GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: rancher-telemetry, kubevela, kubernetes, juicefs-csi-driver, redis-operator, infinispan-operator, verticadb-operator, op-geth, etcd, amazon-cloudwatch-agent, aws-node-termination-handler, guac, emissary, cloudflared, jitsucom-bulker...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, eck-operator-fips, skopeo-fips, chartmuseum, ops-agent, etcd, teleport, cluster-api-helm-controller, wolfictl, volsync-fips, flux-helm-controller-fips, rclone, opencost-fips, drone, flux-notification-controller, kargo,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, eck-operator-fips, skopeo-fips, chartmuseum, ops-agent, etcd, teleport, cluster-api-helm-controller, wolfictl, volsync-fips, flux-helm-controller-fips, rclone, opencost-fips, drone, flux-notification-controller, kargo,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: skopeo, stakater-reloader, dagger, crossplane-provider-family-azure, kubernetes-dashboard-metrics-scraper, postgres-operator, cert-manager-istio-csr, helm, litestream, cert-manager, dagdotdev, karma, flux-image-reflector-controller, apko, cert-manager-csi-driver,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: ops-agent, aws-sigv4-proxy-fips, cinder-csi-plugin-fips, fluent-bit-plugin-loki, drone, crossplane-provider-aws-chime, crossplane-provider-aws-organizations, gatekeeper, amazon-eks-ami-fips, newrelic-nri-kube-events-fips, temporal, blobfuse2, kaniko-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kots, kpt, kargo, cilium-cli, k8sgpt, k8sgpt-operator, envoy-gateway, aws-node-termination-handler, k9s, rancher, hubble, cluster-api, consul-k8s, gitlab-runner, k8ssandra-client, kubernetes-dashboard-api, kwok, cert-manager-istio-csr, postgres-operator, helm,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: wuzz, dapr, stakater-reloader, nginx-prometheus-exporter, crossplane-provider-family-azure, terraform-provider-pagerduty, kubernetes-dashboard-metrics-scraper, postgres-operator, helm, litestream, cert-manager, flux-image-reflector-controller, hubble-ui, apko,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: step-kms-plugin, kyverno-notation-aws, kots, apisix-ingress-controller, bento, dapr, ferretdb, kubescape-operator, trufflehog, grafana-alloy, cluster-api-ipam-provider-in-cluster, dive, grafana, aws-node-termination-handler, k9s, dagger, hubble, migrate,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, eck-operator-fips, chartmuseum, crossplane-provider-aws-sagemaker, ops-agent, etcd, teleport, cluster-api-helm-controller, wolfictl, volsync-fips, task-fips, fluent-bit-plugin-loki, opencost-fips, flux-notification-controller,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: wuzz, skopeo, ferretdb, stakater-reloader, kubernetes-dashboard-metrics-scraper, age, gotestsum, dagdotdev, timescaledb-tune, buildkitd, istio, oauth2-proxy, terraform-provider-azapi, mongodb-kubernetes-operator, secrets-store-csi-driver-provider-gcp, nuclei,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: step-kms-plugin, apisix-ingress-controller, fixuid, helm-mapkubeapis, skopeo, kubebuilder, kubescape-operator, container-object-storage-interface, ferretdb, stakater-reloader, terraform-provider-random, velero-plugin-for-microsoft-azure, dive, manifest-tool,...