GHSA-2CW7-V8FF-P88R vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-54902 vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-54900 vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-54899 vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2026-54500 vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: k3s, zot, rancher, k9s, helm, external-dns, skaffold, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, fscrypt, kyverno, prometheus, telegraf, trivy, kubernetes, nerdctl, osv-scanner, cloud-provider-aws, kubescape, cilium-cli, kots, chisel,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: falcoctl, scorecard, docker, k9s, containerd, cert-manager, aactl, pulumi-language-dotnet, trivy, argo-events, tekton-chains, flux-kustomize-controller, melange, fulcio, flux-source-controller, gitlab-runner, ko, pulumi, step, podman, apko, steampipe, buildah, ranche...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, falcoctl, scorecard, docker, k9s, docker-machine-driver-linode, containerd, cert-manager, aactl, crossplane-provider-aws-rds, crossplane-provider-aws-sns, pulumi-language-dotnet, tw, trivy, argo-events,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, k3s, buildah, zot, rancher, helm, external-dns, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, fscrypt, kyverno, prometheus, telegraf, kubernetes, nerdctl, cloud-provider-aws, cilium-cli, kots, snyk-cli, minio, opentelemetry-collector,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, falcoctl, scorecard, docker, k9s, docker-machine-driver-linode, containerd, cert-manager, aactl, crossplane-provider-aws-rds, crossplane-provider-aws-sns, pulumi-language-dotnet, tw, trivy, argo-events,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: scorecard, k9s, containerd, cert-manager, aactl, pulumi-language-dotnet, trivy, argo-events, melange, flux-source-controller, pulumi, step, podman, apko, buildah, rancher, external-dns, helm, kaf, cilium, opentofu, gptscript, osv-scanner, cloud-provider-aws, kubescap...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, k3s, buildah, zot, rancher, helm, external-dns, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, opentofu, fscrypt, kyverno, prometheus, telegraf, kubernetes, nerdctl, cloud-provider-aws, cilium-cli, kots, snyk-cli, minio,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: k3s, scorecard, zot, terragrunt, chezmoi, k9s, external-dns, helm, skaffold, grype, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, opentofu, fscrypt, kyverno, prometheus, pulumi-language-dotnet, gptscript, telegraf, trivy, kubernetes, nerdctl, argo-events,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: k3s, zot, rancher, k9s, helm, external-dns, skaffold, docker-machine-driver-harvester, kaf, gitlab-kas, cilium, cert-manager, aactl, containerd, fscrypt, kyverno, prometheus, telegraf, trivy, kubernetes, nerdctl, osv-scanner, cloud-provider-aws, kubescape, cilium-cli...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: scorecard, docker, k9s, containerd, cert-manager, aactl, pulumi-language-dotnet, trivy, argo-events, melange, flux-source-controller, gitlab-runner, pulumi, podman, apko, rancher, external-dns, helm, kaf, cilium, opentofu, gptscript, osv-scanner, cloud-provider-aws,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: falcoctl, scorecard, docker, k9s, containerd, cert-manager, aactl, pulumi-language-dotnet, trivy, argo-events, tekton-chains, flux-kustomize-controller, melange, fulcio, flux-source-controller, gitlab-runner, ko, pulumi, step, podman, apko, steampipe, buildah, ranche...

PT-2026-52986

Name of the Vulnerable Software and Affected Versions Kestra versions prior to 1.3.24 Description The BasicAuth authentication component of the Kestra OSS workflow orchestration platform stores passwords using SHA-512, which has a high computation speed. An attacker with read access to the...

GO-2026-5631 k8sGPT has Prompt Injection through its k8sGPT-Operator in github.com/k8sgpt-ai/k8sgpt

k8sGPT has Prompt Injection through its k8sGPT-Operator in github.com/k8sgpt-ai/k8sgpt...

GO-2026-5618 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd

Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations in github.com/argoproj/argo-cd...

GO-2026-5564 Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation in open-cluster-management.io/ocm

Open Cluster Management OCM: Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation in open-cluster-management.io/ocm...