GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, goreleaser, kube-fluentd-operator, docker-credential-acr-env, karpenter, cloud-provider-azure, crossplane-provider-azure-sql, opa-envoy, argo-rollouts, docker-cli-buildx, nri-kubernetes, net-kourier, crossplane-provider-aws-route53,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, rancher-machine, cert-manager-istio-csr, rancher-system-upgrade-controller, thanos-operator, extism, git-lfs, crossplane-provider-azure-sql, nerdctl, k8sgateway, cluster-api-gcp-controller, kine, docker-credential-gcr, azcopy, ghaudit,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, rancher-webhook, seaweedfs, frp, juicefs, zot, kyverno, gitea, spqr, telegraf, cert-manager-cmctl, k6, rancher, yunikorn-k8shim, percona-server-mongodb-operator, opentofu, rancher-agent, grafana, openbao, harbor, minio, dex,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, goreleaser, dbmate, malcontent, supercronic, karpenter, flux-image-reflector-controller, dataplaneapi, grafana-rollout-operator, actions-runner-controller, ingress-nginx-controller, oras, grafana-operator, victoriametrics, kubewatch,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, kube-fluentd-operator, rancher-machine, splunk-otel-collector, kubernetes-csi-external-health-monitor, oauth2-proxy, cloud-provider-azure, crossplane-provider-azure-sql, otel-cli, nerdctl, opa-envoy, terraform-provider-azuread, weaviate, falcoctl,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, nerdctl, victoriametrics-cluster, docker-credential-gcr, gitlab-pages, nats-server, azcopy, ghaudit, cert-exporter, q, terraform-provider-pagerduty,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: rancher-machine, git-lfs, checksec, gostatsd, hivemind, grafana-operator, pvc-autoresizer, shfmt, mongodb-kubernetes-operator, vexctl, vault-k8s, dagdotdev, k8sgpt-operator, bank-vaults, secrets-store-csi-driver-provider-aws, blobfuse2, newrelic-nri-statsd,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: rancher-machine, karpenter, git-lfs, cloud-provider-aws-fips, nvidia-nsight-compute-12.8, prometheus-node-exporter-fips, vexctl, k8sgpt-operator, bank-vaults, blob-csi-fips, secrets-store-csi-driver-fips, newrelic-nri-statsd, prometheus-bind-exporter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, karpenter, git-lfs, cloud-provider-aws-fips, nvidia-nsight-compute-12.8, prometheus-node-exporter-fips, vexctl, k8sgpt-operator, bank-vaults, blob-csi-fips, secrets-store-csi-driver-fips, newrelic-nri-statsd, prometheus-bind-exporter,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: eksctl, goreleaser, skaffold, splunk-otel-collector, oauth2-proxy, crossplane-provider-azure-sql, weaviate, falcoctl, argo-rollouts, sqlexporter, jitsucom-bulker, kine, grafana-agent-operator, step-ca, vexctl, azcopy, opentelemetry-collector, wal-g, dgraph,...