GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, k8sgpt, docker-fips, spegel-fips, helmfile, chaos-mesh-fips, harvester, docker-cli-buildx, kgateway, kube-arangodb-fips, trivy, consul-k8s, helm-exporter-fips, redpanda-operator, steampipe, headlamp, amazon-ecs-agent,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: grype, helm-push, zarf, kubescape, cilium-cli, fuse-overlayfs-snapshotter, eksctl, trivy, k3s, helm, flux-helm-controller, neuvector-scanner, flux-source-controller, wolfictl, buildkitd, ctop, envoy-gateway, linkerd2, xeol, kargo, kots, docker-cli-buildx,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: gobuster, helm-push, kubernetes-csi-external-resizer, stakater-reloader, kubewatch, fq, regclient, goreleaser, kubernetes-dashboard, trillian, pulumi-kubernetes-operator, oras, flux-image-reflector-controller, gosu, cass-operator, kind, kubebuilder,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: gobuster, helm-push, kubernetes-csi-external-resizer, stakater-reloader, kubewatch, fq, regclient, goreleaser, kubernetes-dashboard, trillian, pulumi-kubernetes-operator, oras, flux-image-reflector-controller, gosu, cass-operator, kind, kubebuilder,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: gobuster, helm-push, kubernetes-csi-external-resizer, stakater-reloader, kubewatch, fq, regclient, goreleaser, kubernetes-dashboard, trillian, pulumi-kubernetes-operator, oras, flux-image-reflector-controller, gosu, cass-operator, kind, kubebuilder,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: gobuster, helm-push, kubernetes-csi-external-resizer, stakater-reloader, kubewatch, fq, regclient, goreleaser, kubernetes-dashboard, trillian, pulumi-kubernetes-operator, oras, flux-image-reflector-controller, gosu, cass-operator, kind, kubebuilder,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: kubernetes-fips, cadvisor, cadvisor-fips, wolfictl, neuvector-scanner, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, ctop, kubernetes, buildah, grype...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, cadvisor, cadvisor-fips, wolfictl, neuvector-scanner, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, ctop, kubernetes, buildah, grype...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: zarf, crossplane-provider-aws-dynamodb, helm-push, kubernetes-csi-external-resizer, conftest, crossplane-provider-azure-authorization, kyverno-policy-reporter-ui, kubewatch, stakater-reloader, trivy, crossplane-provider-aws-cloudformation, goreleaser,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: gobuster, helm-push, kubernetes-csi-external-resizer, stakater-reloader, kubewatch, fq, regclient, goreleaser, kubernetes-dashboard, trillian, pulumi-kubernetes-operator, oras, flux-image-reflector-controller, gosu, cass-operator, kind, kubebuilder,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: gobuster, helm-push, kubernetes-csi-external-resizer, stakater-reloader, kubewatch, fq, regclient, goreleaser, kubernetes-dashboard, trillian, pulumi-kubernetes-operator, oras, flux-image-reflector-controller, gosu, cass-operator, kind, kubebuilder,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: cri-tools, cadvisor, cadvisor-fips, argo-workflows, falcoctl, loki, up, k8sgpt, k3s, guac, newrelic-infrastructure-agent, argo-workflows-fips, zot, buildkitd, chartmuseum, timoni, trivy, cert-manager-fips, falco, nerdctl, bom, docker-machine-driver-harvester,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cri-tools, cadvisor, cadvisor-fips, argo-workflows, falcoctl, loki, up, k8sgpt, k3s, guac, newrelic-infrastructure-agent, argo-workflows-fips, zot, buildkitd, chartmuseum, timoni, trivy, cert-manager-fips, falco, nerdctl, bom, docker-machine-driver-harvester,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: grype, zarf, kubescape, trivy, k3s, runc, buildkitd, cadvisor, ctop, k3d, kots, nerdctl, zot, k9s, podman, kubernetes, docker, skopeo, syft, kaniko, wolfictl, newrelic-infrastructure-agent, skaffold, datadog-agent...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, cadvisor, k3s, newrelic-infrastructure-agent, zot, buildkitd, trivy, wolfictl, nerdctl, podman, datadog-agent, skopeo, datadog-agent-fips, grype, runc, kubernetes, k3d, syft, kaniko, zarf, skaffold, k9s, kubescape, ctop, kots, docker...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: up, melange, cilium-cli, rancher-agent, k8sgpt, helm-push, newrelic-infrastructure-agent, zot, gitness, buildkitd, trivy, cert-manager-fips, flux-source-controller, grype, cert-manager, kubevela, eksctl, k3d, kaniko, fuse-overlayfs-snapshotter, skaffold,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gobuster, conftest, stakater-reloader, kubewatch, pulumi-kubernetes-operator, atlantis, flux-source-controller, kind, metacontroller, mc, certificate-transparency, coredns, rqlite, gitness, prometheus-adapter, prometheus-blackbox-exporter, cosign, frp,...