GO-2026-5039 vulnerabilities

Vulnerabilities for packages: rancher-agent, crossplane-provider-aws-cloudformation, prometheus, aactl, addon-resizer, docker-machine-driver-harvester, timoni, policy-controller, crossplane, grafana-operator, local-path-provisioner, nri-elasticsearch, coredns, terraform-docs, k9s,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus, aactl, docker-machine-driver-harvester, kubernetes-dashboard-auth, spire-controller-manager, tkn, nri-f5, rabbitmq-cluster-operator, argo-events, dex, gcsfuse, src, kapp-controller, k8sgpt, cloud-provider-vsphere, delve, conftest, fulcio, harbor-cli,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: migrate, whereabouts, kube-arangodb-fips, knative-net-istio, cloudflared-fips, pulumi-language-yaml, oauth2-proxy, blob-csi-fips, crossplane, gitlab-kas, dex, external-dns-fips, cloud-provider-aws-fips, commercial-grafana, dynamic-localpv-provisioner-fips, kbld,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: rancher-agent, prometheus, docker-credential-gcr, aactl, undock, crossplane, helm-set-status, cluster-api-helm-controller, falcoctl, amazon-cloudwatch-agent-operator, opentelemetry-operator, bom, helm-mapkubeapis, openbao, rancher-machine, xeol, lazydocker, k3d,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: openbao, promxy-fips, cluster-api-helm-controller, kubeflow-katib, vault, harbor-fips, helm-mapkubeapis, k3d, beats-fips, crossplane, aactl, harbor-scanner-trivy, tekton-pipelines, rancher-agent, neuvector-scanner-fips, opentelemetry-operator, promxy, xeol-fips,...