GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: github-mcp-server, clickhouse-operator, spire-server, smokescreen, flux, nova, aws-network-policy-agent, malcontent, sftpgo-plugin-eventsearch, karpenter, aws-load-balancer-controller, envoy-ratelimit, apko, osv-scanner, go, grafana-rollout-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nerdctl, gobuster, pdfcpu, gatus, nfpm, sbom-convert, weaviate, grpc-health-probe, envoy-ratelimit, modelmesh-runtime-adapter, sftpgo-plugin-eventstore, go, secrets-store-csi-driver-provider-aws, pguser, oras, boring-registry, polaris, step-issuer, helm-mapkubeapis,...

CLEANSTART-2026-AE87452 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.20.12-r0, 1.20.12-r1, 1.20.12-r2

Multiple security vulnerabilities affect the smarter-device-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nerdctl, nri-cassandra, gobuster, vexctl, cert-exporter, kyverno-policy-reporter, gcsfuse, up, nri-memcached, envoy-ratelimit, dive, nri-mysql, dex, yq, scorecard, secrets-store-csi-driver-provider-aws, cfssl, prometheus-adapter, task, terraform, oras,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nerdctl, nri-cassandra, gobuster, vexctl, cert-exporter, kyverno-policy-reporter, gcsfuse, up, nri-memcached, envoy-ratelimit, dive, nri-mysql, dex, yq, scorecard, secrets-store-csi-driver-provider-aws, cfssl, prometheus-adapter, task, terraform, oras,...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: kubeflow-katib, smarter-device-manager-fips, configmap-reload-fips, falco, kind, metrics-server...

GHSA-6WXM-MPQJ-6JPF vulnerabilities

Vulnerabilities for packages: step-fips, caddy-fips, smarter-device-manager-fips, spark-operator, cluster-proportional-autoscaler, sigstore-scaffolding-fips, pulumi-language-dotnet, grafana-fips, cert-exporter, sriov-network-device-plugin, terraform-provider-google,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: nerdctl, conftest, crossplane-provider-aws-firehose, spire-server, vexctl, kubescape, melange, cert-exporter, kyverno-policy-reporter, gcsfuse, up, hugo-extended, weaviate, temporal-ui-server, grpc-health-probe, envoy-ratelimit, crossplane-provider-aws-elasticache,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: spicedb, kor, k8sgpt-operator, cilium-cli, terraform-provider-google, guac, kubernetes-dashboard-fips, docker, kubevela, crossplane-provider-aws-lambda, buildkitd, kubernetes-csi-driver-hostpath, k8ssandra-operator-fips, crossplane-provider-aws-sqs,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, spark-operator, conftest-fips, src, prometheus-stackdriver-exporter, kiam, terraform-provider-sendgrid-fips, cortex, bank-vaults-fips, kubevela, timestamp-authority-fips, buildkitd, kubeflow, vault-csi-provider,...

CVE-2023-39323 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, smarter-device-manager-fips, configmap-reload-fips, falco, kind, metrics-server...