GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: temporal, external-secrets-operator, github-mcp-server, pluto, apko, mariadb-operator, newrelic-infra-operator, envoy-ratelimit, karpenter, dkron, aws-network-policy-agent, flux-image-reflector-controller, newrelic-k8s-metadata-injection, osv-scanner, polaris,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, newrelic-infrastructure-agent, slsa-verifier, kube-fluentd-operator, azure-workload-identity-webhook, lazygit, syft, terraform-provider-kubernetes, karpenter, knative-client, gh, timescaledb-parallel-copy, vendir,...

CLEANSTART-2026-NV36169 Security fixes for CVE-2025-61732, CVE-2025-66564, CVE-2025-68121, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-fcv2-xgw5-pqxf applied in versions: 0.7.29-r1, 0.7.29-r2

Multiple security vulnerabilities affect the sigstore-scaffolding package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, newrelic-infrastructure-agent, restic, kube-fluentd-operator, azure-workload-identity-webhook, gogatekeeper, syft, terraform-provider-kubernetes, karpenter, loki, knative-client, secrets-store-csi-driver-provider-gcp,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, newrelic-infrastructure-agent, telegraf, rancher-helm, cert-manager, falcoctl, step-kms-plugin, restic, kube-fluentd-operator, terraform-provider-time, gogatekeeper, fuse-overlayfs-snapshotter, mattermost, syft,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, newrelic-infrastructure-agent, telegraf, rancher-helm, cert-manager, falcoctl, step-kms-plugin, restic, kube-fluentd-operator, terraform-provider-time, gogatekeeper, fuse-overlayfs-snapshotter, mattermost, syft,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, newrelic-infrastructure-agent, restic, kube-fluentd-operator, azure-workload-identity-webhook, gogatekeeper, syft, terraform-provider-kubernetes, karpenter, loki, knative-client, secrets-store-csi-driver-provider-gcp,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: druid, falcoctl, airflow, restic, terragrunt, secrets-store-csi-driver-provider-azure, cortex, trino, argo-workflows, datadog-agent, velero, policy-controller, trivy, py3-azure-identity, fluent-bit-plugin-loki, flux-image-reflector-controller, ksops, up, zarf,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: slsa-verifier, skaffold, falcoctl, temporal, falco, nerdctl, apko, minio, terragrunt, argo-workflows, policy-controller, caddy, aactl, wolfictl, gomplate, zarf, step-ca, zot, guac, cloudflared, tekton-chains, melange, gitsign, flux-kustomize-controller, ko, fulcio,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, aactl, kubernetes-csi-livenessprobe-fips, kyverno-policy-reporter-ui, falcosidekick-fips, hubble-ui-backend-fips, datadog-agent, k8ssandra-operator, certificate-transparency, dgraph, kube-bench, smarter-device-manager,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, slsa-verifier, cue, fuse-overlayfs-snapshotter, kaf, scorecard, secrets-store-csi-driver-provider-gcp, kind, nri-prometheus, oauth2-proxy, buildkitd, metacontroller, gobuster, cosign, pulumi-language-dotnet, amass,...