kubescape

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

CLEANSTART-2026-UD96050 Security fix for GHSA-p436-gjf2-799p applied in: argo-workflows 3.6.19-r2, policy-controller 0.12.1-r1, cosign 2.6.4-r1, kubescape 3.0.47-r0, dynatrace-operator 1.6.3-r0, paranoia 0.5.0-r0

GHSA-p436-gjf2-799p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GHSA-27R3-JXMH-P828 vulnerabilities

Vulnerabilities for packages: verdaccio, eco-jess, code-server, langfuse, langfuse-fips, tileserver-gl, json-server, arangodb, kubeflow-centraldashboard, unleash-proxy, redisinsight, node-red, wazuh-dashboard, argo-workflows, kibana, opensearch-dashboards, pelias-api, wazuh-dashboard-fips,...

CVE-2026-111181 vulnerabilities

Vulnerabilities for packages: verdaccio, eco-jess, code-server, langfuse, langfuse-fips, tileserver-gl, json-server, arangodb, kubeflow-centraldashboard, unleash-proxy, redisinsight, node-red, wazuh-dashboard, argo-workflows, kibana, opensearch-dashboards, pelias-api, wazuh-dashboard-fips,...

CVE-2026-114437 vulnerabilities

Vulnerabilities for packages: teleport, redpanda-operator, gogatekeeper, telegraf, step-issuer-fips, gitea, cloudbeat-fips, policy-controller-fips, cortex-geomys-fips, dapr-fips, pyrra-fips, spire-server-fips, crossplane-cli, sftpgo, nuclio-controller, gitea-fips, cosign, kubescape, step-ca, dapr...

GHSA-J6QF-3M9C-VWJ3 vulnerabilities

Vulnerabilities for packages: teleport, redpanda-operator, gogatekeeper, telegraf, step-issuer-fips, gitea, cloudbeat-fips, policy-controller-fips, cortex-geomys-fips, dapr-fips, pyrra-fips, spire-server-fips, crossplane-cli, sftpgo, nuclio-controller, gitea-fips, cosign, kubescape, step-ca, dapr...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, kubescape-server, kubescape-server-fips, kubescape-operator, hubble-ui-backend-fips, kubescape, hubble-ui, hubble, cilium, hubble-fips...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: cilium, hubble, kubescape, kubescape-operator, hubble-ui...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: kubevela, docker, trivy, scorecard, wolfictl, rancher, rancher-helm, newrelic-infrastructure-agent, docker-cli-buildx, helm-mapkubeapis, kubescape, helm-push, fuse-overlayfs-snapshotter, spegel, neuvector-scanner, kargo, trivy-operator, zarf, zot, k9s, falco-no-drive...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: kubevela, docker, trivy, scorecard, wolfictl, rancher, rancher-helm, newrelic-infrastructure-agent, docker-cli-buildx, helm-mapkubeapis, kubescape, helm-push, fuse-overlayfs-snapshotter, spegel, neuvector-scanner, kargo, trivy-operator, zarf, zot, k9s, falco-no-drive...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: kubevela, docker, trivy, scorecard, wolfictl, rancher, rancher-helm, newrelic-infrastructure-agent, docker-cli-buildx, helm-mapkubeapis, kubescape, helm-push, fuse-overlayfs-snapshotter, spegel, neuvector-scanner, kargo, trivy-operator, zarf, zot, k9s, falco-no-drive...

GHSA-W7C2-W76W-5HMJ vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, kubescape-server, kubescape-server-fips, kubescape-operator, hubble-ui-backend-fips, kubescape, hubble-ui, hubble, cilium, hubble-fips...

GHSA-W7C2-W76W-5HMJ vulnerabilities

Vulnerabilities for packages: cilium, hubble, kubescape, kubescape-operator, hubble-ui...

CLEANSTART-2026-BV58345 Security fix for GHSA-jqc5-w2xx-5vq4 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, kyverno-fips 1.16.3-r3, sigstore-scaffolding 0.7.31-r1, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-jqc5-w2xx-5vq4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CM50083 Security fix for GHSA-4c4x-jm2x-pf9j applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-4c4x-jm2x-pf9j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RI42866 Security fix for GHSA-273p-m2cw-6833 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.1-r2, spire-server 1.14.1-r1, spire-server-fips 1.14.1-r1, tekton-chains 0.26.0-r2, tekton-chains-fips 0.26.0-r2, tkn-fips 0.43.0-r2

GHSA-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AP98474 Security fix for CVE-2026-24686 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.29-r2, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1

CVE-2026-24686 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UW62677 Security fix for CVE-2026-23992 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3

CVE-2026-23992 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JT87240 Security fix for CVE-2026-23991 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, kubescape 3.0.47-r0, kyverno-fips 1.16.3-r3, policy-controller 0.12.1-r1, sigstore-scaffolding 0.7.31-r2, tkn 0.43.2-r1, tkn-fips 0.43.0-r3

CVE-2026-23991 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...