GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, flux-image-automation-controller, spire-server, hubble, tailscale, clickhouse-operator, envoy-ratelimit, grafana-operator, rabbitmq-messaging-topology-operator, victoriametrics, external-secrets-operator, goreleaser, flux-notification-controller...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, rabbitmq-messaging-topology-operator, aws-signer-notation-plugin, prometheus-pushgateway, argo-events, dive, nri-mongodb, newrelic-k8s-metadata-injection, rancher-helm, secrets-store-csi-driver-provider-aws, flux-source-controller, otel-cli, redka,...

CLEANSTART-2026-ZM74354 Security fixes for CVE-2025-61732, CVE-2025-66506, CVE-2025-66564, CVE-2025-68121, CVE-2026-22772, CVE-2026-23991, CVE-2026-23992, CVE-2026-24137, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-4qg8-fj49-pxjh, ghsa-59jp-pj84-45mr, ghsa-846p-jg2w-w324, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4 applied in versions: 0.7.31-r0, 0.7.31-r1, 0.7.31-r2

Multiple security vulnerabilities affect the sigstore-scaffolding package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NV36169 Security fixes for CVE-2025-61732, CVE-2025-66564, CVE-2025-68121, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-fcv2-xgw5-pqxf applied in versions: 0.7.29-r1, 0.7.29-r2

Multiple security vulnerabilities affect the sigstore-scaffolding package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, coredns, crossplane-provider-aws-iam, kafka-proxy, buildah, kyverno-policy-reporter, redpanda, azurefile-csi, kubevela, tetragon, azcopy, cert-manager, kubernetes-csi-external-attacher, src, nginx-prometheus-exporter, dkron, kserve,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: flux-helm-controller, coredns, crossplane-provider-aws-iam, kafka-proxy, buildah, kyverno-policy-reporter, redpanda, azurefile-csi, kubevela, tetragon, azcopy, cert-manager, kubernetes-csi-external-attacher, src, nginx-prometheus-exporter, dkron, kserve,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, rabbitmq-messaging-topology-operator, azurefile-csi, aws-signer-notation-plugin, prometheus-pushgateway, argo-events, nri-mongodb, newrelic-k8s-metadata-injection, crossplane-provider-aws-sns, kube-vip-cloud-provider, rancher-helm,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, rabbitmq-messaging-topology-operator, azurefile-csi, aws-signer-notation-plugin, prometheus-pushgateway, argo-events, nri-mongodb, newrelic-k8s-metadata-injection, crossplane-provider-aws-sns, kube-vip-cloud-provider, rancher-helm,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: buildkitd, sops, rekor, tempo, spire-server, sqlpad, harbor-registry, trivy, zarf, druid, fulcio, bank-vaults, goreleaser, boring-registry, prometheus-operator, timestamp-authority, flux, restic, velero, flyte, up, argo-events, argo-workflows,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: ko, cloudflared, sops, kargo, oauth2-proxy, rekor, spire-server, grpc-health-probe, kots, zarf, temporal-ui-server, fulcio, rabbitmq-messaging-topology-operator, bank-vaults, goreleaser, timestamp-authority, weaviate, caddy, argo-workflows, flux-kustomize-controller,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dagger, kube-logging-operator, cert-exporter-fips, nerdctl, thanos, ctop, kots, hugo, ferretdb, newrelic-nri-kube-events, prometheus-node-exporter, prometheus-alertmanager-fips, cert-exporter, vertical-pod-autoscaler, nri-kubernetes, crossplane-provider-gcp,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, buildkitd, rqlite, kubevela, src, grype, spark-operator, nginx-stable, ip-masq-agent, flux-source-controller, certificate-transparency, grpcurl, minio, gitness, kubeflow-katib, oauth2-proxy, kots, mc, flux-notification-controller, wireguard-go,...