GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker, kube-arangodb-fips, buildkitd-fips, trivy, helm-set-status, packer-fips, docker-compose, helmfile, chaos-mesh, xeol, grype-db, newrelic-infrastructure-agent-fips, wolfictl, newrelic-infrastructure-agent, chartmuseum, consul-k8s, cluster-api-helm-controller,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zot, chartmuseum, nerdctl, skaffold, wolfictl, k3s, neuvector-scanner, osv-scanner, syft, docker-compose, rancher-fleet, grype, opa, xeol, k8ssandra-client, kargo, eksctl, envoy-gateway, kubevela, zarf, cilium-cli, flux-helm-controller, k8sgpt,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: cue, kwok, doppler-kubernetes-operator, mongo-tools, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, litefs, nri-memcached, nri-mssql, ferretdb, kubernetes-dashboard, nfs-subdir-external-provisioner, delve, dgraph, docker-credential-gcr, flux-helm-controller,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: cue, kwok, doppler-kubernetes-operator, mongo-tools, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, litefs, nri-memcached, nri-mssql, ferretdb, kubernetes-dashboard, nfs-subdir-external-provisioner, delve, dgraph, docker-credential-gcr, flux-helm-controller,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cue, kwok, doppler-kubernetes-operator, mongo-tools, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, litefs, nri-memcached, nri-mssql, ferretdb, kubernetes-dashboard, nfs-subdir-external-provisioner, delve, dgraph, docker-credential-gcr, flux-helm-controller,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cue, kwok, doppler-kubernetes-operator, mongo-tools, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, litefs, nri-memcached, nri-mssql, ferretdb, kubernetes-dashboard, nfs-subdir-external-provisioner, delve, dgraph, docker-credential-gcr, flux-helm-controller,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: neuvector-scanner, opentelemetry-collector-contrib-fips, kubernetes, wolfictl, kubernetes-fips, opentelemetry-collector-contrib, cadvisor, buildah, cadvisor-fips, ctop, grype...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, opentelemetry-collector-contrib-fips, kubernetes, wolfictl, kubernetes-fips, opentelemetry-collector-contrib, cadvisor, buildah, cadvisor-fips, ctop, grype...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kwok, doppler-kubernetes-operator, crossplane-provider-aws, litefs, policy-controller, fulcio, falcosidekick, atlantis, cosign, ferretdb, kubernetes-dashboard, weaviate, kargo, nfs-subdir-external-provisioner, guac, crossplane-provider-aws-elasticache, dgraph,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: cue, kwok, doppler-kubernetes-operator, mongo-tools, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, litefs, nri-memcached, nri-mssql, ferretdb, kubernetes-dashboard, nfs-subdir-external-provisioner, delve, dgraph, docker-credential-gcr, flux-helm-controller,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: cue, kwok, doppler-kubernetes-operator, mongo-tools, gke-gcloud-auth-plugin, newrelic-fluent-bit-output, litefs, nri-memcached, nri-mssql, ferretdb, kubernetes-dashboard, nfs-subdir-external-provisioner, delve, dgraph, docker-credential-gcr, flux-helm-controller,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: policy-controller-fips, up, kubeflow-katib, argo-workflows, kargo, trivy, argo-workflows-fips, skaffold, cadvisor-fips, docker-machine-driver-harvester, scorecard, k3d, cert-manager, loki, policy-controller, tekton-chains, newrelic-infrastructure-agent, chartmuseum,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, up, kubeflow-katib, argo-workflows, kargo, trivy, argo-workflows-fips, skaffold, cadvisor-fips, docker-machine-driver-harvester, scorecard, k3d, cert-manager, loki, policy-controller, tekton-chains, newrelic-infrastructure-agent, chartmuseum,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: docker, trivy, skaffold, k3d, syft, wolfictl, newrelic-infrastructure-agent, datadog-agent, datadog-agent-fips, nerdctl, ctop, podman, zarf, skopeo, kots, kubernetes-fips, k9s, zot, buildkitd, k3s, kaniko, grype, runc, kubernetes, cadvisor, kubescape...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k9s, zot, nerdctl, skaffold, cadvisor, wolfictl, k3s, syft, grype, kubernetes, zarf, newrelic-infrastructure-agent, buildkitd, trivy, kaniko, runc, docker, k3d, skopeo, datadog-agent, kubescape, kots, podman, ctop...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: up, fuse-overlayfs-snapshotter, trivy, skaffold, k3d, cert-manager, newrelic-infrastructure-agent, kubevela, flux-source-controller, cert-manager-fips, ctop, helm-push, k8sgpt, kots, melange, gitness, zot, rancher-agent, buildkitd, kaniko, grype, eksctl,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: cue, gke-gcloud-auth-plugin, ko, atlantis, cosign, weaviate, dgraph, kubernetes-csi-livenessprobe, flux-helm-controller, terraform, kubewatch, terraform-provider-sendgrid, src, terraform-provider-aws, haproxy-ingress, bom, kubescape, frp, kaf, flux-source-controller,...