GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: metacontroller, bank-vaults, grafana-pyroscope, portieris, kwok, secrets-store-csi-driver-provider-gcp, vitess, kubo, kubeflow-pipelines, cloud-provider-aws, prometheus, kuberlr, guac, cloudflared, docker-machine-driver-harvester, continuity,...

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19. A patched version of the package is available...

AZL-77073 CVE-2025-58190 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77070 CVE-2025-47911 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, sftpgo-plugin-eventstore, sftpgo-plugin-pubsub, mongodb-kubernetes-operator, telegraf, grafana-pyroscope, portieris, kserve-rest-proxy, kube-fluentd-operator, nri-haproxy, gitness, rabbitmq-messaging-topology-operator, terraform, promxy,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, sftpgo-plugin-eventstore, sftpgo-plugin-pubsub, mongodb-kubernetes-operator, telegraf, grafana-pyroscope, portieris, kserve-rest-proxy, kube-fluentd-operator, nri-haproxy, gitness, rabbitmq-messaging-topology-operator, terraform, promxy,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, elvish, azuredisk-csi-fips, policy-controller, sealed-secrets-fips, tekton-pipelines-fips, docker-credential-gcr, gops, calico, kube-vip-cloud-provider, kubernetes-dashboard-auth-fips, ferretdb, terraform-provider-sendgrid-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, elvish, azuredisk-csi-fips, policy-controller, sealed-secrets-fips, tekton-pipelines-fips, docker-credential-gcr, gops, calico, kube-vip-cloud-provider, kubernetes-dashboard-auth-fips, ferretdb, terraform-provider-sendgrid-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, elvish, azuredisk-csi-fips, policy-controller, sealed-secrets-fips, tekton-pipelines-fips, docker-credential-gcr, gops, calico, kube-vip-cloud-provider, kubernetes-dashboard-auth-fips, ferretdb, terraform-provider-sendgrid-fips,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, elvish, azuredisk-csi-fips, policy-controller, sealed-secrets-fips, tekton-pipelines-fips, docker-credential-gcr, gops, calico, kube-vip-cloud-provider, kubernetes-dashboard-auth-fips, ferretdb, terraform-provider-sendgrid-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler-fips, elvish, azuredisk-csi-fips, policy-controller, sealed-secrets-fips, tekton-pipelines-fips, docker-credential-gcr, gops, calico, kube-vip-cloud-provider, kubernetes-dashboard-auth-fips, ferretdb, terraform-provider-sendgrid-fips,...