GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, coder-fips, kubernetes-dashboard, calico-fips, traefik, zarf-fips, argo-cd, argo-workflows-fips, reports-server, knative-serving-fips, aactl, mattermost-fips, rancher-agent, k9s, argo-workflows, spire-server, traefik-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, jaeger, kubevirt-cdi-operator-fips, nats, tempo-fips, quic-go-fips, net-kourier, gitlab-kas-fips, vexctl, tofu-controller-fips, dapr-fips, plugin-barman-cloud-fips, pluto, thanos-operator-fips, databricks-cli-fips,...

CLEANSTART-2026-EW27017 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.10.0-r0, 1.10.0-r1

Multiple security vulnerabilities affect the prometheus-elasticsearch-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, stampdalf, vault-k8s, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, stampdalf, vault-k8s, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, stampdalf, vault-k8s, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, stampdalf, vault-k8s, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, stampdalf, vault-k8s, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: jaeger, nats, tfsec, omni, net-kourier, fixuid, vexctl, dapr-fips, packer, thanos-operator-fips, kubernetes-csi-external-attacher-fips, argo-cd, fq, gitleaks, stampdalf, vault-k8s, beats, cloud-sql-proxy, k6-fips, ipfs-cluster, sbom-convert, knative-serving-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kpt, guac, bank-vaults, aws-efs-csi-driver, configmap-reload, crossplane-provider-aws-memorydb, prometheus-blackbox-exporter, crossplane-provider-azure-storage, kube-fluentd-operator, crossplane-provider-aws-iam, tflint, prometheus-alertmanager,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kpt, prometheus-blackbox-exporter, bank-vaults, aws-efs-csi-driver, kube-fluentd-operator, prometheus-alertmanager, pulumi-language-yaml, kaf, hey, go, tekton-chains, flux-notification-controller, aws-load-balancer-controller, sigstore-scaffolding,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, kubernetes-dashboard, nats, bank-vaults-fips, nfs-subdir-external-provisioner-fips, kube-fluentd-operator, aws-load-balancer-controller-fips, prometheus-statsd-exporter-fips, vault-k8s, prometheus-node-exporter, up, flux-helm-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kpt, prometheus-blackbox-exporter, aws-efs-csi-driver, ko, pulumi-language-yaml, nginx-mainline, kaf, hey, flux-notification-controller, sigstore-scaffolding, terraform-provider-azurerm, node-problem-detector, nats, aactl, flux-source-controller,...