GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, trivy, cert-manager-cmctl, grafana-agent-operator, grafana-mimir, kube-rbac-proxy, spire-server, step, k8sgpt, kaniko, kwok, conftest, opentelemetry-collector-contrib, kots, cloudnative-pg, dbmate, certificate-transparency, opa,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, sriov-network-device-plugin, gatus, bank-vaults, step, aws-eks-pod-identity-agent, kube-vip-cloud-provider, gitness, pguser, kserve-modelmesh-serving, kube-logging-operator-custom-runner, dbmate, nri-redis, ratify, ksops,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: contour, amazon-cloudwatch-agent-operator, mcp-grafana, vexctl, cyberark-secrets-provider-for-k8s, step-kms-plugin-fips, aws-nuke-fips, mcp-grafana-fips, fleet-server-fips, request-1279-14, image-factory, gendesk, prometheus-statsd-exporter-fips, rancher-webhook-fips...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, gendesk, prometheus-statsd-exporter-fips, dragonfly-operator-fips, terraform-provider-databricks, crossplane-function-auto-ready-fips, incert, nri-redis, redpand...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, sriov-network-device-plugin, gatus, bank-vaults, nri-jmx, step, aws-eks-pod-identity-agent, kube-vip-cloud-provider, gitness, pguser, kserve-modelmesh-serving, dbmate, ratify, ksops, cluster-api-ipam-provider-in-cluster,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: step, sbom-scorecard, maru, actions-runner-controller, linkerd2-proxy-init, dex, gobuster, yunikorn-k8shim, azure-workload-identity-webhook, k8sgateway, rabbitmq-default-user-credential-updater, nerdctl, ghaudit, k3d, helm-set-status, x509-certificate-exporter, bom,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, sriov-network-device-plugin, gatus, bank-vaults, step, aws-eks-pod-identity-agent, kube-vip-cloud-provider, gitness, pguser, kserve-modelmesh-serving, kube-logging-operator-custom-runner, dbmate, nri-redis, ratify, ksops,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, sriov-network-device-plugin, gatus, bank-vaults, nri-jmx, step, aws-eks-pod-identity-agent, kube-vip-cloud-provider, gitness, pguser, kserve-modelmesh-serving, dbmate, ratify, ksops, cluster-api-ipam-provider-in-cluster,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: step, sbom-scorecard, maru, actions-runner-controller, linkerd2-proxy-init, dex, gobuster, yunikorn-k8shim, azure-workload-identity-webhook, k8sgateway, rabbitmq-default-user-credential-updater, nerdctl, ghaudit, k3d, helm-set-status, x509-certificate-exporter, bom,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: step, sbom-scorecard, maru, actions-runner-controller, linkerd2-proxy-init, dex, gobuster, yunikorn-k8shim, azure-workload-identity-webhook, k8sgateway, rabbitmq-default-user-credential-updater, nerdctl, ghaudit, k3d, helm-set-status, x509-certificate-exporter, bom,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: step, sbom-scorecard, maru, actions-runner-controller, linkerd2-proxy-init, dex, gobuster, yunikorn-k8shim, azure-workload-identity-webhook, k8sgateway, rabbitmq-default-user-credential-updater, nerdctl, ghaudit, k3d, helm-set-status, x509-certificate-exporter, bom,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: pulumi-language-java, gke-gcloud-auth-plugin, nodetaint, trillian, kube-rbac-proxy, logstash-exporter, metallb, gitness, aws-load-balancer-controller, nri-redis, bazelisk, newrelic-infrastructure-agent, sbom-scorecard, gomplate, prometheus-pushgateway,...