GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, cilium, cluster-api-aws-controller, gatekeeper, node-feature-discovery, kube-vip-cloud-provider, flux-kustomize-controller, k3s, cloud-provider-aws, cluster-autoscaler, helm-operator, kots, keda, vcluster, cloud-provider-azure,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, percona-xtradb-cluster-operator-fips, cert-manager-webhook-pdns-fips, cert-manager-cmctl, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-openshift-routes-fips, gitlab-operator,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, percona-server-mongodb-operator, step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-csi-driver, aws-privateca-issuer, mariadb-operator, cert-manager-cmctl...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, rancher-agent, k8sgpt, buildah, ko, amazon-cloudwatch-agent-operator, undock, docker-credential-gcr, envoy-gateway, rancher, zot, trivy, cri-tools, grafana, datadog-agent, podman, kpt, kots, skopeo, rancher-machine, trivy-operator, portieris,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, cilium, cluster-api-aws-controller, gatekeeper, node-feature-discovery, kube-vip-cloud-provider, flux-kustomize-controller, k3s, cloud-provider-aws, cluster-autoscaler, helm-operator, kots, keda, vcluster, cloud-provider-azure,...

GHSA-CXH2-4639-VMC5 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Affected Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator TargetAllocator Companion: Prometheus Operator API types CRDs Summary OpenTelemetry Operator's TargetAllocator watches ServiceMonitor resources via the Prometheus Operator CR watcher and converts...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: coredns, ipfs-cluster, kube-metrics-adapter, k8sgateway, opentelemetry-operator, spegel, frp, dkron, kubo, kyverno-policy-reporter-ui, q, kargo, traefik, k3s, kubernetes-dns-node-cache, jitsucom-bulker, teleport, kyverno-policy-reporter...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, minio-operator, mcp-grafana, k8sgpt, istio, opentelemetry-collector-contrib, amazon-cloudwatch-agent-operator, splunk-otel-collector, trillian, mc, certificate-transparency, metrics-server, loki, prometheus-pushgateway, fluent-bit-plugin-loki,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, percona-xtradb-cluster-operator-fips, cert-manager-webhook-pdns-fips, cert-manager-cmctl, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-openshift-routes-fips, gitlab-operator,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, percona-server-mongodb-operator, step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-csi-driver, aws-privateca-issuer, mariadb-operator, cert-manager-cmctl...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, percona-server-mongodb-operator, step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, cert-manager-csi-driver, aws-privateca-issuer, mariadb-operator, cert-manager-cmctl...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, percona-xtradb-cluster-operator-fips, cert-manager-webhook-pdns-fips, cert-manager-cmctl, cert-manager-istio-csr-fips, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-openshift-routes-fips, gitlab-operator,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: filebrowser, kube-metrics-adapter, mongo-tools, flux-source-controller, docker, policy-controller, terraform-provider-azurerm, flux, sqlexporter, flux-kustomize-controller, k3s, gitsign, step-kms-plugin, wal-g, atlantis, glab, sftpgo-plugin-kms, kots, seaweedfs,...