GHSA-22JX-P735-QCPM vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi-fips, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-sesv2-fips, alloydb-auth-proxy-fips, crossplane-provider-aws-ec2-fips, teleport-operator-fips, rancher-webhook-fips, databricks-cli-fips, kueue-fips, open-cluster-management-fips,...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: tempo-fips, ingress-nginx-controller-fips, flux, commercial-spilo-fips, nemo-gym, telegraf, spire-server, kyverno, nvidia-nsight-compute-13.4, falco-no-driver, qemu-guesthelper, consul-k8s-fips, loki, nemo, commercial-chainloop-cli, commercial-nginx-ingress, zitadel,...

GO-2026-6605 vulnerabilities

Vulnerabilities for packages: timestamp-authority, gptscript, aws-nuke, crossplane-provider-aws-dynamodb, delve, step-issuer, mattermost, gitness, rancher-agent, grafana, juicefs, k8ssandra-operator, mailpit, headlamp, grafana-image-renderer, falco-no-driver, external-dns, cert-manager-cmctl, dfc...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-opensearch, cluster-api-azure-controller, databricks-cli-fips, fluxcd-kustomize-mutating-webhook, glow, external-dns-fips, wgcf, crossplane-provider-aws-devicefarm-fips, crossplane-provider-aws-ds,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-opensearch, cluster-api-azure-controller, databricks-cli-fips, fluxcd-kustomize-mutating-webhook, external-dns-fips, dapr, crossplane-provider-aws-devicefarm-fips, sriov-network-device-plugin,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-opensearch, cluster-api-azure-controller, databricks-cli-fips, fluxcd-kustomize-mutating-webhook, glow, external-dns-fips, dapr, wgcf, crossplane-provider-aws-devicefarm-fips, sriov-network-device-plugin,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-opensearch, cluster-api-azure-controller, databricks-cli-fips, fluxcd-kustomize-mutating-webhook, glow, external-dns-fips, dapr, wgcf, crossplane-provider-aws-devicefarm-fips, sriov-network-device-plugin,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, fuse-overlayfs-snapshotter, argo-rollouts, kor, whereabouts,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, fuse-overlayfs-snapshotter, argo-rollouts, kor, whereabouts,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, fuse-overlayfs-snapshotter, argo-rollouts, kor, whereabouts,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: migrate, flux-kustomize-controller, gitness, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, fuse-overlayfs-snapshotter, argo-rollouts, kor, whereabouts, external-secrets-operator, cert-exporter, fulcio,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, fuse-overlayfs-snapshotter, argo-rollouts, kor, whereabouts,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, fuse-overlayfs-snapshotter, argo-rollouts, kor, whereabouts,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, grafana, task, k8ssandra-operator, cloudnative-pg, fuse-overlayfs-snapshotter, argo-rollouts, kor, whereabouts,...

atomic-operator

license atomic-operator Este paquete de Python se utiliza para ejecutar pruebas de Atomic Red Team Atómicas en múltiples entornos de sistemas operativos. ¿Qué hay de nuevo? ¿Por qué? atomic-operator permite a los profesionales de seguridad probar sus capacidades de detección y defensa contra las...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, timescaledb-parallel-copy, wavefront-collector-for-kubernetes, ldap2pg-fips, kube-bench-fips, typescript, grafana-fips, timescaledb-parallel-copy-fips, ldap2pg, commercial-gitlab-workhorse-ee-fips, vault-fips, commercial-gitlab-workhorse-ee,...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, timescaledb-parallel-copy, wavefront-collector-for-kubernetes, ldap2pg-fips, kube-bench-fips, typescript, grafana-fips, timescaledb-parallel-copy-fips, ldap2pg, commercial-gitlab-workhorse-ee-fips, vault-fips, commercial-gitlab-workhorse-ee,...

CLEANSTART-2026-QV19791 Security fix for GHSA-gcjh-h69q-9w9g applied in: external-secrets-operator-fips 2.12.0-r1, flux-helm-controller 1.6.4-r1

GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IN42122 Security fix for GHSA-hrxh-6v49-42gf applied in: external-secrets-operator-fips 2.7.0-r1, node-problem-detector 0.8.25-r1

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UL53723 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the external-secrets-operator package. go-git is an extensible git implementation library written in pure Go...