GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, kaniko, hubble, src-fingerprint, rancher-agent, bento, crossplane-provider-azure-authorization, sops, gke-gcloud-auth-plugin, spicedb-operator, temporal, newrelic-nri-kube-events, pinact, rancher-helm, vault-k8s, traefik,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, hubble, scorecard, sops, bento, src-fingerprint, nerdctl, timescaledb-parallel-copy, gke-gcloud-auth-plugin, kustomize, vault-k8s, rancher-helm, whereabouts, kor, traefik, hydra, mongodb-kubernetes-operator, kubeflow, kubo, runc, src,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: rancher-agent, bento, kyverno-notation-aws, rancher-webhook, seaweedfs, opentofu, external-secrets-operator, cert-manager-istio-csr, zot, sftpgo-plugin-auth, rancher, teleport, cert-manager, cert-manager-cmctl, yunikorn-k8shim, percona-server-mongodb-operator,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster, hubble, supercronic, metacontroller, github-mcp-server, temporal, dkron, kubewatch, grafana-rollout-operator, envoy-ratelimit, aws-privateca-issuer, external-secrets-operator, flux-image-reflector-controller, apko, oras, gh, dbmate,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, terraform-provider-pagerduty, hubble, scorecard, rancher-agent, bento, crossplane-provider-azure-authorization, nerdctl, task, temporal, spicedb-operator, otel-cli, rancher-helm, argo-workflows, cadvisor, gh, runc,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, src-fingerprint, otel-cli, hydra, terraform-provider-grafana, gh, runc, docker-credential-acr-env, blob-csi, opentelemetry-operator, volume-modifier-for-k8s, cilium-cli, nodetaint, cert-manager-istio-csr,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kuberay-operator, vault-k8s, confluent-common-docker, octo-sts, lvm-driver, kube-vip, rancher-machine, mongodb-kubernetes-operator, dagdotdev, newrelic-fluent-bit-output, container-object-storage-interface, nats, newrelic-nri-statsd, kubeflow-katib, checksec,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: grafana-operator, rancher-machine, secrets-store-csi-driver-provider-aws-fips, apm-server-fips, git-lfs, blob-csi-fips, local-path-provisioner, mongodb-k8s-operator-version-upgrade-post-start-hook, linkerd2-proxy-init, nvidia-nsight-compute-12.8,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: grafana-operator, rancher-machine, secrets-store-csi-driver-provider-aws-fips, apm-server-fips, git-lfs, blob-csi-fips, local-path-provisioner, mongodb-k8s-operator-version-upgrade-post-start-hook, linkerd2-proxy-init, nvidia-nsight-compute-12.8,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: kaniko, scorecard, sops, crossplane-provider-azure-authorization, traefik, argo-workflows, hydra, opentelemetry-operator, chezmoi, crossplane-provider-azure-storage, fulcio, dgraph, cosign, sqlexporter, terraform-provider-azurerm, oauth2-proxy, minio, openbao, kots,...