GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zitadel, chisel, frankenphp-8.3, flux-image-automation-controller-fips, kyverno, trivy-operator-fips, fscrypt, kaf, harbor, helm, cloudbeat, argo-workflows-fips, argo-cd, drone, nerdctl, kubescape-server, prometheus-mongodb-exporter, elastic-agent-fips, opentofu,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: istio, flux-source-controller, kaf, loki, minio, flux-image-automation-controller, kine, argocd-image-updater, kubernetes-dashboard, osv-scanner, kubescape, cilium, k9s, cloud-provider-aws, spire-server, trivy-operator, vitess, argo-cd, external-dns, kots, telegraf,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: istio, docker-cli-buildx, kaf, loki, minio, kine, kubernetes-dashboard, cilium, cloud-provider-aws, buildah, spire-server, vitess, argo-cd, external-dns, kots, telegraf, cilium-cli, k3s, opentelemetry-collector, fscrypt, kubernetes, prometheus-operator, rancher, flux...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: packer, grype, spegel-fips, neuvector-fips, crossplane, trivy-operator-fips, helm-mapkubeapis, buildkitd, helm, cloudbeat, docker-cli-buildx-fips, chainctl-fips, neuvector-scanner-fips, kubescape-server, kube-mgmt, datadog-agent-fips, syft, manifest-tool, chaos-mesh,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: packer, grype, spegel-fips, neuvector-fips, crossplane, trivy-operator-fips, helm-mapkubeapis, buildkitd, helm, cloudbeat, docker-cli-buildx-fips, chainctl-fips, neuvector-scanner-fips, kubescape-server, kube-mgmt, datadog-agent-fips, syft, manifest-tool, chaos-mesh,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: authentik-fips, vault-fips, cloudbeat-fips, rancher-agent, rancher, cloudbeat, azure-service-operator-fips, authentik, azure-service-operator, vault...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: authentik-fips, vault-fips, cloudbeat-fips, rancher-agent, rancher, cloudbeat, azure-service-operator-fips, authentik, azure-service-operator, vault...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: istio, docker-cli-buildx, postgres-operator, k8ssandra-client, aws-node-termination-handler, velero, argocd-image-updater, emissary, kwok, cloudnative-pg, kubernetes-dashboard-api, verticadb-operator, kubescape, cilium, kiali, vcluster, infinispan-operator, k9s,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: istio, docker-cli-buildx, postgres-operator, k8ssandra-client, aws-node-termination-handler, velero, argocd-image-updater, emissary, kwok, cloudnative-pg, kubernetes-dashboard-api, verticadb-operator, kubescape, cilium, kiali, vcluster, infinispan-operator, k9s,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: eks-distro, neuvector-fips, velero, kcp, trivy-operator-fips, cert-manager-istio-csr, cloudbeat, docker-cli-buildx-fips, percona-xtradb-cluster-operator-fips, argo-workflows-fips, argo-cd, gpu-operator, k8ssandra-client, kpt, kubescape-server, k8ssandra-client-fips,...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: dex, gotrue-fips, gotrue, teleport-operator-fips, zitadel, dex-fips, rancher-agent, omni, mattermost, neuvector, omni-fips, rancher, teleport, mattermost-fips, neuvector-fips, commercial-grafana...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: teleport, rancher-agent, dex, rancher, mattermost...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: teleport, rancher-agent, dex, rancher, mattermost...