CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, gitlab-kas-fips, crossplane-provider-aws-kafka, crossplane-provider-aws-cloudwatchevents, crossplane-provider-azure-resources, crossplane-provider-aws-kafka-fips, crossplane-provider-aws-cloudwatchlogs, commercial-grafana, emissary,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, logstash-exporter, stern, nodetaint, onepassword-operator, yunikorn-web, cert-manager-csi-driver-fips, cluster-api-provider-vsphere, gitlab-kas-fips, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: kaniko, rekor, gitlab-kas-fips, percona-server-mongodb-operator, tkn, envoy-gateway-fips, kubeflow-pipelines, oauth2-proxy, commercial-chainloop-cli, packer-fips, spire-controller-manager, commercial-grafana, gcsfuse, crossplane, seaweedfs-operator-fips,...

CVE-2025-14459

A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...