GO-2024-3305 vulnerabilities

Vulnerabilities for packages: vault, amazon-cloudwatch-agent-operator-fips, kubevirt-cdi-uploadserver, pulumi, rancher-agent, rancher, amazon-cloudwatch-agent-operator, kubevela, amazon-ecs-agent-fips, harvester, k3s, rke2-runtime, harvester-fips, promxy, prometheus, amazon-ecs-agent...

GO-2025-3829 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, redpanda, tekton-pipelines, traefik, beats-fips, cluster-api-helm-controller-fips, openbao, rancher-agent, amazon-cloudwatch-agent-operator, harvester, promxy-fips, xeol-fips, cluster-api-fips, openbao-fips, vault,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, crossplane-provider-aws-ecs-fips, volcano, cert-manager-openshift-routes-fips, gatus, crossplane-provider-aws-secretsmanager, haproxy-ingress-fips, gitlab-operator-fips, etcd, crossplane-provider-aws-ecr-fips, kserve, net-kourier, beats,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-custom-runner, crossplane-provider-aws-ecs-fips, scuttle, volcano, cert-manager-openshift-routes-fips, supercronic, databricks-cli-fips, azure-aad-pod-identity-mic, k8ssandra-operator-fips, kube-fluentd-operator, gatus, volume-modifier-for-k8s,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: clickhouse-backup, external-secrets-fips, syft-fips, gatus, kserve, beats, trivy-fips, witness, spire-controller-manager-fips, ratify-fips, velero-fips, external-secrets-operator-fips, crossplane-provider-gcp-fips, envconsul, vault-csi-provider, frankenphp-8.4,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...