GO-2025-3547 vulnerabilities

Vulnerabilities for packages: harvester, longhorn-share-manager-fips, longhorn-manager, eks-distro, azurefile-csi, longhorn-manager-fips, rke2-runtime-fips, longhorn-share-manager, azuredisk-csi, azurefile-csi-fips, kubernetes-csi-driver-hostpath, cluster-autoscaler-fips, rancher-system-agent,...

GO-2025-3521 vulnerabilities

Vulnerabilities for packages: harvester, longhorn-share-manager-fips, longhorn-manager, vcluster, azure-container-networking, kubernetes, longhorn-manager-fips, rke2-runtime-fips, longhorn-share-manager, harvester-fips, argo-cd-fips, spark-operator-fips...

GO-2025-3915 vulnerabilities

Vulnerabilities for packages: longhorn-share-manager-fips, local-static-provisioner, vcluster, blob-csi, rancher-webhook-fips, rancher-agent, kubernetes-dns-node-cache, yunikorn-k8shim-fips, node-feature-discovery-fips, nodetaint, local-static-provisioner-fips, eks-distro-fips,...

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: harvester, longhorn-share-manager-fips, longhorn-manager, eks-distro, azurefile-csi, longhorn-manager-fips, rke2-runtime-fips, longhorn-share-manager, azuredisk-csi, azurefile-csi-fips, kubernetes-csi-driver-hostpath, cluster-autoscaler-fips, rancher-system-agent,...

CVE-2024-7598 vulnerabilities

Vulnerabilities for packages: harvester, longhorn-share-manager-fips, longhorn-manager, eks-distro, azurefile-csi, longhorn-manager-fips, rke2-runtime-fips, longhorn-share-manager, azuredisk-csi, azurefile-csi-fips, kubernetes-csi-driver-hostpath, cluster-autoscaler-fips, rancher-system-agent,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, dex, crossplane-provider-aws-opensearchserverless, descheduler, coredns, longhorn-share-manager, cluster-autoscaler, crossplane-provider-aws-ssm-fips, mlrun-log-collector, crossplane-provider-aws-vpc-fips, backup-restore-operator-fips,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: neuvector, k9s, sonobuoy, istio-fips, redis-operator-fips, velero, teleport, plugin-barman-cloud, k8sgpt-operator, postgres-operator, eks-distro-fips, argocd-image-updater, falcoctl, cilium-fips, cert-manager-istio-csr, cri-tools, kcp-fips, gitlab-kas-fips, grafana,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: neuvector, k9s, sonobuoy, istio-fips, redis-operator-fips, velero, teleport, plugin-barman-cloud, k8sgpt-operator, postgres-operator, eks-distro-fips, argocd-image-updater, falcoctl, cilium-fips, cert-manager-istio-csr, cri-tools, kcp-fips, gitlab-kas-fips, grafana,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: conjur-cli, mailpit, authservice, oras, dynamic-localpv-provisioner, ytt, temporal-ui-server, litefs, php-fpmexporter, cosign, rabbitmq-default-user-credential-updater, victoriametrics-cluster, victoriametrics-operator, rook, k8ssandra-operator, kwok, malcontent,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gitlab-fips, livekit-egress, aws-flb-cloudwatch-fips, crossplane-function-auto-ready-fips, commercial-expanso-edge, dex, crossplane-provider-aws-rds-fips, crossplane-aws-provider-fips, knative-net-istio-fips, tkn-fips, descheduler, gotrue-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gitlab-fips, livekit-egress, aws-flb-cloudwatch-fips, crossplane-function-auto-ready-fips, commercial-expanso-edge, dex, crossplane-provider-aws-rds-fips, crossplane-aws-provider-fips, knative-net-istio-fips, tkn-fips, descheduler, gotrue-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gitlab-fips, livekit-egress, yace-fips, nri-couchbase, aws-flb-cloudwatch-fips, crossplane-function-auto-ready-fips, commercial-expanso-edge, dex, crossplane-provider-aws-rds-fips, crossplane-aws-provider-fips, knative-net-istio-fips, tkn-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, aws-flb-cloudwatch-fips, dex, sigstore-scaffolding, descheduler, neuvector-dbgen, coredns, longhorn-share-manager, envoy-ratelimit-fips, cluster-autoscaler, newrelic-k8s-metadata-injection, crossplane-provider-aws-ssm-fips, kustomize,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: vault-benchmark, knative-operator, azurefile-csi, terraform-provider-google, telegraf, secrets-store-csi-driver-provider-aws, terraform-provider-pagerduty, authservice, trino, blob-csi, kube-rbac-proxy, kaf, flux-notification-controller, gitlab-pages, boring-registry...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: vault-benchmark, knative-operator, azurefile-csi, terraform-provider-google, telegraf, secrets-store-csi-driver-provider-aws, terraform-provider-pagerduty, authservice, trino, blob-csi, kube-rbac-proxy, kaf, flux-notification-controller, gitlab-pages, boring-registry...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: conjur-cli, azurefile-csi, authservice, trino, oras, dynamic-localpv-provisioner, ytt, litefs, php-fpmexporter, victoriametrics-cluster, rabbitmq-default-user-credential-updater, victoriametrics-operator, rook, k8ssandra-operator, cluster-api-azure-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: conjur-cli, azurefile-csi, authservice, trino, oras, dynamic-localpv-provisioner, ytt, litefs, php-fpmexporter, victoriametrics-cluster, rabbitmq-default-user-credential-updater, victoriametrics-operator, rook, k8ssandra-operator, cluster-api-azure-controller,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: conjur-cli, azurefile-csi, authservice, trino, oras, dynamic-localpv-provisioner, ytt, litefs, php-fpmexporter, victoriametrics-cluster, rabbitmq-default-user-credential-updater, victoriametrics-operator, rook, k8ssandra-operator, cluster-api-azure-controller,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: conjur-cli, azurefile-csi, authservice, trino, oras, dynamic-localpv-provisioner, ytt, litefs, php-fpmexporter, victoriametrics-cluster, rabbitmq-default-user-credential-updater, victoriametrics-operator, rook, k8ssandra-operator, cluster-api-azure-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gitlab-fips, livekit-egress, gogatekeeper, bento-fips, yace-fips, nri-couchbase, aws-flb-cloudwatch-fips, crossplane-function-auto-ready-fips, commercial-expanso-edge, dex, crossplane-provider-aws-rds-fips, crossplane-aws-provider-fips,...