GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: hubble-ui, kube-state-metrics, cluster-api, k3s, cloud-provider-azure, openbao, metallb, azure-service-operator, kwok, istio, gatekeeper, kube-metrics-adapter, grafana, kyverno, rancher-system-agent, node-feature-discovery, cloud-provider-gcp-cloud-controller-manager...

GHSA-CXH2-4639-VMC5 OpenTelemetry Operator for Kubernetes's ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth

Affected Repository: github.com/open-telemetry/opentelemetry-operator Component: cmd/otel-allocator TargetAllocator Companion: Prometheus Operator API types CRDs Summary OpenTelemetry Operator's TargetAllocator watches ServiceMonitor resources via the Prometheus Operator CR watcher and converts...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: k3s, kyverno-policy-reporter-ui, frp, kubernetes-dns-node-cache, teleport, coredns, dkron, jitsucom-bulker, kube-metrics-adapter, k8sgateway, kyverno-policy-reporter, ipfs-cluster, kubo, q, kargo, spegel, prometheus-blackbox-exporter, opentelemetry-operator, traefik...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: k8sgpt, prometheus-pushgateway, loki, datadog-agent, trillian, splunk-otel-collector, telegraf, mcp-grafana, amazon-cloudwatch-agent-operator, minio-object-browser, opentelemetry-collector, certificate-transparency, istio, keda, minio-operator, tempo, cloud-sql-proxy...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, step-issuer-fips, percona-xtradb-cluster-operator, gitlab-operator, cert-manager-google-cas-issuer-fips, gitlab-operator-fips, cert-manager-istio-csr, cert-manager-istio-csr-fips, opentelemetry-operator, cert-manager-openshift-routes,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, aws-privateca-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-csi-driver, opentelemetry-operator, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, aws-privateca-issuer, mariadb-operator, cert-manager-istio-csr, cert-manager-csi-driver, opentelemetry-operator, percona-server-mongodb-operator, cert-manager-cmctl, step-issuer...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, step-issuer-fips, percona-xtradb-cluster-operator, gitlab-operator, cert-manager-google-cas-issuer-fips, gitlab-operator-fips, cert-manager-istio-csr, cert-manager-istio-csr-fips, opentelemetry-operator, cert-manager-openshift-routes,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: velero, grafana-mimir, sops, k3s, falcoctl, kyverno-policy-reporter-ui, loki, openbao, skaffold, kaniko, external-dns, terragrunt, secrets-store-csi-driver-provider-azure, kubernetes-dashboard-auth, docker, argo-workflows, pulumi, kube-metrics-adapter,...