PT-2026-38359

Name of the Vulnerable Software and Affected Versions Rancher versions prior to v2.14.1 Rancher versions prior to v2.13.5 Rancher versions prior to v2.12.9 Rancher versions prior to v2.11.13 Rancher version v2.10.11 Description Fleet's Helm deployer fails to fully apply ServiceAccount impersonati...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, argocd-image-updater, mapotf, guac, flux-source-controller-fips, zarf-fips, grafana-alloy-fips, trivy, grype, gitaly, packer-fips, kargo, pulumi-language-yaml, trivy-operator, packer, gitlab-rails-ce, pulumi-kubernetes-operator, jfrog-cli,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cilium, datadog-agent, redis-operator, argo-rollouts, aws-node-termination-handler, kpt, cloudnative-pg, headlamp, k8sgpt-operator, kubernetes, kwok, percona-server-mongodb-operator, falcoctl, istio, k8ssandra-client, trivy,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, cilium, datadog-agent, redis-operator, argo-rollouts, aws-node-termination-handler, kpt, cloudnative-pg, headlamp, k8sgpt-operator, kubernetes, kwok, percona-server-mongodb-operator, falcoctl, istio, k8ssandra-client, trivy,...

CVE-2026-35205 vulnerabilities

Vulnerabilities for packages: zarf, kots, cert-manager-cmctl, kuma, cilium-cli, rancher-fleet, helm-push, flux, flux-source-controller...

CVE-2026-35204 vulnerabilities

Vulnerabilities for packages: zarf, kots, cert-manager-cmctl, kuma, cilium-cli, rancher-fleet, helm-push, flux, flux-source-controller...

GHSA-Q5JF-9VFQ-H4H7 vulnerabilities

Vulnerabilities for packages: zarf, kots, cert-manager-cmctl, kuma, cilium-cli, rancher-fleet, helm-push, flux, flux-source-controller...

GHSA-VMX8-MQV2-9GMG vulnerabilities

Vulnerabilities for packages: zarf, kots, cert-manager-cmctl, kuma, cilium-cli, rancher-fleet, helm-push, flux, flux-source-controller...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cerbos, cert-manager-cmctl, headlamp, helm-push, istio, k8ssandra-client, trivy, zarf, cluster-api-helm-controller, eksctl, chart-testing, pluto, zot, chartmuseum, flux, linkerd2, helm-docs, envoy-gateway, harbor, helm-mapkubeapis, kubescape, cilium-cli, teleport,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cerbos, cert-manager-cmctl, headlamp, helm-push, istio, k8ssandra-client, trivy, zarf, cluster-api-helm-controller, eksctl, chart-testing, pluto, zot, chartmuseum, flux, linkerd2, helm-docs, envoy-gateway, harbor, helm-mapkubeapis, kubescape, cilium-cli, teleport,...

GHSA-VMX8-MQV2-9GMG vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, flux-fips, gitlab-operator, flux-source-controller, helm-diff, flux, rancher-fleet, helm-diff-fips, gitlab-operator-fips, kots, zarf, helm-push, flux-source-controller-fips, zarf-fips, rancher-fleet-fips, kuma, cert-manager-cmctl, cilium-cli...

CVE-2026-35204 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, flux-fips, gitlab-operator, flux-source-controller, helm-diff, flux, rancher-fleet, helm-diff-fips, gitlab-operator-fips, kots, zarf, helm-push, flux-source-controller-fips, zarf-fips, rancher-fleet-fips, kuma, cert-manager-cmctl, cilium-cli...

GHSA-Q5JF-9VFQ-H4H7 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, flux-fips, gitlab-operator, flux-source-controller, helm-diff, flux, rancher-fleet, helm-diff-fips, gitlab-operator-fips, kots, zarf, helm-push, flux-source-controller-fips, zarf-fips, rancher-fleet-fips, kuma, cert-manager-cmctl, cilium-cli...

CVE-2026-35205 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, flux-fips, gitlab-operator, flux-source-controller, helm-diff, flux, rancher-fleet, helm-diff-fips, gitlab-operator-fips, kots, zarf, helm-push, flux-source-controller-fips, zarf-fips, rancher-fleet-fips, kuma, cert-manager-cmctl, cilium-cli...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, helm-operator, helm-diff, chartmuseum, kubescape-server-fips, kots, headlamp-fips, tw, k8ssandra-client-fips, k8ssandra-client, cloudbeat, consul-k8s-fips, flux-source-controller-fips, helm-exporter, helm-exporter-fips, helm-operator-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, task, kubernetes-csi-driver-nfs-fips, fscrypt, libnvidia-container, helm-set-status, newrelic-infrastructure-agent, nerdctl, gitaly, pulumi-language-yaml, kargo, tekton-chains-fips, dask-gateway, docker-compose-fips, buildah, kube-fluentd-operato...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, task, kubernetes-csi-driver-nfs-fips, fscrypt, libnvidia-container, helm-set-status, newrelic-infrastructure-agent, nerdctl, gitaly, pulumi-language-yaml, kargo, tekton-chains-fips, dask-gateway, docker-compose-fips, buildah, kube-fluentd-operato...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, argocd-image-updater, guac, flux-source-controller-fips, zarf-fips, grafana-alloy-fips, trivy, grype, gitaly, packer-fips, kargo, pulumi-language-yaml, trivy-operator, packer, gitlab-rails-ce, pulumi-kubernetes-operator, jfrog-cli,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, argocd-image-updater, guac, flux-source-controller-fips, zarf-fips, grafana-alloy-fips, trivy, grype, gitaly, packer-fips, kargo, pulumi-language-yaml, trivy-operator, packer, gitlab-rails-ce, pulumi-kubernetes-operator, jfrog-cli,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, argocd-image-updater, guac, flux-source-controller-fips, zarf-fips, grafana-alloy-fips, trivy, grype, gitaly, packer-fips, kargo, pulumi-language-yaml, trivy-operator, packer, gitlab-rails-ce, pulumi-kubernetes-operator, jfrog-cli,...