GO-2026-4340 vulnerabilities

Vulnerabilities for packages: boring-registry, nfs-subdir-external-provisioner, kubernetes-event-exporter, tetragon, dask-gateway, actions-runner-controller, kubernetes-csi-external-provisioner, sftpgo-plugin-auth, litestream, rancher-machine, rabbitmq-default-user-credential-updater, kine,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: pluto, nova, prometheus-operator, spark-operator, lazydocker, rabbitmq-default-user-credential-updater, emissary, libnvidia-container, src, wire-go, terraform-provider-azapi, glow, aws-application-networking-k8s, cluster-api-provider-vsphere, fzf, thanos-operator,...

CLEANSTART-2026-XV94237 Security fixes in kubernetes-dashboard-api 1.14.0-r1

Package kubernetes-dashboard-api version 1.14.0-r1 fixes 27 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469, CVE-2026-39820, CVE-2026-25679, CVE-2026-27143...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: drone-fips, conftest-fips, crossplane-provider-aws-redshift-fips, crossplane-provider-azure-keyvault, containerd, gotrue-fips, crossplane-provider-aws-s3control, hydra-fips, apm-server-fips, eksctl, vault-fips, kafkaexporter-fips, gitlab-rails-ce-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: boring-registry, envoy-gateway, kubernetes-event-exporter, external-secrets-operator, tetragon, dask-gateway, gitsign, prometheus-operator, dapr, sftpgo-plugin-auth, lazydocker, litestream, rancher-machine, kine, emissary, libnvidia-container, promxy,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: boring-registry, envoy-gateway, kubernetes-event-exporter, external-secrets-operator, tetragon, dask-gateway, gitsign, prometheus-operator, dapr, sftpgo-plugin-auth, lazydocker, litestream, rancher-machine, kine, emissary, libnvidia-container, promxy,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: conftest-fips, xeol, helm-operator-fips, timoni, helm-operator, agentbeat, syncthing-fips, kube-arangodb, goreleaser, beats-fips, terraform-provider-pagerduty, aactl, eksctl, headlamp-fips, flux-kustomize-controller, vendir-fips, kubernetes-dns-node-cache, cloudbeat,...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: fluent-operator, actions-runner-controller, pulumi, spark-operator, kine, src, crossplane-provider-aws-elasticache, sops, local-static-provisioner, k6, gke-gcloud-auth-plugin, hugo-extended, sqlexporter, undock, step-ca, opensearch-k8s-operator, flux, zarf, cosign,...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: oras, q, conftest-fips, helm-docs, helm-operator-fips, k8ssandra-client-fips, docker-credential-acr-env-fips, cloud-provider-aws, helm-operator, promxy-fips, multus-cni, prometheus-beat-exporter-fips, containerd, mkcert, aactl, prometheus-pushgateway,...