GO-2026-6686 vulnerabilities

Vulnerabilities for packages: docker-fips, envoy-gateway, xeol, datadog-agent, umoci, ctop-fips, neuvector-fips, vcluster, packer-fips, eks-distro, kubevirt-cdi-uploadserver, amazon-ecs-agent, rke2-runtime-fips, crossplane-function-kcl-fips, k8s-image-swapper-fips,...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: kubevirt-cdi-uploadserver, amazon-cloudwatch-agent-operator-fips, rke2-runtime, rancher, rancher-agent, harvester, prometheus, k3s, vault, amazon-cloudwatch-agent-operator, kubevela, pulumi, amazon-ecs-agent-fips, harvester-fips, amazon-ecs-agent, promxy...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, crossplane, falcoctl, rancher-machine, aactl, harbor, xeol, harbor-scanner-trivy-fips, lazydocker, portieris-fips, amazon-ecs-agent, promxy, opentelemetry-operator, openbao, kpt, bento, xeol-fips, beats-fips, ctop, newrelic-infrastructure-agent...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, datadog-agent, crossplane-provider-azure-storagesync, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-aws-athena-fips, knative-client, crossplane-provider-aws-kinesis-fips, crossplane-provider-gitlab-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-function-go-templating, grafana-mimir, aws-flb-kinesis-fips, crossplane-provider-keycloak, deck-fips, terraform-provider-kubernetes-fips, nri-redis-fips, harbor, datadog-agent, gcp-compute-persistent-disk-csi-driver-fips, grafana-operator, contour, kiam,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: grafana-mimir, harbor, datadog-agent, grpc-health-probe-fips, sqlexporter-fips, apko-fips, xeol-fips, opencost, rook-fips, trivy, seaweedfs-rocksdb-fips, kyverno-notation-aws-fips, podman, spire-controller-manager-fips, thanos-fips, podman-fips, velero-fips,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...