GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, syft, kubescape-operator, helm-push, neuvector-fips, docker-fips, gatekeeper, kgateway, fuse-overlayfs-snapshotter, docker, trivy-fips, amazon-ecs-agent-fips, neuvector, rancher-agent, dagger, newrelic-infrastructure-agent, grype,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: gatekeeper, envoy-gateway, linkerd2, rancher-fleet, zot, docker-compose, k3s, neuvector-scanner, opa, spegel, dagger, k8ssandra-client, docker-cli-buildx, cert-manager-cmctl, nerdctl, cluster-api-helm-controller, cilium-cli, flux-helm-controller, buildkitd, kubevela,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: coredns, oras, q, tailscale, flux-image-automation-controller, nri-elasticsearch, k3s, fq, newrelic-infra-operator, dagger, volume-modifier-for-k8s, go-md2man, bazelisk, delve, dockerize, flannel-cni-plugin, nri-prometheus, vite, trillian, nri-cassandra, dataplaneapi...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: coredns, oras, q, tailscale, flux-image-automation-controller, nri-elasticsearch, k3s, fq, newrelic-infra-operator, dagger, volume-modifier-for-k8s, go-md2man, bazelisk, delve, dockerize, flannel-cni-plugin, nri-prometheus, vite, trillian, nri-cassandra, dataplaneapi...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: coredns, oras, q, tailscale, flux-image-automation-controller, nri-elasticsearch, k3s, fq, newrelic-infra-operator, dagger, volume-modifier-for-k8s, go-md2man, bazelisk, delve, dockerize, flannel-cni-plugin, nri-prometheus, vite, trillian, nri-cassandra, dataplaneapi...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: coredns, oras, q, tailscale, flux-image-automation-controller, nri-elasticsearch, k3s, fq, newrelic-infra-operator, dagger, volume-modifier-for-k8s, go-md2man, bazelisk, delve, dockerize, flannel-cni-plugin, nri-prometheus, vite, trillian, nri-cassandra, dataplaneapi...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: wolfictl, kubernetes-fips, kubernetes, grype, cadvisor-fips, opentelemetry-collector-contrib, ctop, cadvisor, opentelemetry-collector-contrib-fips, neuvector-scanner, buildah...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: wolfictl, kubernetes-fips, kubernetes, grype, cadvisor-fips, opentelemetry-collector-contrib, ctop, cadvisor, opentelemetry-collector-contrib-fips, neuvector-scanner, buildah...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, coredns, guac, flux-image-automation-controller, terragrunt, k3s, tkn, newrelic-infra-operator, dagger, volume-modifier-for-k8s, nri-prometheus, falcoctl, trillian, kube-fluentd-operator, atlantis, k3d, kubeadm-controlplane-controller,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: coredns, oras, q, tailscale, flux-image-automation-controller, nri-elasticsearch, k3s, fq, newrelic-infra-operator, dagger, volume-modifier-for-k8s, go-md2man, bazelisk, delve, dockerize, flannel-cni-plugin, nri-prometheus, vite, trillian, nri-cassandra, dataplaneapi...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: coredns, oras, q, tailscale, flux-image-automation-controller, nri-elasticsearch, k3s, fq, newrelic-infra-operator, dagger, volume-modifier-for-k8s, go-md2man, bazelisk, delve, dockerize, flannel-cni-plugin, nri-prometheus, vite, trillian, nri-cassandra, dataplaneapi...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: policy-controller-fips, pulumi, argo-workflows-fips, k3d, eksctl, cert-manager-fips, cosign-fips, skaffold, helm, k8sgpt, k3s, timoni, flux-image-reflector-controller, goreleaser, falcoctl, kubescape, flux, kargo, aactl, vexctl, scorecard, crane, falco, cadvisor,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, pulumi, argo-workflows-fips, k3d, eksctl, cert-manager-fips, cosign-fips, skaffold, helm, k8sgpt, k3s, timoni, flux-image-reflector-controller, goreleaser, falcoctl, kubescape, flux, kargo, aactl, vexctl, scorecard, crane, falco, cadvisor,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: runc, syft, skaffold, k3s, docker, kubernetes-fips, cadvisor, datadog-agent, buildkitd, skopeo, kaniko, ctop, nerdctl, newrelic-infrastructure-agent, grype, trivy, wolfictl, zot, kubernetes, datadog-agent-fips, zarf, kots, kubescape, k9s, podman, k3d...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: zot, k3s, kubernetes, nerdctl, k3d, runc, cadvisor, buildkitd, datadog-agent, syft, ctop, wolfictl, k9s, kubescape, newrelic-infrastructure-agent, kaniko, grype, kots, skaffold, skopeo, zarf, podman, trivy, docker...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: eksctl, flux-source-controller, cert-manager-fips, skaffold, helm-push, helm, k8sgpt, fuse-overlayfs-snapshotter, gitness, cilium-cli, up, rancher-agent, flux-helm-controller, kaniko, ctop, newrelic-infrastructure-agent, grype, trivy, zot, melange, kots, kubevela,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: coredns, nri-prometheus, atlantis, k3d, node-problem-detector, kubewatch, flux-helm-controller, prometheus-blackbox-exporter, nodetaint, pulumi-language-java, kubeflow-katib, skaffold, src, pulumi-language-yaml, git-lfs, terraform-provider-aws, memcached-exporter, ko...