CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: vcluster-fips, kyverno-notation-aws, falcoctl, linkerd2-fips, argo-cd, xeol-fips, cert-manager-cmctl-fips, falcoctl-fips, tigera-operator-fips, argocd-image-updater, envoy-gateway-fips, tw, rancher-fleet, helm-exporter-fips, kubescape-operator-fips, argo-cd-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: vcluster-fips, kyverno-notation-aws, falcoctl, linkerd2-fips, argo-cd, xeol-fips, cert-manager-cmctl-fips, falcoctl-fips, tigera-operator-fips, argocd-image-updater, envoy-gateway-fips, tw, rancher-fleet, helm-exporter-fips, kubescape-operator-fips, argo-cd-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, kube-state-metrics, k3s, docker-machine-driver-harvester, argo-cd, flux-image-automation-controller, calico-fips, gitea-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k3s, grype-db, neuvector, helmfile, linkerd2-fips, buildkitd-fips, xeol-fips, tigera-operator-fips, kaniko, docker-fips, envoy-gateway-fips, gitlab-rails-ce, tw, neuvector-fips, helm-exporter-fips, kubescape-operator-fips, buildkitd, k9s-fips, grype-fips,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: syft, tigera-operator, steampipe, trivy, docker-compose, neuvector-scanner, datadog-agent, k8sgpt, opa, eksctl, rancher, skaffold, fuse-overlayfs-snapshotter, headlamp, consul-k8s, kubescape, kaniko, grype, rancher-helm, dagger, helm, ctop, manifest-tool, tw, zot,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: syft, tigera-operator, steampipe, trivy, docker-compose, neuvector-scanner, datadog-agent, k8sgpt, opa, eksctl, rancher, skaffold, fuse-overlayfs-snapshotter, headlamp, consul-k8s, kubescape, kaniko, grype, rancher-helm, dagger, helm, ctop, manifest-tool, tw, zot,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: fleet-server, cilium, cluster-api-azure-controller-fips, logstash-exporter-fips, knative-eventing, vault-fips, kube-conformance, k6-operator, mcp-grafana, k6-fips, aws-ebs-csi-driver, deck-fips, linkerd2-cni-plugin, nri-mongodb,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: dbmate, percona-server-mongodb-operator, aactl, kubernetes-csi-external-attacher, juicefs-csi-driver, kapp, secrets-store-csi-driver-provider-gcp, glow, rancher-system-upgrade-controller, secrets-store-csi-driver-provider-azure, lvm-driver,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: dbmate, percona-server-mongodb-operator, aactl, iptables-wrappers, kubernetes-csi-external-attacher, juicefs-csi-driver, kapp, secrets-store-csi-driver-provider-gcp, glow, hivemind, rancher-system-upgrade-controller, licenseclassifier,...

CLEANSTART-2026-RB28539 Within HostnameError

Security vulnerability affects the tigera-operator package. Within HostnameError...

CLEANSTART-2025-YJ25356 Security fixes for CVE-2025-61729 applied in versions: 1.40.2-r0

Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for CVE details...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: fleet-server, logstash-exporter-fips, terraform-docs, harbor-scanner-trivy, k6-fips, deck-fips, splunk-otel-collector, kubernetes-csi-external-snapshotter-fips, nfpm, cluster-proportional-autoscaler-fips, nri-jmx, kubernetes-csi-external-resizer-fips, task,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter-fips, cilium, argo-workflows, harbor-scanner-trivy, nerdctl-fips, kube-conformance, k6-fips, splunk-otel-collector, kubernetes-csi-external-snapshotter-fips, cri-tools, step, crossplane-provider-azure-storage, verticadb-operator-fips,...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, tigera-operator...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, tigera-operator...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, wire-go, crossplane-provider-azure, dataplaneapi, aws-load-balancer-controller, controller-gen, flannel-cni-plugin, dynamic-localpv-provisioner, nri-prometheus, gke-gcloud-auth-plugin, newrelic-prometheus-configurator, pombump,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: local-path-provisioner, wire-go, crossplane-provider-azure, dataplaneapi, aws-load-balancer-controller, controller-gen, flannel-cni-plugin, dynamic-localpv-provisioner, nri-prometheus, gke-gcloud-auth-plugin, newrelic-prometheus-configurator, pombump,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, crossplane-provider-azure, aactl, crossplane-provider-family-azure, apisix-ingress-controller, aws-load-balancer-controller, cosign, rclone, dynamic-localpv-provisioner, nri-prometheus, secrets-store-csi-driver-provider-gcp,...