GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kwok, kubescape-operator, external-secrets-operator, descheduler, cluster-autoscaler, rancher-agent, helm-operator, cluster-api-provider-vsphere, cluster-api-gcp-controller, grafana, openfga, cloud-provider-gcp-cloud-controller-manager, yunikorn-k8shim, kyverno,...

GHSA-CXH2-4639-VMC5 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Affected Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator TargetAllocator Companion: Prometheus Operator API types CRDs Summary OpenTelemetry Operator's TargetAllocator watches ServiceMonitor resources via the Prometheus Operator CR watcher and converts...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: kargo, teleport, kyverno-policy-reporter, k8sgateway, spegel, kyverno-policy-reporter-ui, traefik, q, jitsucom-bulker, opentelemetry-operator, coredns, k3s, kubo, frp, prometheus-blackbox-exporter, kubernetes-dns-node-cache, kube-metrics-adapter, dkron, ipfs-cluster...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: mcp-grafana, amazon-cloudwatch-agent-operator, node-problem-detector, minio, metrics-server, minio-object-browser, opentelemetry-operator, jaeger, opentelemetry-collector-contrib, datadog-agent, keda, certificate-transparency, trillian, aws-otel-collector,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: mariadb-operator, aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips, cert-manager-csi-driver-fips, step-issuer-fips, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator-fips, cert-manager-cmctl-fips, aws-privateca-issuer,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: step-issuer, opentelemetry-operator, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer, cert-manager-csi-driver, cert-manager-webhook-pdns, mariadb-operator, percona-server-mongodb-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: step-issuer, opentelemetry-operator, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer, cert-manager-csi-driver, cert-manager-webhook-pdns, mariadb-operator, percona-server-mongodb-operator...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: mariadb-operator, aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips, cert-manager-csi-driver-fips, step-issuer-fips, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator-fips, cert-manager-cmctl-fips, aws-privateca-issuer,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: kargo, filebrowser, docker, kine, amazon-cloudwatch-agent-operator, flux-image-reflector-controller, grafana-alloy, pulumi, secrets-store-csi-driver-provider-azure, rclone, opentelemetry-collector-contrib, sftpgo-plugin-pubsub, sops, flux-notification-controller,...