Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-cf7r-98x9-89x5
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-3x2h-q7mh-2w7f
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-h6p8-mpjr-vg9x
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-rhmr-r5mm-r558
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-6m4h-jg42-gvcv
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-2hqv-c6q7-gr8q
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-44m5-295w-qjj2
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-67qj-9p29-vrhc
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-j56q-cqrg-c67x
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-2g5h-8qjm-x883
    No fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-7586-pw7x-7mj8
    Fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    CGA-x9ff-cxcx-f26p
    No fix available
    Packages

    datadog-agent-7.85

    Summary

    Published
    30 Oct 2026
    Packages

    external-secrets-operator, rancher-agent, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-gcjh-h69q-9w9g applied in: external-secrets-operator 2.8.0-r1, rancher-agent 2.11.15-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    grafana, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-pjcq-xvwq-hhpj applied in: grafana 13.0.1-r0, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    CVE-2026-61804
    Fix available
    Packages

    Summary

    myTinyWMS has Stored Cross-Site Scripting (XSS) in Product and Category Management

    Published
    30 Oct 2026
    Packages

    litestream, litestream, litestream, litestream, metrics-server-fips, argo-events, local-static-provisioner-fips, grafana-alloy-fips

    Summary

    Security fix for GHSA-j5w8-q4qc-rx2x applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, argo-events 1.6.3-r1, local-static-provisioner-fips 2.8.0-r0, grafana-alloy-fips 1.12.1-r0

    Published
    30 Oct 2026
    Packages

    grafana-alloy-fips

    Summary

    Security fix for GHSA-cfpf-hrx2-8rv6 applied in: grafana-alloy-fips 1.12.1-r0

    Published
    30 Oct 2026
    Packages

    argo-events, grafana-alloy-fips

    Summary

    Security fix for GHSA-9mj6-hxhv-w67j applied in: argo-events 1.6.3-r1, grafana-alloy-fips 1.12.1-r0

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko, grafana-alloy-fips

    Summary

    go-git is a highly extensible git implementation library written in pure Go

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko, grafana-alloy-fips

    Summary

    Security fix for GHSA-37cx-329c-33x3 applied in: argo-events 1.6.3-r1, kaniko 1.24.0-r2, grafana-alloy-fips 1.12.1-r1

    Published
    30 Oct 2026
    Packages

    prometheus-fips, rancher-agent, rancher-agent, rancher-agent, temporal-server, temporal-server, distribution, grafana-agent-operator, yunikorn-k8shim-fips

    Summary

    OpenTelemetry-Go is the Go implementation of OpenTelemetry

    Published
    30 Oct 2026
    Packages

    grafana-alloy-fips

    Summary

    Rejected reason: Duplicate of CVE-2026-32286

    Published
    30 Oct 2026
    Packages

    grafana-alloy-fips

    Summary

    Security fix for GHSA-497x-rrr9-68jp applied in: grafana-alloy-fips 1.15.0-r1

    Published
    30 Oct 2026
    Packages

    grafana-alloy-fips

    Summary

    CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/ru...

    Published
    30 Oct 2026
    CVE-2026-61806
    Fix available
    Packages

    Summary

    Frappe LMS allows unpublished certificate access

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, postgres-operator, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, grafana-agent-operator, argo-events, postgres-operator, vault-k8s-fips, cert-manager-webhook-pdns-fips, distribution-fips, distribution-fips, kaniko, kaniko, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-qpw4-5x99-6vjp applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r3, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, postgres-operator, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, grafana-agent-operator, argo-events, postgres-operator, vault-k8s-fips, cert-manager-webhook-pdns-fips, distribution-fips, distribution-fips, kaniko, kaniko, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-45gg-vh54-h5m9 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r3, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    CVE-2026-61805
    Fix available
    Packages

