GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: grype, cg, trivy-operator-fips, kgateway-fips, spegel-fips, rancher-helm, amazon-ecs-agent, tw, xeol-fips, neuvector-scanner, buildkitd-fips, teleport, ctop, chainctl, headlamp-fips, harvester, kube-mgmt, kgateway, kaniko, spegel, eksctl, kube-arangodb,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: syft, buildkitd, neuvector-scanner, k8ssandra-client, newrelic-infrastructure-agent, helm-operator, kargo, dagger, helm, opa-envoy, rancher-fleet, fuse-overlayfs-snapshotter, melange, nerdctl, docker-cli-buildx, wolfictl, flux-source-controller, cilium-cli, kubescape...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: capslock, kubernetes-dashboard, vertical-pod-autoscaler, docker-credential-gcr, falco, kubebuilder, nri-nginx, nri-nagios, fq, gcsfuse, aws-flb-firehose, cue, speedtest-go, actions-runner-controller, grpcurl, k3d, prometheus-pushgateway, logstash-exporter,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: capslock, kubernetes-dashboard, vertical-pod-autoscaler, docker-credential-gcr, falco, kubebuilder, nri-nginx, nri-nagios, fq, gcsfuse, aws-flb-firehose, cue, speedtest-go, actions-runner-controller, grpcurl, k3d, prometheus-pushgateway, logstash-exporter,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: capslock, kubernetes-dashboard, vertical-pod-autoscaler, docker-credential-gcr, falco, kubebuilder, nri-nginx, nri-nagios, fq, gcsfuse, aws-flb-firehose, cue, speedtest-go, actions-runner-controller, grpcurl, k3d, prometheus-pushgateway, logstash-exporter,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: capslock, kubernetes-dashboard, vertical-pod-autoscaler, docker-credential-gcr, falco, kubebuilder, nri-nginx, nri-nagios, fq, gcsfuse, aws-flb-firehose, cue, speedtest-go, actions-runner-controller, grpcurl, k3d, prometheus-pushgateway, logstash-exporter,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: grype, neuvector-scanner, cadvisor, kubernetes, opentelemetry-collector-contrib-fips, buildah, opentelemetry-collector-contrib, wolfictl, kubernetes-fips, ctop, cadvisor-fips...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: grype, neuvector-scanner, cadvisor, kubernetes, opentelemetry-collector-contrib-fips, buildah, opentelemetry-collector-contrib, wolfictl, kubernetes-fips, ctop, cadvisor-fips...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, syft, capslock, rook, kubernetes-dashboard, trust-manager, metacontroller, vertical-pod-autoscaler, crossplane-provider-azure-sql, falco, crossplane-provider-aws-memorydb, hugo, gcsfuse, actions-runner-controller, bank-vaults,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: capslock, kubernetes-dashboard, vertical-pod-autoscaler, docker-credential-gcr, falco, kubebuilder, nri-nginx, nri-nagios, fq, gcsfuse, aws-flb-firehose, cue, speedtest-go, actions-runner-controller, grpcurl, k3d, prometheus-pushgateway, logstash-exporter,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: capslock, kubernetes-dashboard, vertical-pod-autoscaler, docker-credential-gcr, falco, kubebuilder, nri-nginx, nri-nagios, fq, gcsfuse, aws-flb-firehose, cue, speedtest-go, actions-runner-controller, grpcurl, k3d, prometheus-pushgateway, logstash-exporter,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: goreleaser, helm-operator-fips, helm-fips, policy-controller-fips, aactl, tekton-chains, nerdctl, cert-manager, helm-operator, dagger, cadvisor-fips, falcoctl, kpt, loki, cosign-fips, flux-image-reflector-controller, k8sgpt, flux, kargo, guac, bom, datadog-agent-fips...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: goreleaser, helm-operator-fips, helm-fips, policy-controller-fips, aactl, tekton-chains, nerdctl, cert-manager, helm-operator, dagger, cadvisor-fips, falcoctl, kpt, loki, cosign-fips, flux-image-reflector-controller, k8sgpt, flux, kargo, guac, bom, datadog-agent-fips...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: cadvisor, buildkitd, syft, newrelic-infrastructure-agent, podman, kubernetes, runc, k3d, nerdctl, wolfictl, k9s, skopeo, kubescape, zarf, kots, kaniko, trivy, datadog-agent, grype, skaffold, k3s, docker, ctop, zot...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: docker, grype, nerdctl, wolfictl, datadog-agent-fips, k3d, k3s, datadog-agent, ctop, buildkitd, podman, skopeo, runc, kubernetes-fips, kaniko, syft, trivy, zarf, skaffold, cadvisor, kubernetes, k9s, kots, zot, newrelic-infrastructure-agent, kubescape...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: grype, fuse-overlayfs-snapshotter, cert-manager, flux-source-controller, k8sgpt, k3d, flux-helm-controller, up, ctop, buildkitd, kaniko, trivy, cert-manager-fips, eksctl, gitness, helm-push, cilium-cli, kubevela, melange, skaffold, helm, kots, zot,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: metacontroller, hugo, cue, grpcurl, k3d, flux-notification-controller, kubernetes-csi-livenessprobe, minio, flux-source-controller, oauth2-proxy, kubescape, gobuster, kpt, atlantis, weaviate, nats, terraform-provider-sendgrid, secrets-store-csi-driver, nri-prometheus...