GO-2026-6094 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, openfga, fluent-operator, metallb, spqr, kubernetes-csi-external-health-monitor, node-feature-discovery, grafana, cloud-provider-aws, keda, k3s, kapp-controller, kyverno-notation-aws, tetragon, opentelemetry-operator,...

GO-2026-5973 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, rke2-runtime, rke2-cloud-provider-fips, rke2-cloud-provider...

GO-2026-5973 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, crossplane-provider-aws-cloudformation, rekor, grpcurl, bento, step-issuer, descheduler, helm-operator, steampipe, datadog-operator, mcp-grafana, skopeo, zarf, trivy-operator, vault-secrets-webhook, rke2-cloud-provider, terraform-provider-pagerdut...

GO-2025-3849 vulnerabilities

Vulnerabilities for packages: mkcert, yq, fscrypt, aws-sigv4-proxy, petname, rekor, grpcurl, bento, step-issuer, steampipe, helm-operator, conjur-cli, kubernetes-dashboard-api, skopeo, trivy-operator, rke2-cloud-provider, nri-cassandra, hugo-extended, tflint, ytt, xeol, wait-for-port, opentofu,...

CVE-2026-54250 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, rke2-runtime, rke2-cloud-provider-fips, rke2-cloud-provider...

GHSA-JXR7-MQHW-9P98 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, rke2-runtime, rke2-cloud-provider-fips, rke2-cloud-provider...

GHSA-JXR7-MQHW-9P98 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider...

CVE-2026-54250 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: promxy, flux-helm-controller, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-firehose, cluster-api-gcp-controller-fips, kube-logging-logging-operator, prometheus-operator-fips, kubernetes-fips, terraform-provider-databricks,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, longhorn-cli-fips, promxy, ratify-fips, flux-helm-controller, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-firehose, cluster-api-gcp-controller-fips, kube-logging-logging-operator, prometheus-operator-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, promxy, flux-helm-controller, grafana-agent-operator, kube-logging-logging-operator, seaweedfs, kube-logging-operator-custom-runner, falco-exporter, boring-registry, kubeflow, cluster-api-helm-controller-fips,...