GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: zot, kubevela, datadog-agent-fips, google-osconfig-agent, xeol, crossplane, kubescape-server-fips, linkerd2, trivy-operator-fips, helm-operator, helm-set-status, syft, kargo, linkerd2-fips, livekit-cli, eksctl, trivy-fips, manifest-tool, redpanda-operator,...

CLEANSTART-2026-CX34942 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-46680, ghsa-fqw6-gf59-qr4w applied in versions: 1.71.4-r0, 1.73.1-r0, 1.73.1-r1

Multiple security vulnerabilities affect the newrelic-infrastructure-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: flux-source-controller, cilium-cli, envoy-gateway, neuvector-scanner, skaffold, cluster-api-helm-controller, ctop, helm-push, k8sgpt, syft, gatekeeper, kargo, kaniko, melange, nerdctl, osv-scanner, kots, kubescape, helm-operator, zot, fuse-overlayfs-snapshotter,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: logstash-exporter, coredns, nri-rabbitmq, smarter-device-manager, nri-memcached, nri-haproxy, pulumi-kubernetes-operator, gomplate, vite, goreleaser, kyverno-policy-reporter-kyverno-plugin, kubernetes-dns-node-cache, dgraph, nfs-subdir-external-provisioner, gosu, yq,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: logstash-exporter, coredns, nri-rabbitmq, smarter-device-manager, nri-memcached, nri-haproxy, pulumi-kubernetes-operator, gomplate, vite, goreleaser, kyverno-policy-reporter-kyverno-plugin, kubernetes-dns-node-cache, dgraph, nfs-subdir-external-provisioner, gosu, yq,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: logstash-exporter, coredns, nri-rabbitmq, smarter-device-manager, nri-memcached, nri-haproxy, pulumi-kubernetes-operator, gomplate, vite, goreleaser, kyverno-policy-reporter-kyverno-plugin, kubernetes-dns-node-cache, dgraph, nfs-subdir-external-provisioner, gosu, yq,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: logstash-exporter, coredns, nri-rabbitmq, smarter-device-manager, nri-memcached, nri-haproxy, pulumi-kubernetes-operator, gomplate, vite, goreleaser, kyverno-policy-reporter-kyverno-plugin, kubernetes-dns-node-cache, dgraph, nfs-subdir-external-provisioner, gosu, yq,...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: wolfictl, cadvisor, neuvector-scanner, opentelemetry-collector-contrib-fips, kubernetes-fips, buildah, ctop, cadvisor-fips, opentelemetry-collector-contrib, kubernetes, grype...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: wolfictl, cadvisor, neuvector-scanner, opentelemetry-collector-contrib-fips, kubernetes-fips, buildah, ctop, cadvisor-fips, opentelemetry-collector-contrib, kubernetes, grype...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: logstash-exporter, coredns, smarter-device-manager, bank-vaults, pulumi-kubernetes-operator, gomplate, goreleaser, flux-kustomize-controller, kyverno-policy-reporter-kyverno-plugin, crossplane-provider-aws-lambda, kubernetes-dns-node-cache, dgraph,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: logstash-exporter, coredns, nri-rabbitmq, smarter-device-manager, nri-memcached, nri-haproxy, pulumi-kubernetes-operator, gomplate, vite, goreleaser, kyverno-policy-reporter-kyverno-plugin, kubernetes-dns-node-cache, dgraph, nfs-subdir-external-provisioner, gosu, yq,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: logstash-exporter, coredns, nri-rabbitmq, smarter-device-manager, nri-memcached, nri-haproxy, pulumi-kubernetes-operator, gomplate, vite, goreleaser, kyverno-policy-reporter-kyverno-plugin, kubernetes-dns-node-cache, dgraph, nfs-subdir-external-provisioner, gosu, yq,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: zot, kubevela, datadog-agent-fips, skaffold, falco, cert-manager-fips, buildkitd, slsa-verifier, argo-workflows, cri-tools, datadog-agent, helm-operator, argo-workflows-fips, kargo, zarf, bom, crane, goreleaser, up, loki, chartmuseum, k3s, flux, flux-helm-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: zot, kubevela, datadog-agent-fips, skaffold, falco, cert-manager-fips, buildkitd, slsa-verifier, argo-workflows, cri-tools, datadog-agent, helm-operator, argo-workflows-fips, kargo, zarf, bom, crane, goreleaser, up, loki, chartmuseum, k3s, flux, flux-helm-controller,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: skaffold, ctop, syft, kubernetes, kaniko, podman, cadvisor, nerdctl, kots, kubescape, zot, wolfictl, k9s, trivy, docker, skopeo, k3s, runc, grype, zarf, datadog-agent, buildkitd, k3d, newrelic-infrastructure-agent...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: zot, datadog-agent-fips, skaffold, buildkitd, datadog-agent, kubernetes, syft, wolfictl, zarf, k3s, k9s, kaniko, kots, newrelic-infrastructure-agent, docker, podman, nerdctl, runc, kubescape, skopeo, cadvisor, trivy, k3d, kubernetes-fips, ctop, grype...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: zot, kubevela, melange, skaffold, cert-manager-fips, buildkitd, fuse-overlayfs-snapshotter, up, helm-push, cilium-cli, flux-source-controller, kaniko, kots, newrelic-infrastructure-agent, eksctl, rancher-agent, kubescape, k8sgpt, cert-manager, helm, trivy, gitness,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: coredns, pulumi-kubernetes-operator, gomplate, flux-kustomize-controller, dgraph, flux-notification-controller, mc, kubevela, gobuster, git-lfs, cosign, kpt, terraform-provider-aws, gke-gcloud-auth-plugin, memcached-exporter, grpcurl, kubeflow,...