GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dkron, temporal, rabbitmq-messaging-topology-operator, metacontroller, gh, aws-network-policy-agent, flux-image-reflector-controller, grafana-operator, secrets-store-csi-driver-provider-aws, karpenter, flux, ingress-nginx-controller, osv-scanner, flux-helm-controller...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, rabbitmq-messaging-topology-operator, helm, emissary, mattermost, postgres-operator, aws-network-policy-agent, neuvector-dbgen, osv-scanner, kafka-proxy, step-issuer, go, swagger, terraform-provider-sendgrid, polaris,...

CLEANSTART-2026-AE87452 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-33186 applied in versions: 1.20.12-r0, 1.20.12-r1, 1.20.12-r2

Multiple security vulnerabilities affect the smarter-device-manager-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, trillian, crossplane-provider-azure, fq, influx, helm, newrelic-infrastructure-agent, configmap-reload, cue, docker-credential-gcr, grafana-operator, sbom-scorecard, secrets-store-csi-driver-provider-azure, velero, src-fingerprint,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, trillian, crossplane-provider-azure, fq, influx, helm, newrelic-infrastructure-agent, configmap-reload, cue, docker-credential-gcr, grafana-operator, sbom-scorecard, secrets-store-csi-driver-provider-azure, velero, src-fingerprint,...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: kind, configmap-reload-fips, smarter-device-manager-fips, metrics-server, falco...

GHSA-6WXM-MPQJ-6JPF vulnerabilities

Vulnerabilities for packages: kube-bench-fips, step-issuer-fips, portieris-fips, cert-exporter, kubeflow-fips, pulumi-language-yaml, opa-fips, step-ca, caddy-fips, kubeflow, cluster-proportional-autoscaler, kyverno, spark-operator, kyverno-fips, sriov-network-device-plugin-fips, step-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: trillian, crossplane-provider-azure, influx, kubeflow, helm, newrelic-infrastructure-agent, rabbitmq-messaging-topology-operator, configmap-reload, k9s, secrets-store-csi-driver-provider-azure, grafana-operator, velero, newrelic-nri-kube-events, aws-flb-kinesis,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, mc-fips, hubble-ui, caddy-fips, prometheus-elasticsearch-exporter, buildkitd, configmap-reload, kyverno-policy-reporter, eksctl, nats, temporal-server, prometheus-nats-exporter, secrets-store-csi-driver-provider-azure, newrelic-infrastructure-agent,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: metrics-server-fips, dynamic-localpv-provisioner-fips, kubeflow-fips, cluster-autoscaler-fips, kiam, kubernetes-csi-livenessprobe, prometheus-blackbox-exporter, kubeflow, terraform-provider-sendgrid, spark-operator, buildkitd, kubernetes-csi-livenessprobe-fips,...

CVE-2023-39323 vulnerabilities

Vulnerabilities for packages: kind, configmap-reload-fips, smarter-device-manager-fips, metrics-server, falco...