GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cilium, buildah, tkn, terragrunt, melange, prometheus, act, zarf, eksctl, gitlab-kas, steampipe, zot, pulumi-kubernetes-operator, pulumi, kyverno, osv-scanner, ksops, witness, gh, k9s, kaf, opentelemetry-collector, nuclei, kubernetes-dashboard, scorecard, dagger,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: cilium, step-issuer, gptscript, terraform-provider-acme, kubernetes, crossplane-provider-aws-elasticache, crossplane-provider-azure-authorization, glab, istio, telegraf, vale, prometheus, vitess, caddy, prometheus-operator, grafana-pyroscope, zot, flux,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: temporal-server-fips, src, goose, dapr-fips, dapr, grafana-alloy-fips, ldap2pg, opentelemetry-collector-contrib-fips, kube-bench, authentik, gotrue, kubeflow-pipelines, rke2-cloud-provider, sftpgo, gitaly, sftpgo-plugin-eventstore, gitness, keda-fips, wal-g,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: cilium, datadog-agent, secrets-store-csi-driver-provider-aws, vault-env, newrelic-infrastructure-agent, azure-service-operator, kube-state-metrics, gitaly, buildah, k8sgpt-operator, kpt, tkn, knative-operator, gitsign, falco-no-driver, k8ssandra-client, kubeflow-kati...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cilium, datadog-agent, secrets-store-csi-driver-provider-aws, vault-env, newrelic-infrastructure-agent, azure-service-operator, kube-state-metrics, gitaly, buildah, k8sgpt-operator, kpt, tkn, knative-operator, gitsign, falco-no-driver, k8ssandra-client, kubeflow-kati...

CLEANSTART-2026-CV29689 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-25793, CVE-2026-30836 applied in versions: 0.10.2-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CE02533 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-30836, CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-q4r8-xm5f-56gw applied in versions: 0.10.1-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UZ79996 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-30836, CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-q4r8-xm5f-56gw applied in versions: 0.10.0-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-30836 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, caddy-fips, frankenphp-8.4, caddy, step-issuer-fips, frankenphp-8.5, frankenphp-8.3, step-ca-fips...

GHSA-Q4R8-XM5F-56GW vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, caddy-fips, frankenphp-8.4, caddy, step-issuer-fips, frankenphp-8.5, frankenphp-8.3, step-ca-fips...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms-fips, trivy-operator-fips, helm-diff, src, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-wafv2-fips, goose, gitlab-pages-fips, crossplane-provider-aws-sqs, tekton-pipelines, crossplane-provider-aws-sns,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms-fips, trivy-operator-fips, helm-diff, src, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-wafv2-fips, goose, gitlab-pages-fips, crossplane-provider-aws-sqs, tekton-pipelines, crossplane-provider-aws-sns,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: openbao, cerbos, step-ca, openfga, step-issuer, tkn, nri-mysql, terragrunt, mattermost, gitsign, trufflehog, jitsucom-bulker, telegraf, wolfictl, croc, grafana-alloy, db-operator, keda, spicedb, rekor, juicefs, kyverno-policy-reporter, sftpgo-plugin-eventstore, sops,...