GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager, glab, multus-cni, podinfo, rootlesskit, gogatekeeper, kuma, dgraph, node-feature-discovery, prometheus, jaeger-operator, kubeflow-pipelines, aws-otel-collector, neuvector-dbgen, zarf, fluent-bit-plugin-loki, vault-env,...

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19. A patched version of the package is available...

AZL-77073 CVE-2025-58190 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77070 CVE-2025-47911 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: rootlesskit, gogatekeeper, mesosphere-vsphere-csi, go-discover, k8ssandra-client, steampipe, kargo, rancher-telemetry, kubeflow-pipelines, kube-fluentd-operator, mountpoint-s3-csi-driver, spqr, portieris, karma, gitsign, opentofu, pluto, gatekeeper,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: rootlesskit, gogatekeeper, mesosphere-vsphere-csi, go-discover, k8ssandra-client, steampipe, kargo, rancher-telemetry, kubeflow-pipelines, kube-fluentd-operator, mountpoint-s3-csi-driver, spqr, portieris, karma, gitsign, opentofu, pluto, gatekeeper,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, custom-pod-autoscaler-fips, kubevela-fips, s5cmd, gops-fips, stampdalf, timestamp-authority, kube-conformance, src-fingerprint, external-dns-fips, modelmesh-runtime-adapter, amazon-k8s-cni-fips, terraform-provider-time, cargobump,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, custom-pod-autoscaler-fips, kubevela-fips, s5cmd, gops-fips, stampdalf, timestamp-authority, kube-conformance, src-fingerprint, external-dns-fips, modelmesh-runtime-adapter, amazon-k8s-cni-fips, terraform-provider-time, cargobump,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, custom-pod-autoscaler-fips, kubevela-fips, s5cmd, gops-fips, stampdalf, timestamp-authority, kube-conformance, src-fingerprint, external-dns-fips, modelmesh-runtime-adapter, amazon-k8s-cni-fips, terraform-provider-time, cargobump,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, custom-pod-autoscaler-fips, kubevela-fips, s5cmd, gops-fips, stampdalf, timestamp-authority, kube-conformance, src-fingerprint, external-dns-fips, modelmesh-runtime-adapter, amazon-k8s-cni-fips, terraform-provider-time, cargobump,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, custom-pod-autoscaler-fips, kubevela-fips, s5cmd, gops-fips, stampdalf, timestamp-authority, kube-conformance, src-fingerprint, external-dns-fips, modelmesh-runtime-adapter, amazon-k8s-cni-fips, terraform-provider-time, cargobump,...