GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, spqr, azure-service-operator, k3s, tekton-pipelines, kube-metrics-adapter, hubble, kapp-controller, rancher-agent, cert-manager, datadog-agent, external-secrets-operator, keda, kubescape, kubescape-operator, hubble-ui,...

CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3

Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: guac, skopeo, pulumi, pinact, restic, kine, cluster-autoscaler, crossplane-provider-aws-sqs, yunikorn-k8shim, controller-gen, clickhouse-operator, redka, xeol, helm, cluster-api-helm-controller, govulncheck, actions-runner-controller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, scorecard, memcached-exporter, kubernetes-csi-external-resizer, bom, step-ca, step-issuer, step, external-dns, docker-machine-driver-linode, flux, nginx-prometheus-exporter, newrelic-infrastructure-agent, slsa-verifier,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: k8s-driver-manager-fips, nri-redis-fips, buildah, kyverno-notation-aws, prometheus-operator-fips, kserve-modelmesh-serving, commercial-chainloop-cli, prometheus-pgbouncer-exporter, atlantis-fips, rancher-pushprox, crossplane-provider-aws-acm, argo-cd,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: scorecard, kubernetes-csi-external-resizer, flux-kustomize-controller, step-ca, step-issuer, external-dns, flux, slsa-verifier, newrelic-infrastructure-agent, kube-logging-operator, guac, neuvector-sigstore-interface, crossplane-provider-family-azure, pulumi,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, memcached-exporter, kubernetes-csi-external-resizer, bom, step-ca, step-issuer, step, external-dns, nginx-prometheus-exporter, newrelic-infrastructure-agent, neuvector-sigstore-interface, skopeo, terraform-provider-time, pulumi,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: buildah, containerd, minio, prometheus-operator-fips, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, prometheus-pgbouncer-exporter, atlantis-fips, thanos-fips, argo-cd, argocd-image-updater, aws-ebs-csi-driver-fips, rancher-webhook, podinfo, goose-fip...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, scorecard, maru, kubernetes-csi-external-resizer, bom, flux-kustomize-controller, lazygit, step, paranoia, external-dns, docker-machine-driver-linode, nginx-prometheus-exporter, slsa-verifier, rancher-system-upgrade-controller, guac,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: minio, prometheus-pgbouncer-exporter, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, thanos-fips, argo-cd, aws-ebs-csi-driver-fips, git-credential-oauth, rancher-webhook, wgcf, node-feature-discovery-fips, amazon-vpc-cni-plugins, podinfo, goose-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: minio, prometheus-pgbouncer-exporter, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, thanos-fips, argo-cd, aws-ebs-csi-driver-fips, git-credential-oauth, rancher-webhook, wgcf, node-feature-discovery-fips, amazon-vpc-cni-plugins, podinfo, goose-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: minio, prometheus-pgbouncer-exporter, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, thanos-fips, runc-fips, argo-cd, aws-ebs-csi-driver-fips, git-credential-oauth, rancher-webhook, wgcf, yq-fips, node-feature-discovery-fips, amazon-vpc-cni-plugins,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: minio, prometheus-pgbouncer-exporter, kserve-modelmesh-serving, kubernetes-csi-external-provisioner, thanos-fips, argo-cd, aws-ebs-csi-driver-fips, git-credential-oauth, rancher-webhook, wgcf, node-feature-discovery-fips, podinfo, goose-fips, harbor-registry,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: containerd, gitlab-cng, minio, kubernetes-csi-external-provisioner, cluster-api-helm-controller, thanos-fips, argocd-image-updater, argo-cd, git-credential-oauth, node-feature-discovery-fips, aws-load-balancer-controller-fips, gops, cloudnative-pg, podinfo,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: buildah, prometheus-operator-fips, kubernetes-csi-external-provisioner, atlantis-fips, thanos-fips, yq-fips, wgcf, nri-apache, aws-load-balancer-controller-fips, gops, harbor-registry, petname, addon-resizer-fips, src, temporal-ui-server, helm-docs,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, scorecard, memcached-exporter, kubernetes-csi-external-resizer, flux-kustomize-controller, step-ca, step, external-dns, flux, slsa-verifier, newrelic-infrastructure-agent, nri-prometheus, kube-logging-operator, guac, skopeo,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator-fips, kubernetes-csi-external-provisioner, atlantis-fips, aws-load-balancer-controller-fips, minio-fips, src, temporal-ui-server, flux-source-controller, tekton-chains, oauth2-proxy, terraform-provider-sendgrid,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falcoctl-fips, kube-oidc-proxy, spark-operator, kubeflow, conftest-fips, kubescape, buildkitd, smarter-device-manager-fips, dynamic-localpv-provisioner-fips, kiam, k3d, up, prometheus-stackdriver-exporter, bank-vaults-fips, kubernetes-csi-livenessprobe-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: cortex, up, scorecard, buildkitd, dgraph, kubeflow, terraform-provider-sendgrid, src, aactl, slsa-verifier, kubevela, spark-operator, k3d, prometheus-blackbox-exporter, kubescape...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, scorecard, memcached-exporter, bom, flux-kustomize-controller, slsa-verifier, newrelic-infrastructure-agent, nri-prometheus, pulumi, nginx-mainline, rqlite, src, flux-helm-controller, metrics-server, amass, nodetaint, helm, nats,...