CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: zarf-fips, argocd-image-updater, cluster-api-helm-controller-fips, gogatekeeper, trivy, ocm-kubernetes-controller-fips, headlamp, kyverno-notation-aws-fips, crossplane, conftest-fips, k8ssandra-client, trivy-fips, linkerd2, drone, helm-exporter, helm-exporter-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zarf-fips, commercial-expanso-edge, argocd-image-updater, flux-source-controller-fips, omnictl-multiarch, trivy, knative-kafka-broker, docker-machine-driver-harvester, trivy-fips, osv-scanner, omnictl-multiarch-fips, nemo, coder-fips, drone, knative-serving,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, ctop, helm-exporter-fips,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: neuvector-scanner, buildkitd, newrelic-infrastructure-agent, zot, gatekeeper, helm-mapkubeapis, dagger, envoy-gateway, kubevela, rancher-agent, zarf, scorecard, k8sgpt, opa, tigera-operator, k9s, eksctl, rancher-helm, rancher, docker-cli-buildx, grype, helm-operator,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, buildkitd, newrelic-infrastructure-agent, zot, gatekeeper, helm-mapkubeapis, dagger, envoy-gateway, kubevela, rancher-agent, zarf, scorecard, k8sgpt, opa, tigera-operator, k9s, eksctl, rancher-helm, rancher, docker-cli-buildx, grype, helm-operator,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: gatus-fips, eks-distro, aws-fsx-csi-driver-fips, longhorn-manager-fips, kubernetes-ingress-defaultbackend, spegel, yace, blob-csi-fips, k8s-device-plugin, nri-f5-fips, flux-source-controller-fips, nri-rabbitmq, rancher-machine, nri-mssql-fips, monstache, openbao-fips...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, datadog-operator, gitlab-pages, nri-mysql, vault-benchmark, tigera-operator, stakater-reloader, cloudprober, k8sgpt-operator, timoni, cilium, smokescreen,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, datadog-operator, gitlab-pages, flannel-cni-plugin, nri-mysql, vault-benchmark, tigera-operator, stakater-reloader, cloudprober, k8sgpt-operator, timoni, cilium,...

CLEANSTART-2026-RB28539 Within HostnameError

Security vulnerability affects the tigera-operator package. Within HostnameError...

CLEANSTART-2025-YJ25356 Security fixes for CVE-2025-61729 applied in versions: 1.40.2-r0

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for CVE details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: longhorn-manager-fips, k8s-device-plugin, flux-source-controller-fips, nri-rabbitmq, monstache, cluster-api-gcp-controller-fips, newrelic-fluent-bit-output-fips, headlamp, metrics-server-fips, go-discover, osv-scanner, kube-metrics-adapter, mesosphere-vsphere-csi,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: eks-distro, spegel, yace, blob-csi-fips, k8s-device-plugin, chainctl, flux-source-controller-fips, nri-rabbitmq, openbao-fips, trivy, packer-fips, esbuild, temporal-ui-server-fips, vt-cli, podinfo, aws-sigv4-proxy, newrelic-fluent-bit-output,...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator, tigera-operator-fips...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator, tigera-operator-fips...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, kubewatch, aws-flb-cloudwatch, dockerize, s5cmd, dagger, flannel-cni-plugin, kubevela, nri-mysql, vertical-pod-autoscaler, newrelic-infra-operator, stakater-reloader, grafana-operator, k8sgpt-operator,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, kubewatch, aws-flb-cloudwatch, dockerize, s5cmd, dagger, flannel-cni-plugin, kubevela, nri-mysql, vertical-pod-autoscaler, newrelic-infra-operator, stakater-reloader, grafana-operator, k8sgpt-operator,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, kubewatch, restic, vertical-pod-autoscaler, dagger, hubble, kubevela, zarf, newrelic-infra-operator, stakater-reloader, grafana-operator, k8sgpt-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, kubewatch, aws-flb-cloudwatch, dockerize, s5cmd, dagger, flannel-cni-plugin, kubevela, nri-mysql, vertical-pod-autoscaler, newrelic-infra-operator, stakater-reloader, grafana-operator, k8sgpt-operator,...