GO-2023-2113 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, kube-oidc-proxy, prometheus-adapter, caddy, kubevela, metrics-server-fips, kubernetes, rancher-webhook, buildkitd, k3s, up, rancher-webhook-fips...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, prometheus-adapter, aws-ebs-csi-driver, aws-efs-csi-driver-fips, aws-efs-csi-driver, nodetaint, ip-masq-agent, spark-operator...

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: rootlesskit, ferretdb, nuclei, supercronic, snyk-cli, oras, kubernetes-replicator, rke2-cloud-provider, vault-env, whereabouts, actions-runner-controller, gitness, vault-k8s, kubernetes-csi-external-resizer, kor, crossplane-provider-azure-managedidentity, crane, kuma...

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42506 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-42502 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-25681 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19. A patched version of the package is available...

AZL-77073 CVE-2025-58190 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-77070 CVE-2025-47911 affecting package prometheus-adapter 0.12.0-4

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: sops, rootlesskit, kubeflow, mockery, opentofu, supercronic, snyk-cli, kubernetes-replicator, chisel, rke2-cloud-provider, kube-rbac-proxy, gitness, nfpm, kubernetes-csi-external-resizer, runc, tempo, mongo-tools, sftpgo-plugin-pubsub, rancher-system-agent,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: sops, rootlesskit, kubeflow, mockery, opentofu, supercronic, snyk-cli, kubernetes-replicator, chisel, rke2-cloud-provider, kube-rbac-proxy, gitness, nfpm, kubernetes-csi-external-resizer, runc, tempo, mongo-tools, sftpgo-plugin-pubsub, rancher-system-agent,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: distribution-fips, gpu-operator, kustomize-fips, xeol-fips, portieris, git-credential-oauth, gops-fips, cert-exporter, checksec, kubernetes-csi-node-driver-registrar-fips, velero-fips, grpcurl-fips, runc, apisix-ingress-controller, configmap-reload-fips, wave-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: distribution-fips, gpu-operator, kustomize-fips, xeol-fips, portieris, git-credential-oauth, gops-fips, cert-exporter, checksec, kubernetes-csi-node-driver-registrar-fips, velero-fips, grpcurl-fips, runc, apisix-ingress-controller, configmap-reload-fips, wave-fips,...