GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, nodetaint, aws-load-balancer-controller, clickhouse-operator, external-secrets-operator, flux-image-reflector-controller, malcontent, newrelic-k8s-metadata-injection, polaris, grafana-operator, oras, kubewatch, grafana-rollout-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, external-secrets-operator, rancher-system-upgrade-controller, knative-eventing, argo-rollouts, chartmuseum, falco-no-driver, aws-application-networking-k8s, cluster-api-provider-vsphere, dex, metacontroller, nri-f5, runc, cosign,...

CLEANSTART-2026-NV36169 Security fixes for CVE-2025-61732, CVE-2025-66564, CVE-2025-68121, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-fcv2-xgw5-pqxf applied in versions: 0.7.29-r1, 0.7.29-r2

Multiple security vulnerabilities affect the sigstore-scaffolding package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: gitness, terraform-provider-random, aws-load-balancer-controller, external-secrets-operator, sftpgo, cluster-api, cluster-api-azure-controller, crossplane-provider-aws-kinesis, gogatekeeper, kserve-modelmesh-serving, knative-eventing, argo-rollouts, kube-state-metric...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, external-secrets-operator, gogatekeeper, cluster-api-azure-controller, rancher-system-upgrade-controller, knative-eventing, argo-rollouts, chartmuseum, falco-no-driver, aws-application-networking-k8s, cluster-api-provider-vsphere, dex,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, external-secrets-operator, gogatekeeper, cluster-api-azure-controller, rancher-system-upgrade-controller, knative-eventing, argo-rollouts, chartmuseum, falco-no-driver, aws-application-networking-k8s, cluster-api-provider-vsphere, dex,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: gitness, terraform-provider-random, aws-load-balancer-controller, external-secrets-operator, sftpgo, cluster-api, cluster-api-azure-controller, crossplane-provider-aws-kinesis, gogatekeeper, kserve-modelmesh-serving, knative-eventing, argo-rollouts, kube-state-metric...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, external-dns, flux-image-reflector-controller, grafana-agent-operator, opentelemetry-collector, hugo-extended, rekor, sops, zarf, step, tekton-chains, grafana-mimir, opentelemetry-collector-contrib, py3-cassandra-medusa, argo-workflows,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, rekor, sops, falco, gomplate, zarf, kargo, melange, step, tekton-chains, kubernetes-dashboard, dex, oauth2-proxy, argo-workflows, bank-vaults, zot, cosign, minio, apko, rook, caddy, weaviate, wolfictl, skopeo,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: grype, crossplane-provider-aws-sqs, external-dns-fips, aactl, flannel, frp, prometheus-postgres-exporter, pulumi, local-path-provisioner, kubernetes-dashboard-metrics-scraper-fips, terraform-docs, hugo, hubble-fips, dynamic-localpv-provisioner,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gitness, kubewatch, amass, dex, metacontroller, oauth2-proxy, cosign, terraform-provider-sendgrid, minio, nghttp2, terraform-provider-azurerm, weaviate, flux-kustomize-controller, grype, kpt, pulumi-language-yaml, metrics-server, gobuster, nri-prometheus, hugo,...