13 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: k3s, zot, kubernetes-csi-external-attacher, hubble-ui, openfga, gitlab-kas, spicedb, descheduler, pulumi-kubernetes-operator, cluster-api-ipam-provider-in-cluster, cluster-api, helm-operator, grafana, vcluster, kubernetes-csi-external-provisioner,...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-csi-driver, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr-fips, cert-manager-cmctl, percona-server-mongodb-operator-fips, mariadb-operator, cert-manager-csi-driver-fips, step-issuer-fips,...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, mariadb-operator, step-issuer, cert-manager-cmctl, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator...
GO-2026-5617 vulnerabilities
Vulnerabilities for packages: trivy, spire-server, amazon-cloudwatch-agent-operator, zot, buildah, undock, aws-otel-collector, nuclei, datadog-agent, docker-credential-gcr, ko, nerdctl, trivy-operator, rancher-agent, grafana, podman, rancher-machine, envoy-gateway, portieris,...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: k3s, zot, kubernetes-csi-external-attacher, hubble-ui, openfga, gitlab-kas, spicedb, descheduler, pulumi-kubernetes-operator, cluster-api-ipam-provider-in-cluster, cluster-api, helm-operator, grafana, vcluster, kubernetes-csi-external-provisioner,...
GHSA-CXH2-4639-VMC5 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth
Affected Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator TargetAllocator Companion: Prometheus Operator API types CRDs Summary OpenTelemetry Operator's TargetAllocator watches ServiceMonitor resources via the Prometheus Operator CR watcher and converts...
CVE-2026-40898 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, traefik, kyverno-policy-reporter, kubo, teleport, frp, k3s, jitsucom-bulker, kargo, q, spegel, ipfs-cluster, dkron, coredns, kube-metrics-adapter, kubernetes-dns-node-cache, opentelemetry-operator, k8sgateway...
CVE-2026-44903 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, telegraf, amazon-cloudwatch-agent-operator, node-problem-detector, minio, mcp-grafana, aws-otel-collector, jaeger, certificate-transparency, datadog-agent, prometheus-pushgateway, splunk-otel-collector, metrics-server, istio,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-csi-driver, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr-fips, cert-manager-cmctl, percona-server-mongodb-operator-fips, mariadb-operator, cert-manager-csi-driver-fips, step-issuer-fips,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, mariadb-operator, step-issuer, cert-manager-cmctl, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, mariadb-operator, step-issuer, cert-manager-cmctl, percona-server-mongodb-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-csi-driver, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr-fips, cert-manager-cmctl, percona-server-mongodb-operator-fips, mariadb-operator, cert-manager-csi-driver-fips, step-issuer-fips,...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: trivy, crossplane-provider-azure-storage, spire-server, xeol, k3s, restic, weaviate, zot, flux-image-reflector-controller, terragrunt, opentofu, azcopy, op-geth, scorecard, openfga, hydra, terraform-provider-azurerm, kargo, step, pulumi-kubernetes-operator, octo-sts,...