GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: ratify-fips, helm-exporter, headlamp-fips, rancher-fleet-fips, linkerd2-fips, drone-fips, k8ssandra-client, helm-operator-fips, rancher-helm, kyverno, chartmuseum-fips, gatekeeper, ratify, falcoctl-fips, manifest-tool, kgateway-fips, opentofu, gitlab-operator-fips,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: ratify-fips, helm-exporter, headlamp-fips, rancher-fleet-fips, linkerd2-fips, drone-fips, k8ssandra-client, helm-operator-fips, rancher-helm, kyverno, chartmuseum-fips, gatekeeper, ratify, falcoctl-fips, manifest-tool, kgateway-fips, opentofu, gitlab-operator-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-grafana, terraform, flux-source-controller, drone-fips, kubernetes, coder, etcd, frankenphp-8.3, flux, gitea, nemo, kyverno, gatekeeper, omnictl-multiarch-fips, opentofu, argo-workflows-fips, prometheus-elasticsearch-exporter, external-secrets-operator-fip...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-exporter, headlamp-fips, docker, k8sgpt, harvester-fips, linkerd2-fips, amazon-ecs-agent, helm-operator-fips, datadog-agent, rancher-helm, spegel, grype-db, chartmuseum-fips, gatekeeper, syft, grype-fips, kgateway-fips, manifest-tool, kubescape-operator-fips,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: teleport, fuse-overlayfs-snapshotter, kargo, helm-set-status, kube-arangodb, headlamp, k3s, kots, trivy, kaniko, skaffold, wolfictl, rancher, docker-cli-buildx, manifest-tool, cluster-api-helm-controller, k8ssandra-client, ctop, helm-operator, eksctl, osv-scanner, op...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: teleport, fuse-overlayfs-snapshotter, kargo, helm-set-status, kube-arangodb, headlamp, k3s, kots, trivy, kaniko, skaffold, wolfictl, rancher, docker-cli-buildx, manifest-tool, cluster-api-helm-controller, k8ssandra-client, ctop, helm-operator, eksctl, osv-scanner, op...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni, lvm-driver, node-feature-discovery, harbor-registry-fips, spicedb-fips, crossplane-provider-aws-firehose, mcp-grafana, cloud-provider-gcp-cloud-controller-manager-fips, nats, addon-resizer, rancher-fleet-fips, supercronic,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, cilium-cli, kubernetes-dashboard-metrics-scraper, cis-operator, flux, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, polaris, vertical-pod-autoscaler, custom-pod-autoscaler-operator, crossplane-provider-aws-elasticache, hydra,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, cilium-cli, gobump, kubernetes-dashboard-metrics-scraper, cis-operator, flux, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, polaris, hivemind, vertical-pod-autoscaler, custom-pod-autoscaler-operator,...

CLEANSTART-2026-RB28539 Within HostnameError

Security vulnerability affects the tigera-operator package. Within HostnameError...

CLEANSTART-2025-YJ25356 Security fixes for CVE-2025-61729 applied in versions: 1.40.2-r0

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for CVE details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: spicedb-fips, terraform-provider-random-fips, supercronic, prometheus-node-exporter-fips, s5cmd, paranoia, nri-jmx, amazon-cloudwatch-agent-fips, temporal, actions-runner-controller-fips, newrelic-nri-kube-events, stakater-reloader, pulumi-kubernetes-operator,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni, node-feature-discovery, apko-fips, rancher-fleet-fips, supercronic, blob-csi, secrets-store-csi-driver-provider-gcp, elvish, metrics-agent-fips, s5cmd, paranoia, ip-masq-agent, falcosidekick, spegel, gosu-fips, glow, cass-operator-fips-no-pvc-delete,...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator, tigera-operator-fips...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator, tigera-operator-fips...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, nri-f5, dask-gateway, haproxy-ingress, pulumi, cert-exporter, gosu, kubernetes-dashboard-metrics-scraper, pulumi-language-java, flux, gops, cri-tools, vertical-pod-autoscaler, cadvisor, docker-credential-ecr-login, kpt, skaffold, src, up,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, nri-f5, dask-gateway, haproxy-ingress, pulumi, cert-exporter, gosu, kubernetes-dashboard-metrics-scraper, pulumi-language-java, flux, gops, cri-tools, vertical-pod-autoscaler, cadvisor, docker-credential-ecr-login, kpt, skaffold, src, up,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, haproxy-ingress, pulumi, grafana-agent-operator, rook, cert-exporter, cilium-cli, kubernetes-dashboard-metrics-scraper, pulumi-language-java, flux, crossplane-provider-aws-firehose, cri-tools, crossplane-provider-aws-sns, kots,...