GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: zarf-fips, crossplane, kyverno-notation-aws, zarf, tbot, tkn-fips, trivy, tekton-chains-fips, kubescape-server, cloudbeat-fips, gitsign, teleport-operator-fips, tflint, trivy-fips, kubescape-server-fips, kyverno-notation-aws-fips, tflint-fips, trivy-operator-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: snyk-cli, chisel, pulumi-language-yaml, terragrunt, ksops, gomplate, wolfictl, caddy, fulcio, vault-benchmark, telegraf, cosign, dagger, witness, podman, pulumi-language-java, helm, kots, step-issuer, prometheus, crossplane-provider-azure-authorization, gh,...

CLEANSTART-2026-EL22377 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JV06428 Security fixes for CVE-2025-15558, CVE-2025-61729, CVE-2026-23831, CVE-2026-23991, CVE-2026-23992, CVE-2026-24051, CVE-2026-24137, CVE-2026-25679, CVE-2026-26958, CVE-2026-27142, CVE-2026-33186, CVE-2026-33211, ghsa-273p-m2cw-6833, ghsa-4c4x-jm2x-pf9j, ghsa-4qg8-fj49-pxjh, ghsa-846p-jg2w-w324, ghsa-f83f-xpx7-ffpw, ghsa-fcv2-xgw5-pqxf, ghsa-fphv-w9fq-2525, ghsa-jqc5-w2xx-5vq4, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.43.0-r0, 0.43.0-r1, 0.43.0-r2, 0.43.0-r3, 0.43.0-r4

Multiple security vulnerabilities affect the tkn-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: packer-fips, crossplane-provider-aws-networkmanager, kube-fluentd-operator, eck-operator-fips, crossplane-provider-aws-organizations, crossplane-provider-azure-signalrservice, k8s-agents-operator-fips, crossplane-provider-aws-elasticache-fips, ansible-operator-fips,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: packer-fips, crossplane-provider-aws-networkmanager, kube-fluentd-operator, eck-operator-fips, crossplane-provider-aws-organizations, crossplane-provider-azure-signalrservice, k8s-agents-operator-fips, crossplane-provider-aws-elasticache-fips, ansible-operator-fips,...

CVE-2026-39819 vulnerabilities

Vulnerabilities for packages: calico, configmap-reload, gcp-compute-persistent-disk-csi-driver, lazydocker, sftpgo-plugin-geoipfilter, croc, xeol, certificate-transparency, bazelisk, cargobump, thanos, authservice, shfmt, renovate, lvm-driver, rancher-system-upgrade-controller, vault-benchmark,...

CVE-2026-39826 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, sftpgo-plugin-geoipfilter, lazydocker, xeol, certificate-transparency, thanos, authservice, lvm-driver, vault-benchmark, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, dagger, kube-arangodb, kubernetes-csi-driver-nfs,...

GHSA-3V2C-X6Q9-F697 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, sftpgo-plugin-geoipfilter, lazydocker, xeol, certificate-transparency, thanos, authservice, lvm-driver, vault-benchmark, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, dagger, kube-arangodb, kubernetes-csi-driver-nfs,...

CVE-2026-33811 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, sftpgo-plugin-geoipfilter, xeol, certificate-transparency, thanos, authservice, lvm-driver, vault-benchmark, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, dagger, kube-arangodb, kubernetes-csi-driver-nfs,...

GHSA-497X-JCXF-M478 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, sftpgo-plugin-geoipfilter, xeol, certificate-transparency, thanos, authservice, lvm-driver, vault-benchmark, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, dagger, kube-arangodb, kubernetes-csi-driver-nfs,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: calico, configmap-reload, gcp-compute-persistent-disk-csi-driver, lazydocker, sftpgo-plugin-geoipfilter, croc, xeol, certificate-transparency, bazelisk, cargobump, thanos, authservice, shfmt, renovate, lvm-driver, rancher-system-upgrade-controller, vault-benchmark,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: calico, configmap-reload, gcp-compute-persistent-disk-csi-driver, lazydocker, sftpgo-plugin-geoipfilter, croc, xeol, certificate-transparency, bazelisk, cargobump, thanos, authservice, shfmt, renovate, lvm-driver, rancher-system-upgrade-controller, vault-benchmark,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: calico, configmap-reload, gcp-compute-persistent-disk-csi-driver, lazydocker, sftpgo-plugin-geoipfilter, croc, xeol, certificate-transparency, bazelisk, cargobump, thanos, authservice, shfmt, renovate, lvm-driver, rancher-system-upgrade-controller, vault-benchmark,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: thanos, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, azure-service-operator, kubevela, flyte, cortex, helm, kots, runc, prometheus, teleport, karpenter, tkn, zot, gatekeeper, nerdctl, kubernetes-dashboard, buildah, crossplane, rancher-agent,...

CVE-2026-39823 vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, sftpgo-plugin-geoipfilter, lazydocker, xeol, certificate-transparency, thanos, authservice, lvm-driver, vault-benchmark, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, dagger, kube-arangodb, kubernetes-csi-driver-nfs,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: thanos, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, azure-service-operator, kubevela, flyte, cortex, helm, kots, runc, prometheus, teleport, karpenter, tkn, zot, gatekeeper, nerdctl, kubernetes-dashboard, buildah, crossplane, rancher-agent,...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: gcp-compute-persistent-disk-csi-driver, sftpgo-plugin-geoipfilter, lazydocker, xeol, certificate-transparency, thanos, authservice, lvm-driver, vault-benchmark, sftpgo, telegraf, cluster-autoscaler, grafana-pyroscope, dagger, kube-arangodb, kubernetes-csi-driver-nfs,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: calico, configmap-reload, gcp-compute-persistent-disk-csi-driver, lazydocker, sftpgo-plugin-geoipfilter, croc, xeol, certificate-transparency, bazelisk, thanos, authservice, lvm-driver, rancher-system-upgrade-controller, vault-benchmark, sftpgo, telegraf,...

CVE-2026-39817 vulnerabilities

Vulnerabilities for packages: calico, configmap-reload, gcp-compute-persistent-disk-csi-driver, lazydocker, sftpgo-plugin-geoipfilter, croc, xeol, certificate-transparency, bazelisk, cargobump, thanos, authservice, shfmt, renovate, lvm-driver, rancher-system-upgrade-controller, vault-benchmark,...