GO-2026-6088 vulnerabilities

Vulnerabilities for packages: perses, cluster-api-fips, crossplane-provider-azure-securityinsights, sbom-convert, vexctl, crossplane-provider-aws-configservice, vault-secrets-operator, falco-no-driver, prometheus-node-exporter-fips, pvc-autoresizer, crossplane-provider-aws-sns-fips,...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: perses, crossplane-provider-azure-securityinsights, sbom-convert, cert-manager, terraform-provider-kubernetes, crossplane-provider-aws-networkfirewall-fips, sftpgo-plugin-eventsearch, kubevirt-cdi-apiserver-fips, chainloop-control-plane, cloudflared-fips,...

CVE-2026-56859 vulnerabilities

Vulnerabilities for packages: perses, cluster-api-fips, crossplane-provider-azure-securityinsights, sbom-convert, vexctl, crossplane-provider-aws-configservice, vault-secrets-operator, falco-no-driver, prometheus-node-exporter-fips, pvc-autoresizer, crossplane-provider-aws-sns-fips,...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: perses, crossplane-provider-azure-securityinsights, sbom-convert, cert-manager, terraform-provider-kubernetes, crossplane-provider-aws-networkfirewall-fips, sftpgo-plugin-eventsearch, kubevirt-cdi-apiserver-fips, chainloop-control-plane, cloudflared-fips,...

CLEANSTART-2026-KM76344 Security fixes in volume-modifier-for-k8s 0.9.5-r2

Package volume-modifier-for-k8s version 0.9.5-r2 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: spire-server, envoy-ratelimit, fluxcd-kustomize-mutating-webhook, volume-modifier-for-k8s, dgraph, ingress-nginx-controller, smarter-device-manager, flux-image-reflector-controller, karpenter, metacontroller, dbmate, pluto, omnibump, local-path-provisioner,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, ip-masq-agent, terraform-provider-tls, fluxcd-kustomize-mutating-webhook, terraform-provider-time, sonobuoy, prometheus-pushgateway, nuclei, flux-image-reflector-controller, terraform-provider-random, cue, bento, vt-cli,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: cilium-fips, caddy, sbom-convert, vault-secrets-operator, eck-operator, neuvector-dbgen-fips, cert-manager, go-md2man, cloud-provider-azure-fips, terraform-provider-kubernetes, sftpgo-plugin-eventsearch, kbld, rke2-cloud-provider, amazon-k8s-cni,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: caddy, vexctl, kargo, prometheus-node-exporter-fips, configmap-reload-fips, crossplane-provider-aws-dynamodb, prometheus-mysqld-exporter, vault-k8s, k8ssandra-operator, secrets-store-csi-driver-provider-aws, ip-masq-agent, mc-fips, envoy-ratelimit, rekor-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, buildkitd, cortex, kube-oidc-proxy, aws-efs-csi-driver-fips, dgraph, dynamic-localpv-provisioner-fips, spark-operator, terraform-provider-sendgrid, timestamp-authority-fips, src, kiam, kubeflow-fips, terraform-provider-sendgrid-fips,...