GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, aws-privateca-issuer, external-secrets-operator, grafana-operator, ingress-nginx-controller, newrelic-infra-operator, sftpgo-plugin-eventsearch, osv-scanner, local-path-provisioner, temporal, dbmate, nodetaint, clickhouse-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: bom, sftpgo-plugin-eventsearch, custom-pod-autoscaler, gcsfuse, nri-discovery-kubernetes, govulncheck, kubeflow-katib, modelmesh-runtime-adapter, container-object-storage-interface, sbom-convert, gcp-compute-persistent-disk-csi-driver, victoriametrics-operator,...

CLEANSTART-2026-NV36169 Security fixes for CVE-2025-61732, CVE-2025-66564, CVE-2025-68121, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-fcv2-xgw5-pqxf applied in versions: 0.7.29-r1, 0.7.29-r2

Multiple security vulnerabilities affect the sigstore-scaffolding package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: bom, minify, sftpgo-plugin-eventsearch, nri-discovery-kubernetes, modelmesh-runtime-adapter, container-object-storage-interface, sbom-convert, gcp-compute-persistent-disk-csi-driver, victoriametrics-operator, s5cmd, fuse-overlayfs-snapshotter, nvidia-container-toolki...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: bom, minify, sftpgo-plugin-eventsearch, nri-discovery-kubernetes, modelmesh-runtime-adapter, container-object-storage-interface, sbom-convert, gcp-compute-persistent-disk-csi-driver, victoriametrics-operator, s5cmd, fuse-overlayfs-snapshotter, nvidia-container-toolki...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: bom, kube-vip-cloud-provider, sftpgo-plugin-eventsearch, gitaly, kubernetes-csi-driver-nfs, kube-arangodb, rancher, crossplane-provider-aws-rds, argo-cd, net-kourier, modelmesh-runtime-adapter, cluster-autoscaler, kubernetes-dns-node-cache, kuma, vault-env,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: bom, kube-vip-cloud-provider, sftpgo-plugin-eventsearch, gitaly, kubernetes-csi-driver-nfs, kube-arangodb, rancher, crossplane-provider-aws-rds, argo-cd, net-kourier, modelmesh-runtime-adapter, cluster-autoscaler, kubernetes-dns-node-cache, kuma, vault-env,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, chezmoi, sqlpad, zarf, velero, k8sgpt, boring-registry, argo-events, policy-controller, hugo-extended, py3-cassandra-medusa, thanos, flux-image-reflector-controller, ksops, rclone, timestamp-authority, druid, guac, cluster-autoscaler, trino,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: temporal, wolfictl, zarf, policy-controller, gitsign, ko, aactl, grpc-health-probe, timestamp-authority, gomplate, caddy, goreleaser, kargo, step, vexctl, terragrunt, kube-rbac-proxy, oauth2-proxy, rabbitmq-messaging-topology-operator, dex, kubescape,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, hubble, vexctl, metacontroller, prometheus-redis-exporter, kiam, dagger, ip-masq-agent, newrelic-infra-operator, nats, aws-load-balancer-controller-fips, dgraph, cluster-autoscaler-fips, terraform-docs, helm, timestamp-authority-fips...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: bom, nginx-mainline, kubeflow-katib, gomplate, kubernetes-csi-livenessprobe, newrelic-infrastructure-agent, certificate-transparency, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, git-lfs, mc, kubeflow, terraform-provider-azurerm, metrics-server,...