GO-2024-3305 vulnerabilities

Vulnerabilities for packages: kubevirt-cdi-uploadserver, amazon-ecs-agent-fips, harvester, harvester-fips, kubevela, promxy, rancher, amazon-cloudwatch-agent-operator-fips, rke2-runtime, amazon-ecs-agent, k3s, rancher-agent, amazon-cloudwatch-agent-operator, vault, prometheus, pulumi...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, helm-set-status, openbao-fips, beats, falcoctl-fips, skaffold-fips, gatekeeper, traefik, cluster-api-fips, gitlab-rails-ce-fips, helm-mapkubeapis, promxy-fips, docker-credential-gcr-fips, lazydocker, kpt, cluster-api-helm-controller, crossplane...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cognitoidentity-fips, kubedock, kyverno-policy-reporter-plugins-trivy-fips, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-orbital, crossplane-provider-aws-s3-fips, crossplane-provider-aws-osis, vertical-pod-autoscaler,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: k8s-metacollector-fips, crossplane-provider-aws-cognitoidentity-fips, kyverno-policy-reporter-plugins-trivy-fips, helm-diff-fips, crossplane-provider-aws-s3-fips, scorecard, contour, victoriametrics-operator-fips, custom-pod-autoscaler, terraform-fips, coredns, s5cmd...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, crossplane-provider-gcp-fips, chainloop-control-plane-fips, minio, kots, grafana-alloy-fips, neuvector, flyte, sops, azcopy-fips, skaffold-fips, cluster-api-aws-controller, ratify-fips, temporal-fips, cert-manager-istio-csr, trufflehog,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...