GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: stakater-reloader, dbmate, flux, mountpoint-s3-csi-driver, hubble, dgraph, nova, kubewatch, rabbitmq-messaging-topology-operator, flux-helm-controller, metacontroller, nfs-subdir-external-provisioner, ingress-nginx-controller, apko, flux-image-reflector-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: sftpgo, jitsucom-bulker, nerdctl, s5cmd, vendir, kubewatch, terraform-provider-azapi, descheduler, rancher-webhook, task, ip-masq-agent, cluster-autoscaler, litefs, gostatsd, cilium, swagger, postgres-operator, kubernetes-csi-external-resizer, prometheus-adapter,...

CLEANSTART-2026-NV36169 Security fixes for CVE-2025-61732, CVE-2025-66564, CVE-2025-68121, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-fcv2-xgw5-pqxf applied in versions: 0.7.29-r1, 0.7.29-r2

Multiple security vulnerabilities affect the sigstore-scaffolding package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubo, sftpgo, nvidia-container-toolkit, neuvector-sigstore-interface, sbom-scorecard, langfuse, s5cmd, terragrunt, kubewatch, terraform-provider-azapi, rancher-webhook, cluster-autoscaler, litefs, cilium, swagger, postgres-operator, kubernetes-csi-external-resizer,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kafka-proxy, kubo, sftpgo, nvidia-container-toolkit, neuvector-sigstore-interface, terragrunt, kube-vip-cloud-provider, pulumi-language-dotnet, terraform-provider-azapi, flux-helm-controller, yunikorn-k8shim, rancher-webhook, step-issuer, cluster-autoscaler,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubo, sftpgo, nvidia-container-toolkit, neuvector-sigstore-interface, sbom-scorecard, langfuse, s5cmd, terragrunt, kubewatch, terraform-provider-azapi, rancher-webhook, cluster-autoscaler, litefs, cilium, swagger, postgres-operator, kubernetes-csi-external-resizer,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kafka-proxy, kubo, sftpgo, nvidia-container-toolkit, neuvector-sigstore-interface, terragrunt, kube-vip-cloud-provider, pulumi-language-dotnet, terraform-provider-azapi, flux-helm-controller, yunikorn-k8shim, rancher-webhook, step-issuer, cluster-autoscaler,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: buildkitd, zarf, sqlpad, flux, rook, sigstore-scaffolding, guac, timestamp-authority, prometheus-operator, terragrunt, py3-cassandra-medusa, fluent-bit-plugin-loki, pulumi, fulcio, zot, velero, nuclei, restic, datadog-agent, cluster-autoscaler,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: slsa-verifier, oauth2-proxy, skopeo, rook, sigstore-scaffolding, frp, guac, timestamp-authority, kots, wolfictl, minio, nerdctl, terragrunt, dgraph, ko, zot, rabbitmq-messaging-topology-operator, caddy, apko, falco, dex, step-ca, kubernetes-dashboard, tekton-chains,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, nfs-subdir-external-provisioner-fips, cass-operator-fips-no-pvc-delete, gomplate, crossplane-provider-aws-kms, trust-manager, kube-rbac-proxy-fips, prometheus-node-exporter, osv-scanner, caddy-fips, flux-image-automation-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: grpcurl, frp, kubewatch, pulumi-language-dotnet, flux-helm-controller, metacontroller, ip-masq-agent, gobuster, terraform-provider-sendgrid, kind, memcached-exporter, prometheus-adapter, rqlite, fuse-overlayfs-snapshotter, src, kubescape, cortex, metrics-server,...