91 matches found
CLEANSTART-2026-ZW70000 Security fix for GHSA-mh2q-q3fh-2475 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, step-ca-fips 0.30.2-r1, prometheus-operator 0.89.0-r1, litestream 0.5.14-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, node-problem-detector 1.35.2-r1, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, kube-logging-operator 6.4.0-r1, kaniko 1.24.0-r2, prometheus-operator 0.88.1-r0, kubernetes-csi-livenessprobe-fips 2.17.0-r2, modelmesh-runtime-adapter 0.12.0-r2
GHSA-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CVE-2026-63209 vulnerabilities
Vulnerabilities for packages: terraform, kaf, kyverno, reports-server, commercial-expanso-edge, cilium, elastic-agent-fips, omnictl-multiarch, snyk-cli, spire-server, helm, kots, containerd, prometheus-mongodb-exporter, backup-restore-operator, minio, cert-manager, telegraf, kine, nerdctl, aactl,...
CVE-2026-63209 vulnerabilities
Vulnerabilities for packages: kaf, kyverno, spire-server, snyk-cli, helm, kots, containerd, minio, telegraf, kine, nerdctl, aactl, loki, zot, falco-no-driver, k3d, k3s, prometheus-operator, flux...
CLEANSTART-2026-YV85299 Security fix for GHSA-8wmf-6v46-5gfg applied in: prometheus-operator 0.92.1-r6, argo-cd 3.4.10-r3
GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-NE14632 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-YT94569 Security fix for GHSA-8wmf-6v46-5gfg applied in: prometheus-operator 0.91.0-r7, prometheus-operator 0.92.1-r5
GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DS09618 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...
PT-2026-105241
Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...
PT-2026-105222
Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-PM97219 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-DB46993 Prometheus is an open-source monitoring system and time series database
Multiple security vulnerabilities affect the prometheus-operator package. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...
GO-2025-4175 vulnerabilities
Vulnerabilities for packages: rancher, eck-operator-fips, kyverno-policy-reporter-plugins-kyverno-fips, prometheus-postgres-exporter-fips, protoc-gen-go, falco-exporter-fips, crossplane-function-environment-configs-fips, fluxcd-kustomize-mutating-webhook-fips, harbor-fips, argo-cd-fips,...
GO-2024-2611 vulnerabilities
Vulnerabilities for packages: prometheus-postgres-exporter, logstash-exporter, ip-masq-agent, buf, crossplane-provider-gcp, crossplane-provider-aws-lambda, secrets-store-csi-driver-provider-gcp, prometheus-postgres-exporter-fips, trivy, crossplane-provider-aws-s3, atlantis,...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: prometheus-pushgateway, istio, k8sgpt, mc, fluent-bit-plugin-loki, jaeger, keda, cloud-sql-proxy, minio, tempo, aws-otel-collector, karma, loki, grafana, trillian, opentelemetry-collector, splunk-otel-collector, prometheus-operator, prometheus, metrics-server,...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: sops, timestamp-authority, cortex, harbor-registry, k8sgpt, fulcio, guac, flux-kustomize-controller, hugo, argo-workflows, buildkitd, fluent-bit-plugin-loki, nuclei, tkn, spire-server, sqlpad, ksops, velero, secrets-store-csi-driver-provider-azure, tekton-chains,...
GO-2026-5841 vulnerabilities
Vulnerabilities for packages: kaf, kyverno, spire-server, snyk-cli, helm, kots, containerd, minio, telegraf, kine, nerdctl, aactl, loki, zot, falco-no-driver, k3d, k3s, prometheus-operator, flux...
GO-2026-5005 vulnerabilities
Vulnerabilities for packages: kaf, rancher, kyverno, cilium, snyk-cli, spire-server, helm, mattermost, kots, cloud-provider-aws, containerd, kubernetes-dashboard, minio, cert-manager, telegraf, gitlab-kas, kine, nerdctl, aactl, buildah, loki, docker-cli-buildx, kubernetes, zot, falco-no-driver,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: rancher, scorecard, pulumi-language-java, external-secrets-operator, buildkitd, nuclei, step-kms-plugin, helm, crossplane-provider-aws-lambda, tekton-chains, crossplane-provider-azure-storage, trivy, gh, crossplane-provider-aws-s3, skaffold, witness, kine, atlantis,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: cis-operator, terraform, harbor-registry, ip-masq-agent, timescaledb-tune, buildkitd, nuclei, step-kms-plugin, tekton-chains, portieris, trivy, azure-service-operator, nri-f5, nodetaint, nri-rabbitmq, witness, wire-go, libnvidia-container,...