GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: kargo, opa, k8ssandra-client, k9s, helm-push, cluster-api-helm-controller, kube-arangodb, rancher, docker-cli-buildx, eksctl, zarf, fuse-overlayfs-snapshotter, tw, xeol, kubevela, buildkitd, teleport, helm-set-status, neuvector-scanner, gogatekeeper, trivy-operator,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: kargo, opa, k8ssandra-client, k9s, helm-push, cluster-api-helm-controller, kube-arangodb, rancher, docker-cli-buildx, eksctl, zarf, fuse-overlayfs-snapshotter, tw, xeol, kubevela, buildkitd, teleport, helm-set-status, neuvector-scanner, gogatekeeper, trivy-operator,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: k9s-fips, cluster-api-helm-controller-fips, helm, xeol-fips, syft, kaniko, kube-mgmt, kube-mgmt-fips, k8ssandra-client-fips, newrelic-infrastructure-agent, helm-fips, k8sgpt, opa-fips, kube-arangodb, opa-fips-envoy, cluster-api-helm-controller, datadog-agent-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kargo, bom, gitsign, rancher-fleet, k9s, pulumi-language-java, gomplate, nfpm, pulumi-language-yaml, gitea, nuclei, tfsec, melange, pulumi, external-secrets-operator, apko, gitaly, zarf, xeol, gptscript, kubevela, witness, flux, teleport, trivy-operator,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kargo, bom, gitsign, rancher-fleet, k9s, pulumi-language-java, gomplate, nfpm, pulumi-language-yaml, gitea, nuclei, tfsec, melange, pulumi, external-secrets-operator, apko, gitaly, zarf, xeol, gptscript, kubevela, witness, flux, teleport, trivy-operator,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: kargo, bom, gitsign, rancher-fleet, k9s, pulumi-language-java, gomplate, nfpm, pulumi-language-yaml, gitea, nuclei, tfsec, melange, pulumi, external-secrets-operator, apko, gitaly, zarf, xeol, gptscript, kubevela, witness, flux, teleport, trivy-operator,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: kargo, bom, gitsign, rancher-fleet, k9s, pulumi-language-java, gomplate, nfpm, pulumi-language-yaml, gitea, nuclei, tfsec, melange, pulumi, external-secrets-operator, apko, gitaly, zarf, xeol, gptscript, kubevela, witness, flux, teleport, trivy-operator,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: k9s-fips, xeol-fips, syft, kaniko, gitea, goreleaser, trufflehog, chainloop-cli-fips, pulumi-language-java, apko-fips, cerbos, chainctl-fips, kubescape, gitaly-fips, crossplane, zarf, rancher-fleet, argo-workflows-fips, grype, pulumi-kubernetes-operator,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: k9s-fips, xeol-fips, syft, kaniko, gitea, goreleaser, trufflehog, chainloop-cli-fips, pulumi-language-java, apko-fips, cerbos, chainctl-fips, kubescape, gitaly-fips, crossplane, zarf, rancher-fleet, argo-workflows-fips, grype, pulumi-kubernetes-operator,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: k9s-fips, xeol-fips, syft, kaniko, gitea, goreleaser, trufflehog, chainloop-cli-fips, pulumi-language-java, apko-fips, cerbos, chainctl-fips, kubescape, gitaly-fips, crossplane, zarf, rancher-fleet, argo-workflows-fips, grype, pulumi-kubernetes-operator,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: k9s-fips, xeol-fips, syft, kaniko, gitea, goreleaser, trufflehog, chainloop-cli-fips, pulumi-language-java, apko-fips, cerbos, chainctl-fips, kubescape, gitaly-fips, crossplane, zarf, rancher-fleet, argo-workflows-fips, grype, pulumi-kubernetes-operator,...

GHSA-GJ49-89WH-H4GJ vulnerabilities

Vulnerabilities for packages: hubble-ui, kubescape-operator, kubescape...

CVE-2026-41520 vulnerabilities

Vulnerabilities for packages: hubble-ui, kubescape-operator, kubescape...

CVE-2026-41520 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kubescape, hubble-fips, kubescape-server, kubescape-server-fips, kubescape-operator-fips, hubble-ui-backend-fips, hubble-ui...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, kargo, rancher-fleet, jitsucom-bulker, postgres-operator, vcluster, k8ssandra-client, k9s, gitlab-kas, cilium-cli, kpt, cri-tools, cert-manager-istio-csr, istio, aws-node-termination-handler, kube-arangodb, rancher, velero, docker-cli-buildx...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-api, kargo, rancher-fleet, jitsucom-bulker, postgres-operator, vcluster, k8ssandra-client, k9s, gitlab-kas, cilium-cli, kpt, cri-tools, cert-manager-istio-csr, istio, aws-node-termination-handler, kube-arangodb, rancher, velero, docker-cli-buildx...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: longhorn-cli-fips, k9s-fips, eksctl, infinispan-operator, aws-node-termination-handler, eck-operator-fips, k8ssandra-client-fips, k8sgpt, falcoctl-fips, redis-operator, kube-arangodb, falcoctl, datadog-agent-fips, aws-node-termination-handler-fips, trident-fips,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: dask-gateway, prometheus-operator, cloud-provider-aws, coredns, external-dns, prometheus, runc, chezmoi, cilium-cli, gitlab-kas, grafana, telegraf, k8s-device-plugin, istio, kube-arangodb, kube-fluentd-operator, mattermost, external-secrets-operator, gitaly,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: gitsign, sftpgo-plugin-eventsearch, crossplane-provider-azure-storage, gitness, cortex, sftpgo-plugin-eventstore, gitlab-kas, cilium-cli, kube-vip, contour, flux-image-reflector-controller, kubernetes-csi-driver-nfs, pulumi-language-yaml, prometheus-adapter,...

CLEANSTART-2026-WN01990 Security fixes for CVE-2025-15558, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-1229, CVE-2026-22703, CVE-2026-22772, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24117, CVE-2026-24137, CVE-2026-24686, CVE-2026-25679, CVE-2026-25934, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186, CVE-2026-33481, ghsa-273p-m2cw-6833, ghsa-37cx-329c-33x3, ghsa-38pp-6gcp-rqvm, ghsa-4c4x-jm2x-pf9j, ghsa-59jp-pj84-45mr, ghsa-846p-jg2w-w324, ghsa-9h8m-3fm2-qjrq, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-q9hv-hpm4-hj6x, ghsa-rjcw-vg7j-m9rc, ghsa-whqx-f9j3-ch6m applied in versions: 3.0.47-r0, 3.0.47-r1

Multiple security vulnerabilities affect the kubescape package. These issues are resolved in later releases. See references for individual vulnerability details...