GO-2026-4601 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, wuzz, victoriametrics, minio-object-browser, aws-privateca-issuer, timescaledb-parallel-copy, aws-eks-pod-identity-agent, crossplane-provider-aws-iam, sqlexporter, dataplaneapi, knative-client, aws-nuke, kubo, kubernetes-dns-node-cache,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: chisel, litestream, dapr, kyverno-policy-reporter-kyverno-plugin, sftpgo-plugin-geoipfilter, wuzz, omnibump, promxy, knative-eventing, octo-sts, kubernetes-csi-livenessprobe, crossplane-provider-aws-sns, dbmate, grafana-alloy, argo-cd, libnvidia-container,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: chisel, litestream, dapr, kyverno-policy-reporter-kyverno-plugin, sftpgo-plugin-geoipfilter, wuzz, omnibump, promxy, knative-eventing, octo-sts, kubernetes-csi-livenessprobe, crossplane-provider-aws-sns, dbmate, grafana-alloy, argo-cd, libnvidia-container,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: chisel, external-dns, gitness, kyverno-policy-reporter-kyverno-plugin, litestream, sftpgo-plugin-geoipfilter, sonobuoy, gptscript, wuzz, kapp, pvc-autoresizer, minio-object-browser, mongodb-kubernetes-operator, esbuild, kubernetes-csi-livenessprobe, cosign,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, octo-sts, mlrun-log-collector-fips, perses-fips, kcp, kafkaexporter-fips, crossplane-provider-aws-cloud9-fips, vexctl, cluster-proportional-autoscaler, crossplane-provider-aws-organizations, multus-cni-fips, gitlab-workhorse-ce,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, wuzz, victoriametrics, minio-object-browser, aws-privateca-issuer, timescaledb-parallel-copy, argo-workflows, aws-eks-pod-identity-agent, lazygit, helm-push, dataplaneapi, knative-client, aws-nuke, direnv, flux, tigera-operator,...

CLEANSTART-2026-DG06447 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.12.2-r0, 2.12.2-r1

Multiple security vulnerabilities affect the kubernetes-replicator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: octo-sts, opa, aws-flb-firehose-fips, kube-metrics-adapter-fips, ytt-fips, gitlab-workhorse-ce, k8s-device-plugin-fips, prometheus-adapter, sqlexporter-fips, aws-privateca-issuer-fips, prometheus-beat-exporter-fips, secrets-store-csi-driver-provider-aws-fips,...