GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vitess, elastic-agent-fips, drone, frankenphp-8.3, cert-manager, knative-eventing-fips, prometheus, kaf, terraform, mattermost-fips, prometheus-fips, flux-fips, argocd-image-updater-fips, minio, zot, kube-state-metrics, istio, coder, frankenphp-8.2,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kaf, containerd, gitlab-kas, argocd-image-updater, prometheus, mattermost, flux-image-automation-controller, k9s, osv-scanner, trivy-operator, flux-source-controller, telegraf, vitess, k3s, istio, minio, knative-serving, rancher, flux, gitea, opentelemetry-collector,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kaf, containerd, gitlab-kas, prometheus, mattermost, vitess, telegraf, k3s, istio, minio, knative-serving, rancher, docker-cli-buildx, flux, opentelemetry-collector, kyverno, kots, fscrypt, external-dns, cloud-provider-aws, nerdctl, teleport, helm, cert-manager,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent, xeol, kaniko, eksctl, chartmuseum-fips, kgateway, newrelic-infrastructure-agent-fips, packer-fips, spegel-fips, chaos-mesh, chartmuseum, docker-fips, helm-push, chainctl, syft, envoy-gateway-fips, kgateway-fips, docker-cli-buildx, zot, linkerd2,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent, xeol, kaniko, eksctl, chartmuseum-fips, kgateway, newrelic-infrastructure-agent-fips, packer-fips, spegel-fips, chaos-mesh, chartmuseum, docker-fips, helm-push, chainctl, syft, envoy-gateway-fips, kgateway-fips, docker-cli-buildx, zot, linkerd2,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: tigera-operator, consul-k8s, tw, k9s, kaniko, newrelic-infrastructure-agent, k8sgpt, trivy-operator, helm-operator, datadog-agent, linkerd2, dagger, helm-set-status, manifest-tool, rancher, docker-cli-buildx, helm-push, envoy-gateway, kots, eksctl, docker-compose,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: tigera-operator, consul-k8s, tw, k9s, kaniko, newrelic-infrastructure-agent, k8sgpt, trivy-operator, helm-operator, datadog-agent, linkerd2, dagger, helm-set-status, manifest-tool, rancher, docker-cli-buildx, helm-push, envoy-gateway, kots, eksctl, docker-compose,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: tigera-operator, consul-k8s, tw, k9s, kaniko, newrelic-infrastructure-agent, k8sgpt, trivy-operator, helm-operator, datadog-agent, linkerd2, dagger, helm-set-status, manifest-tool, rancher, docker-cli-buildx, helm-push, envoy-gateway, kots, eksctl, docker-compose,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: tigera-operator, consul-k8s, tw, k9s, kaniko, newrelic-infrastructure-agent, k8sgpt, trivy-operator, helm-operator, datadog-agent, linkerd2, dagger, helm-set-status, manifest-tool, rancher, docker-cli-buildx, helm-push, envoy-gateway, kots, eksctl, docker-compose,...

CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, vault-fips, azure-service-operator, vault, authentik-fips, authentik, rancher, azure-service-operator-fips, cloudbeat, rancher-agent...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, vault-fips, azure-service-operator, vault, authentik-fips, authentik, rancher, azure-service-operator-fips, cloudbeat, rancher-agent...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: gitlab-runner, falcoctl, k8ssandra-client, tigera-operator, gitlab-kas, argocd-image-updater, consul-k8s, kpt, hubble, cert-manager-istio-csr, k9s, percona-server-mongodb-operator, infinispan-operator, k8sgpt, trivy-operator, kwok, datadog-agent, k3s, istio, linkerd2...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-runner, falcoctl, k8ssandra-client, tigera-operator, gitlab-kas, argocd-image-updater, consul-k8s, kpt, hubble, cert-manager-istio-csr, k9s, percona-server-mongodb-operator, infinispan-operator, k8sgpt, trivy-operator, kwok, datadog-agent, k3s, istio, linkerd2...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: eksctl, argo-rollouts, k8sgpt-operator, kpt, emissary, eck-operator-fips, cilium-fips, aws-node-termination-handler-fips, cluster-api-fips, teleport-operator-fips, dynamic-localpv-provisioner, rke2-runtime, argocd-image-updater-fips, envoy-gateway-fips,...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: mattermost, teleport-operator-fips, gotrue, neuvector, gotrue-fips, commercial-grafana, teleport, dex-fips, dex, rancher, zitadel, omni, rancher-agent, mattermost-fips, omni-fips, neuvector-fips...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: rancher, teleport, rancher-agent, mattermost, dex...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: rancher, teleport, rancher-agent, mattermost, dex...