GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, ctop, kubevela, headlamp, buildkitd, k8sgpt, rancher-helm, helm-mapkubeapis, steampipe, manifest-tool, chartmuseum, rancher, docker-compose, rancher-agent, neuvector-scanner, envoy-gateway, trivy, newrelic-infrastructure-agent, zot,...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, ctop, kubevela, headlamp, buildkitd, k8sgpt, rancher-helm, helm-mapkubeapis, steampipe, manifest-tool, chartmuseum, rancher, docker-compose, rancher-agent, neuvector-scanner, envoy-gateway, trivy, newrelic-infrastructure-agent, zot,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, ctop, kubevela, headlamp, buildkitd, k8sgpt, rancher-helm, helm-mapkubeapis, steampipe, manifest-tool, chartmuseum, rancher, docker-compose, rancher-agent, neuvector-scanner, envoy-gateway, trivy, newrelic-infrastructure-agent, zot,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: k9s, docker-cli-buildx, ctop, kubevela, headlamp, buildkitd, k8sgpt, rancher-helm, helm-mapkubeapis, steampipe, manifest-tool, chartmuseum, rancher, docker-compose, rancher-agent, neuvector-scanner, envoy-gateway, trivy, newrelic-infrastructure-agent, zot,...

CLEANSTART-2026-OK35650 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the rancher-agent package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: azure-service-operator, rancher-agent, rancher...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: azure-service-operator, rancher-agent, rancher...

GHSA-7J59-V9QR-6FQ9 vulnerabilities

Vulnerabilities for packages: authentik, azure-service-operator-fips, azure-service-operator, authentik-fips, rancher-agent, cloudbeat, cloudbeat-fips, vault, rancher, vault-fips...

CVE-2026-44503 vulnerabilities

Vulnerabilities for packages: authentik, azure-service-operator-fips, azure-service-operator, authentik-fips, rancher-agent, cloudbeat, cloudbeat-fips, vault, rancher, vault-fips...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: verticadb-operator, docker-cli-buildx, cloudnative-pg, kubevela, headlamp, k8sgpt, aws-node-termination-handler, cert-manager-istio-csr, infinispan-operator, argo-rollouts, percona-server-mongodb-operator, rancher, velero, argocd-image-updater, istio, rancher-agent,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: verticadb-operator, docker-cli-buildx, cloudnative-pg, kubevela, headlamp, k8sgpt, aws-node-termination-handler, cert-manager-istio-csr, infinispan-operator, argo-rollouts, percona-server-mongodb-operator, rancher, velero, argocd-image-updater, istio, rancher-agent,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, k8ssandra-client, jitsucom-bulker, cert-manager-istio-csr, rancher-agent, velero, gpu-operator-fips, redis-operator-fips, teleport, eck-operator, cloudbeat-fips, kiali, velero-fips, headlamp, argo-cd-fips, eksctl, hubble-fips, hubble,...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: dex-fips, commercial-grafana, gotrue-fips, teleport-operator-fips, dex, neuvector-fips, omni-fips, neuvector, gotrue, mattermost-fips, mattermost, rancher-agent, teleport, omni, zitadel, rancher...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: rancher-agent, dex, rancher, teleport, mattermost...

GHSA-479M-364C-43VC vulnerabilities

Vulnerabilities for packages: rancher-agent, dex, rancher, teleport, mattermost...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: cert-manager, nri-nginx, thanos-operator, aws-eks-pod-identity-agent, podinfo, src-fingerprint, redka, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, falcoctl, sftpgo-plugin-eventsearch, nri-postgresql, prometheus-pushgateway, net-kourier,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: verticadb-operator, terragrunt, secrets-store-csi-driver-provider-azure, step-kms-plugin, cert-manager, modelmesh-runtime-adapter, polaris, crossplane-provider-aws-lambda, crossplane-provider-aws-ec2, podinfo, tfsec, thanos, sops, rancher, runc, loki, kube-arangodb,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: cert-manager, nri-nginx, thanos-operator, aws-eks-pod-identity-agent, podinfo, src-fingerprint, redka, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, falcoctl, sftpgo-plugin-eventsearch, nri-postgresql, prometheus-pushgateway, net-kourier,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: cert-manager, nri-nginx, thanos-operator, aws-eks-pod-identity-agent, podinfo, src-fingerprint, redka, timoni, amazon-k8s-cni, mc, timescaledb-parallel-copy, falcoctl, sftpgo-plugin-eventsearch, nri-postgresql, prometheus-pushgateway, net-kourier,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: verticadb-operator, terragrunt, secrets-store-csi-driver-provider-azure, step-kms-plugin, cert-manager, modelmesh-runtime-adapter, polaris, crossplane-provider-aws-lambda, crossplane-provider-aws-ec2, podinfo, tfsec, thanos, sops, rancher, runc, loki, kube-arangodb,...