GO-2026-6094 vulnerabilities

Vulnerabilities for packages: hubble, keda, kubernetes, crossplane, rancher, rke2-cloud-provider, gitlab-kas, yunikorn-k8shim, datadog-operator, openbao, tkn, datadog-agent, cluster-api-ipam-provider-in-cluster, tekton-pipelines, kwok, cluster-autoscaler, cluster-api-azure-controller,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, cert-manager-istio-csr, cert-manager-webhook-pdns-fips, gitlab-operator, gitlab-operator-fips, mariadb-operator, cert-manager-cmctl, percona-server-mongodb-operator-fips, cert-manager-istio-csr-fips,...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, percona-server-mongodb-operator, aws-privateca-issuer, step-issuer, cert-manager-csi-driver...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: rancher-agent, envoy-gateway, buildah, nuclei, aws-otel-collector, rancher, trivy-operator, grafana, datadog-agent, k8sgpt, rancher-machine, skopeo, zot, opentelemetry-operator, podman, undock, trivy, nerdctl, portieris, docker-credential-gcr, spire-server, kots,...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: hubble, keda, kubernetes, crossplane, rancher, rke2-cloud-provider, gitlab-kas, yunikorn-k8shim, datadog-operator, openbao, tkn, datadog-agent, cluster-api-ipam-provider-in-cluster, tekton-pipelines, kwok, cluster-autoscaler, cluster-api-azure-controller,...

GHSA-CXH2-4639-VMC5 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Affected Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator TargetAllocator Companion: Prometheus Operator API types CRDs Summary OpenTelemetry Operator's TargetAllocator watches ServiceMonitor resources via the Prometheus Operator CR watcher and converts...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: k8sgateway, k3s, kyverno-policy-reporter, opentelemetry-operator, kubo, jitsucom-bulker, q, traefik, teleport, kube-metrics-adapter, kargo, kubernetes-dns-node-cache, frp, kyverno-policy-reporter-ui, coredns, dkron, spegel, ipfs-cluster...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: keda, aws-otel-collector, trillian, cloud-sql-proxy, minio-object-browser, datadog-agent, node-problem-detector, k8sgpt, minio-operator, prometheus-pushgateway, opentelemetry-collector, fluent-bit-plugin-loki, mc, loki, mcp-grafana, opentelemetry-operator, minio,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, cert-manager-istio-csr, cert-manager-webhook-pdns-fips, gitlab-operator, gitlab-operator-fips, mariadb-operator, cert-manager-cmctl, percona-server-mongodb-operator-fips, cert-manager-istio-csr-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, percona-server-mongodb-operator, aws-privateca-issuer, step-issuer, cert-manager-csi-driver...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-istio-csr, mariadb-operator, percona-server-mongodb-operator, aws-privateca-issuer, step-issuer, cert-manager-csi-driver...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, cert-manager-istio-csr, cert-manager-webhook-pdns-fips, gitlab-operator, gitlab-operator-fips, mariadb-operator, cert-manager-cmctl, percona-server-mongodb-operator-fips, cert-manager-istio-csr-fips,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: nuclei, seaweedfs, kubernetes, crossplane, timestamp-authority, falcosidekick, sftpgo-plugin-pubsub, velero-plugin-for-microsoft-azure, aws-eks-pod-identity-agent, guac, sigstore-scaffolding, openbao, tkn, rekor, hydra, terraform-provider-azapi, k8sgpt, minio-operato...