GO-2025-4245 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, opentelemetry-collector-fips, splunk-otel-collector-fips, argo-cd, nats-fips, verticadb-operator, datadog-agent-fips, argo-cd-fips, k8sgateway-fips, grafana-alloy, grafana-alloy-fips, splunk-otel-collector, tempo, verticadb-operator-fips, coredns,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: rclone-fips, gke-gcloud-auth-plugin, node-problem-detector-fips, reports-server, virt-api, kube-metrics-adapter-fips, ld-relay, longhorn-share-manager, jobset-fips, sops, gitaly, flux-operator-fips, nrdot-collector-k8s, terraform-provider-azapi-fips,...

GO-2025-4240 vulnerabilities

Vulnerabilities for packages: nodetaint, argocd-image-updater, kubernetes, argo-cd, kubernetes-dns-node-cache, yunikorn-k8shim, local-static-provisioner, aws-efs-csi-driver, rancher-system-agent, mesosphere-vsphere-csi, blob-csi, rancher-agent, emissary, kubernetes-csi-driver-nfs, kapp, kots,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: bom, crossplane, act, steampipe, gomplate, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, argo-cd, flux-source-controller, flux, grype, k9s, melange, argo-workflows, snyk-cli, cerbos, gitlab-runner, src-fingerprint, zarf, kubevel...

NICER Protocol Deep Dive: Internet Exposure of etcd

Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...