CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kuma, grafana-fips, teleport, aws-iam-authenticator-fips, crossplane-provider-azure-storagecache, crossplane-provider-azure-servicenetworking, coredns, knative-serving, syft, ingress-nginx-controller-fips, k8sgateway-fips, gcp-compute-persistent-disk-csi-driver,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kuma, grafana-fips, teleport, aws-iam-authenticator-fips, crossplane-provider-azure-storagecache, crossplane-provider-azure-servicenetworking, coredns, knative-serving, syft, ingress-nginx-controller-fips, k8sgateway-fips, gcp-compute-persistent-disk-csi-driver,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: dgraph, aws-node-termination-handler, kapp-controller, kubernetes-csi-external-resizer, runc, step-kms-plugin, dask-gateway, kuberlr, kyverno-policy-reporter-ui, crossplane-provider-aws-sns, spire-controller-manager, crossplane-provider-aws-elasticache,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: kuma, aws-iam-authenticator-fips, kube-conformance, longhorn-backing-image-manager, kyverno-policy-reporter, nri-prometheus, coredns, kubevirt-cdi-operator-fips, crossplane-provider-aws-directconnect-fips, terraform-provider-azapi, crossplane-provider-aws-sns-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kots, kubernetes-dashboard-api, envoy-gateway, trivy, aws-node-termination-handler, kubeflow-pipelines, percona-server-mongodb-operator, kubescape, kwok, cilium-cli, docker-cli-buildx, redis-operator, kubevela, cilium, falcoctl, gitlab-runner, rancher-agent, k9s,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: grafana-fips, teleport, cloudnative-pg-fips, kube-arangodb, verticadb-operator-fips, rancher-agent, verticadb-operator, kcp, aws-node-termination-handler-fips, neuvector, rke2-runtime-fips, docker-cli-buildx-fips, teleport-operator-fips, trident-fips, gitlab-kas,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: lazydocker, volume-modifier-for-k8s, dgraph, aws-node-termination-handler, secrets-store-csi-driver-provider-aws, rclone, docker-cli-buildx, opa-envoy, litestream, gitlab-pages, pulumi-language-java, etcd, flux, redka, kubernetes-csi-external-resizer, runc,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dgraph, aws-node-termination-handler, kubernetes-csi-external-resizer, nri-redis, runc, step-kms-plugin, nginx-prometheus-exporter, dask-gateway, kuberlr, nri-haproxy, kyverno-policy-reporter-ui, kafkaexporter, spire-controller-manager, terraform-provider-kubernetes,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: lazydocker, addon-resizer, dgraph, aws-node-termination-handler, docker-cli-buildx, kapp-controller, litestream, gitlab-pages, pulumi-language-java, etcd, flux, k9s, kubernetes-csi-external-resizer, openfga, dkron, octo-sts, pulumi-language-dotnet,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kuma, fluent-bit-plugin-loki, grafana-fips, atlas-fips, teleport, crossplane-provider-azure-storagecache, verticadb-operator-fips, verticadb-operator, kyverno-policy-reporter, crossplane-provider-azure-servicenetworking, coredns, frankenphp-8.4, gogatekeeper,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: kuma, fluent-bit-plugin-loki, grafana-fips, atlas-fips, teleport, crossplane-provider-azure-storagecache, verticadb-operator-fips, verticadb-operator, kyverno-policy-reporter, crossplane-provider-azure-servicenetworking, coredns, frankenphp-8.4, gogatekeeper,...

CVE-2026-28799 PJSIP: Heap use-after-free in PJSIP presence subscription termination handler

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: go-licenses, lazydocker, ctop, openbao-k8s, aws-node-termination-handler, conjur-cli, secrets-store-csi-driver-provider-aws, rancher-telemetry, docker-cli-buildx, nsc, cert-exporter, etcd, flux, redka, render-template, runc, step-kms-plugin, nodetaint, octo-sts,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: go-licenses, lazydocker, ctop, openbao-k8s, aws-node-termination-handler, conjur-cli, secrets-store-csi-driver-provider-aws, rancher-telemetry, docker-cli-buildx, nsc, cert-exporter, etcd, flux, redka, render-template, runc, step-kms-plugin, octo-sts, protoc-gen-go,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: go-licenses, lazydocker, ctop, openbao-k8s, aws-node-termination-handler, conjur-cli, secrets-store-csi-driver-provider-aws, rancher-telemetry, docker-cli-buildx, nsc, cert-exporter, etcd, flux, redka, render-template, runc, step-kms-plugin, nodetaint, octo-sts,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: go-licenses, lazydocker, ctop, openbao-k8s, aws-node-termination-handler, conjur-cli, secrets-store-csi-driver-provider-aws, rancher-telemetry, docker-cli-buildx, nsc, cert-exporter, etcd, flux, redka, render-template, runc, step-kms-plugin, nodetaint, octo-sts,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: go-licenses, lazydocker, ctop, openbao-k8s, aws-node-termination-handler, conjur-cli, secrets-store-csi-driver-provider-aws, rancher-telemetry, docker-cli-buildx, nsc, cert-exporter, etcd, flux, redka, render-template, runc, step-kms-plugin, nodetaint, octo-sts,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: go-licenses, lazydocker, ctop, openbao-k8s, aws-node-termination-handler, conjur-cli, secrets-store-csi-driver-provider-aws, rancher-telemetry, docker-cli-buildx, nsc, cert-exporter, etcd, flux, redka, render-template, runc, step-kms-plugin, nodetaint, octo-sts,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: go-licenses, lazydocker, ctop, openbao-k8s, aws-node-termination-handler, conjur-cli, secrets-store-csi-driver-provider-aws, rancher-telemetry, docker-cli-buildx, nsc, cert-exporter, etcd, flux, redka, render-template, runc, step-kms-plugin, nodetaint, octo-sts,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: dgraph, aws-node-termination-handler, render-template, runc, step-kms-plugin, dask-gateway, kuberlr, gops, kyverno-policy-reporter-ui, kafkaexporter, spire-controller-manager, terraform-provider-kubernetes, dfc, yace, fulcio, rancher-helm, prometheus-adapter,...