GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kyverno, litestream, crossplane-provider-aws-sns, k3s, pgpool2exporter, libnvidia-container, cloud-provider-aws, dbmate, spire-server, zarf, grafana-mimir, nri-haproxy, kapp-controller, gitlab-pages, aws-efs-csi-driver, containerd, trufflehog,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: litestream, crossplane-provider-aws-sns, k3s, pgpool2exporter, vault-secrets-webhook, cloud-provider-aws, kubelet-csr-approver, eksctl, swagger, dbmate, spire-server, hydra, pguser, nri-haproxy, sriov-network-device-plugin, kapp-controller, thanos-operator,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: rancher-webhook, kyverno, bento, rancher, frp, yunikorn-k8shim, harbor, external-secrets-operator, juicefs, minio, percona-server-mongodb-operator, trufflehog, cert-manager-istio-csr, dex, openbao, kyverno-notation-aws, sftpgo-plugin-auth, zot, grafana, opentofu,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: omnibump, apko, smokescreen, envoy-ratelimit, flux-image-reflector-controller, mariadb-operator, go, malcontent, dbmate, spire-server, external-secrets-operator, supercronic, tailscale, polaris, victoriametrics, actions-runner-controller, ingress-nginx-controller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth, go-discover, apko, k3s, kyverno, litestream, libnvidia-container, cloud-provider-aws, vault-secrets-webhook, wal-g, swagger, eksctl, dbmate, spire-server, sriov-network-device-plugin, grafana-mimir, filebrowser, certificate-transparency,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: go-discover, cloud-provider-aws, dbmate, pguser, nri-haproxy, gitlab-pages, dive, containerd, step-issuer, lvm-driver, nfs-subdir-external-provisioner, zot, aactl, local-path-provisioner, kube-logging-operator-custom-runner, gptscript, terraform-provider-pagerduty,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, cloud-provider-aws, terraform-provider-time, pvc-autoresizer, kube-vip, checksec, kserve-rest-proxy, kube-vip-cloud-provider, rancher-machine, ctop, lvm-driver, newrelic-fluent-bit-output, kubeflow-katib, sftpgo-plugin-pubsub, octo-sts,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: lvm-driver, prometheus-adapter, terraform-provider-time, pvc-autoresizer, prometheus-beat-exporter-fips, karpenter, secrets-store-csi-driver-provider-aws, configmap-reload-fips, gitsign, rancher-machine, gcp-compute-persistent-disk-csi-driver-fips, nemo, nats,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: lvm-driver, prometheus-adapter, terraform-provider-time, pvc-autoresizer, prometheus-beat-exporter-fips, karpenter, secrets-store-csi-driver-provider-aws, configmap-reload-fips, gitsign, rancher-machine, gcp-compute-persistent-disk-csi-driver-fips, nemo, nats,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth, k3s, wal-g, eksctl, spire-server, hydra, zarf, grafana-mimir, filebrowser, falcoctl, kube-metrics-adapter, minio, trufflehog, policy-controller, ko, zot, opentofu, octo-sts, aactl, crossplane-provider-azure, goreleaser,...