-operator, cilium-cli, controller-gen, k3d, k8sgpt, contour, splunk-otel-collector, go, addon-resizer, aactl, pdfcpu, rabbitmq-cluster-operator, aws-flb-kinesis, influx,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: net-kourier, cilium, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, stakater-reloader, chart-testing, mkcert, go-discover, aactl, smokescreen, pdfcpu, php-fpmexporter, eksctl, flux-helm-controller, dive, promxy, terraform-provider-azapi,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, rabbitmq-messaging-topology-operator, tfsec, vertical-pod-autoscaler, ferretdb, newrelic-fluent-bit-output, pgpool2exporter,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, amazon-cloudwatch-agent-operator, cilium-cli, controller-gen, k3d, nri-mysql, k8sgpt, gptscript, chart-testing, aactl, polaris, rabbitmq-cluster-operator, eksctl, ko, dive, terraform-provider-azapi, harbor-registry, wait-for-port...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CLEANSTART-2026-FV98119 Security fixes in kubernetes-csi-external-snapshotter-fips 8.4.0-r4

Package kubernetes-csi-external-snapshotter-fips version 8.4.0-r4 fixes 31 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cilium, crossplane, telegraf, kots, kubernetes-csi-external-snapshotter, cluster-api-aws-controller, node-feature-discovery, kubernetes-csi-external-provisioner, flux-helm-controller, yunikorn-k8shim, istio, tkn, external-secrets-operator, cert-manager-webhook-pdns,...

CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: net-kourier, crossplane-provider-aws-cloudformation, blob-csi, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, k8sgpt, stakater-reloader, crossplane-provider-aws-cloudwatchlogs, go-discover, smokescreen, pdfcpu, eksctl, azuredisk-csi,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: net-kourier, terraform-provider-time, memcached-exporter, rabbitmq-messaging-topology-operator, cilium, sftpgo-plugin-eventsearch, newrelic-fluent-bit-output, argo-cd, crossplane, telegraf, kots, goreleaser, litestream, amazon-cloudwatch-agent-operator, cilium-cli,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, openbao, vault-k8s, crossplane-provider-aws-rds-fips, swagger, falco-exporter, opentelemetry-operator, aws-privateca-issuer, amazon-ecs-agent-fips, db-operator, secrets-store-csi-driver-provider-aws, yunikorn-k8shim-fip...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: net-kourier, k9s, falcosidekick, cilium, rabbitmq-messaging-topology-operator, tfsec, ferretdb, argo-cd, kiali, blob-csi, percona-server-mongodb-operator, telegraf, kots, goreleaser, litestream, kubernetes-csi-external-snapshotter, prometheus-alertmanager,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: net-kourier, terraform-provider-time, memcached-exporter, tfsec, cilium, sftpgo-plugin-eventsearch, newrelic-fluent-bit-output, argo-cd, crossplane-provider-aws-cloudformation, blob-csi, telegraf, kots, litestream, kubernetes-csi-external-snapshotter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: authservice, crossplane-provider-aws-rds-fips, swagger, sftpgo-plugin-kms, aws-node-termination-handler-fips, amazon-ecs-agent-fips, yunikorn-k8shim-fips, secrets-store-csi-driver-provider-aws, elastic-agent, spegel-fips, openbao-fips, k8s-metacollector,...