15 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: spicedb-operator, cloud-provider-gcp-cloud-controller-manager, kyverno, metallb, cluster-api-gcp-controller, opentelemetry-operator, k3s, calico, descheduler, flux-kustomize-controller, tekton-pipelines, tekton-chains, rancher, kubernetes-csi-external-health-monitor,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: nri-mssql, spicedb-operator, dynamic-localpv-provisioner, fuse-overlayfs-snapshotter, zarf, conjur-cli, vertical-pod-autoscaler, kiali, crossplane-provider-aws-s3, sftpgo-plugin-geoipfilter, grafana-operator, step-issuer, atlantis, src-fingerprint, temporal-ui-server...
CLEANSTART-2026-IK70425 Security fixes in kubernetes-csi-external-snapshotter 8.6.0-r4
Package kubernetes-csi-external-snapshotter version 8.6.0-r4 fixes 1 vulnerabilities: CVE-2026-39822...
CLEANSTART-2026-FV98119 Security fixes in kubernetes-csi-external-snapshotter-fips 8.4.0-r4
Package kubernetes-csi-external-snapshotter-fips version 8.4.0-r4 fixes 31 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: spicedb-operator, cloud-provider-gcp-cloud-controller-manager, kyverno, metallb, cluster-api-gcp-controller, opentelemetry-operator, k3s, calico, descheduler, flux-kustomize-controller, tekton-pipelines, tekton-chains, rancher, kubernetes-csi-external-health-monitor,...
CLEANSTART-2026-BD49035 Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3
Multiple security vulnerabilities affect the kubernetes-csi-external-snapshotter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: spicedb-operator, bom, fuse-overlayfs-snapshotter, fscrypt, minio-object-browser, sftpgo-plugin-geoipfilter, wave, spegel, step-issuer, atlantis, temporal-ui-server, kyverno, net-kourier, litestream, crossplane-provider-azure-sql, terraform-docs,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: hubble-ui, trivy, fleet-server, flux-notification-controller, grafana, zot, dex, nri-discovery-kubernetes-fips, runc, filebrowser, prometheus-beat-exporter, amazon-ecs-agent-fips, vt-cli, vault-csi-provider, image-factory, longhorn-cli-fips, fuse-overlayfs-snapshotte...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: fleet-server, flux-notification-controller, grafana, skopeo, dex, opentelemetry-collector-contrib, runc, amazon-ecs-agent-fips, vault-csi-provider, fuse-overlayfs-snapshotter, policy-controller-fips, sriov-network-device-plugin, trivy-operator-fips, gitaly,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: trivy, skopeo, kube-logging-operator, grafana, zot, dex, opentelemetry-collector-contrib, runc, vt-cli, vault-csi-provider, fuse-overlayfs-snapshotter, cilium-certgen, trivy-operator-fips, victoriametrics-cluster, slsa-verifier, cass-operator-fips-no-pvc-delete,...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: hubble-ui, trivy, skopeo, flux-notification-controller, kube-logging-operator, crossplane-provider-aws, dex, runc, prometheus-beat-exporter, vt-cli, vault-csi-provider, nri-jmx, fuse-overlayfs-snapshotter, policy-controller-fips, src-fingerprint, slsa-verifier,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: hubble-ui, trivy, skopeo, flux-notification-controller, kube-logging-operator, zot, crossplane-provider-aws, dex, runc, prometheus-beat-exporter, vault-csi-provider, fuse-overlayfs-snapshotter, policy-controller-fips, slsa-verifier, cass-operator-fips-no-pvc-delete,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: aactl, terraform-provider-sendgrid, smarter-device-manager-fips, kube-oidc-proxy, prometheus-stackdriver-exporter, vault-csi-provider, conftest-fips, metrics-server-fips, slsa-verifier, kubernetes-csi-livenessprobe-fips, kubeflow-fips, src, kubescape, kubeflow, up,...