CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, spicedb-operator-fips, crossplane-provider-aws-cloudformation-fips, temporal-server-fips, xeol-fips, crossplane-provider-aws-osis-fips, cert-manager-openshift-routes, metallb, crossplane-provider-azure-sql, gitsign,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, spicedb-operator-fips, crossplane-provider-aws-cloudformation-fips, temporal-server-fips, xeol-fips, crossplane-provider-aws-osis-fips, cert-manager-openshift-routes, metallb, crossplane-provider-azure-sql, gitsign,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: grafana-operator, argo-rollouts, skopeo, pvc-autoresizer, vault-env, cert-manager-istio-csr, opentofu, whereabouts, envoy-gateway, pdfcpu, dgraph, vault-k8s, lazydocker, rancher-agent, task, kots, cluster-api-ipam-provider-in-cluster, kserve, nri-mssql, k3s, k6,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin, cert-manager-openshift-routes, flux-source-controller-fips, crossplane-provider-azure-sql, dive, crossplane-provider-aws-sns, sealed-secrets, thanos-operator, chainloop-cli, crossplane-provider-aws-elb,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kubernetes, vcluster, cloudnative-pg, kubevela, argo-rollouts, kubernetes-dashboard-api, kwok, emissary, kpt, kubescape, kargo, eksctl, cert-manager-istio-csr, verticadb-operator, zarf, envoy-gateway, sonobuoy, docker-cli-buildx, headlamp, rancher-fleet, velero,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kpt, zarf, teleport, argo-rollouts, kube-arangodb, velero, neuvector, falcoctl-fips, kubescape, k8ssandra-client, cri-tools, kiali-fips, plugin-barman-cloud, cilium, rke2-runtime-fips, jitsucom-bulker, eks-distro, argo-cd-fips, dynamic-localpv-provisioner-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: hugo-extended, grafana-operator, argo-rollouts, sftpgo-plugin-auth, pvc-autoresizer, vault-env, opentofu, whereabouts, envoy-gateway, pdfcpu, dgraph, vault-k8s, lazydocker, dkron, rancher-agent, github-mcp-server, task, kots, docker-machine-driver-linode,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cortex, cloudnative-pg, fuse-overlayfs-snapshotter, helm, argo-rollouts, kubernetes-dashboard-api, kwok, sftpgo-plugin-auth, vault-env, opentofu, envoy-gateway, migrate, cert-manager-cmctl, prometheus-blackbox-exporter, dgraph, crossplane-provider-azure-authorization...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: src, kubernetes-csi-external-provisioner, cluster-api-helm-controller, kube-rbac-proxy, cortex, pulumi, metrics-server, vcluster, calico, argo-rollouts, datadog-operator, kwok, opentelemetry-collector-contrib, helm-operator, minio, vault-env, cert-manager-istio-csr,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, spicedb-operator-fips, crossplane-provider-aws-cloudformation-fips, temporal-server-fips, xeol-fips, crossplane-provider-aws-osis-fips, cert-manager-openshift-routes, flux-source-controller-fips, metallb, crossplane-provider-azure-sql...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, spicedb-operator-fips, crossplane-provider-aws-cloudformation-fips, temporal-server-fips, xeol-fips, crossplane-provider-aws-osis-fips, cert-manager-openshift-routes, flux-source-controller-fips, metallb, crossplane-provider-azure-sql...

CVE-2026-28799 PJSIP: Heap use-after-free in PJSIP presence subscription termination handler

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: argo-rollouts, skopeo, pvc-autoresizer, vault-env, opentofu, whereabouts, dgraph, vault-k8s, petname, lazydocker, task, rootlesskit, gotestsum, docker-machine-driver-linode, k6, nri-prometheus, spqr, custom-pod-autoscaler, kubernetes-dashboard-web, infinispan-operato...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...