GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: external-dns, osv-scanner, cilium, prometheus-fips, kubescape, frankenphp-8.5, kine, kube-arangodb-fips, zitadel, kuma, traefik-fips, frankenphp-8.4, tigera-operator, gitlab-kas, mattermost-fips, frankenphp-8.2, terraform, trivy-operator-fips, chisel-fips, k3s, loki,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: istio, flux-source-controller, kaf, loki, minio, flux-image-automation-controller, kine, argocd-image-updater, kubernetes-dashboard, osv-scanner, kubescape, cilium, k9s, cloud-provider-aws, spire-server, trivy-operator, vitess, argo-cd, external-dns, kots, telegraf,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: istio, docker-cli-buildx, kaf, loki, minio, kine, kubernetes-dashboard, cilium, cloud-provider-aws, buildah, spire-server, vitess, argo-cd, external-dns, kots, telegraf, cilium-cli, k3s, opentelemetry-collector, fscrypt, kubernetes, prometheus-operator, rancher, flux...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: spegel, neuvector-fips, syft-fips, chainctl, chainctl-fips, helm-fips, helm-set-status, grype-db, kubescape, xeol-fips, envoy-gateway, kube-arangodb-fips, syft, docker-compose, chaos-mesh-fips, kaniko, tigera-operator, consul-k8s-fips, steampipe, buildkitd,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: spegel, neuvector-fips, syft-fips, chainctl, chainctl-fips, helm-fips, helm-set-status, grype-db, kubescape, xeol-fips, envoy-gateway, kube-arangodb-fips, syft, docker-compose, chaos-mesh-fips, kaniko, tigera-operator, consul-k8s-fips, steampipe, buildkitd,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, tw, manifest-tool, helm-operator, xeol, ctop, fuse-overlayfs-snapshotter, docker-compose, kubescape, kubescape-operator, k9s, trivy-operator, envoy-gateway, kube-arangodb, kots, consul-k8s, rancher, skaffold, datadog-agent, linkerd2, wolfictl,...

CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rancher...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, authentik-fips, azure-service-operator, vault-fips, vault, cloudbeat-fips, azure-service-operator-fips, cloudbeat, authentik...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, authentik-fips, azure-service-operator, vault-fips, vault, cloudbeat-fips, azure-service-operator-fips, cloudbeat, authentik...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: istio, docker-cli-buildx, postgres-operator, k8ssandra-client, aws-node-termination-handler, velero, argocd-image-updater, emissary, kwok, cloudnative-pg, kubernetes-dashboard-api, verticadb-operator, kubescape, cilium, kiali, vcluster, infinispan-operator, k9s,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: istio, docker-cli-buildx, postgres-operator, k8ssandra-client, aws-node-termination-handler, velero, argocd-image-updater, emissary, kwok, cloudnative-pg, kubernetes-dashboard-api, verticadb-operator, kubescape, cilium, kiali, vcluster, infinispan-operator, k9s,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: redis-operator, kcp, kpt, neuvector-fips, cilium, istio-fips, percona-xtradb-cluster-operator-fips, eks-distro-fips, jitsucom-bulker, kcp-0.29, kubescape, longhorn-cli-fips, infinispan-operator, envoy-gateway, kube-arangodb-fips, cert-manager-istio-csr-fips,...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: commercial-grafana, rancher, rancher-agent, teleport, dex, teleport-operator-fips, neuvector-fips, zitadel, omni-fips, mattermost, dex-fips, gotrue, mattermost-fips, neuvector, gotrue-fips, omni...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: teleport, rancher-agent, dex, rancher, mattermost...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: teleport, rancher-agent, dex, rancher, mattermost...