    Summary

    Frappe LMS: Quiz result manipulation and cross-user submission forgery

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, postgres-operator, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, grafana-agent-operator, argo-events, postgres-operator, vault-k8s-fips, cert-manager-webhook-pdns-fips, distribution-fips, distribution-fips, kaniko, kaniko, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-78mq-xcr3-xm33 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r2, promxy 0.0.96-r3, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, grafana-agent-operator, argo-events, postgres-operator, vault-k8s-fips, cert-manager-webhook-pdns-fips, distribution-fips, distribution-fips, kaniko, kaniko, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-9m57-25v3-79x9 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r3, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, postgres-operator, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, grafana-agent-operator, argo-events, postgres-operator, distribution-fips, distribution-fips, kaniko, kaniko, vault-k8s-fips, cert-manager-webhook-pdns-fips, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-w879-237q-wc7r applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r2, promxy 0.0.96-r3, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, postgres-operator, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, grafana-agent-operator, argo-events, postgres-operator, vault-k8s-fips, distribution-fips, distribution-fips, kaniko, kaniko, cert-manager-webhook-pdns-fips, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-q4h4-gmj2-qvw2 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r2, promxy 0.0.96-r3, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, vault-k8s-fips 1.7.5-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, cert-manager-webhook-pdns-fips 2.5.5-r1, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, postgres-operator, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, grafana-agent-operator, argo-events, postgres-operator, distribution-fips, distribution-fips, kaniko, kaniko, vault-k8s-fips, cert-manager-webhook-pdns-fips, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-jppx-rxg9-jmrx applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r2, promxy 0.0.96-r3, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, grafana-agent-operator 0.44.3-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, distribution, melange, litestream, litestream, consul-fips, consul-fips, crossplane-provider-sql-fips, crossplane-provider-sql-fips, postgres-operator, kumactl, kubernetes-dns-node-cache-fips, node-problem-detector, promxy, promxy, cadvisor-fips, cadvisor-fips, grafana-agent-operator, consul-k8s-fips, argo-events, postgres-operator, distribution-fips, distribution-fips, kaniko, kaniko, vault-k8s-fips, cert-manager-webhook-pdns-fips, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-89gr-r52h-f8rx applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, distribution 3.1.1-r1, melange 0.55.0-r1, litestream 0.5.14-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, node-problem-detector 1.35.2-r1, promxy 0.0.96-r2, promxy 0.0.96-r3, cadvisor-fips 0.60.3-r1, grafana-agent-operator 0.44.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, litestream, litestream, litestream, litestream, metrics-server-fips, syft, amazon-cloudwatch-agent, trillian-fips, melange, litestream, litestream, crossplane-provider-sql-fips, postgres-operator, kumactl, node-problem-detector, kubernetes-dns-node-cache-fips, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, argo-events, distribution-fips, distribution-fips, kaniko, kaniko, vault-k8s-fips, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-rm3j-f69w-wqmq applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, amazon-cloudwatch-agent 1.300065.0-r1, trillian-fips 1.7.3-r1, melange 0.55.0-r1, litestream 0.5.14-r1, crossplane-provider-sql-fips 0.15.0-r2, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, node-problem-detector 1.35.2-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, promxy 0.0.96-r3, promxy 0.0.96-r2, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, distribution-fips 3.1.1-r1, kaniko 1.24.0-r2, vault-k8s-fips 1.7.5-r1, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, fulcio-fips, step-ca-fips, amazon-cloudwatch-agent, litestream, litestream, litestream, litestream, metrics-server-fips, syft, trillian-fips, melange, litestream, litestream, crossplane-provider-sql-fips, postgres-operator, kumactl, node-problem-detector, kubernetes-dns-node-cache-fips, promxy, promxy, cadvisor-fips, cadvisor-fips, consul-k8s-fips, argo-events, postgres-operator, distribution-fips, distribution-fips, vault-k8s-fips, cert-manager-webhook-pdns-fips, kaniko, kaniko, prometheus-adapter, yunikorn-k8shim-fips

    Summary

    Security fix for GHSA-x527-x647-q7gg applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, fulcio-fips 1.8.7-r1, step-ca-fips 0.30.2-r1, amazon-cloudwatch-agent 1.300065.0-r1, litestream 0.3.14-r2, litestream 0.3.14-r3, metrics-server-fips 0.8.1-r3, syft 1.43.0-r1, trillian-fips 1.7.3-r1, melange 0.55.0-r1, litestream 0.5.14-r1, crossplane-provider-sql-fips 0.15.0-r2, postgres-operator 1.12.2-r1, kumactl 2.13.8-r1, node-problem-detector 1.35.2-r1, kubernetes-dns-node-cache-fips 1.25.0-r1, promxy 0.0.96-r2, promxy 0.0.96-r3, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, postgres-operator 1.13.0-r1, distribution-fips 3.1.1-r1, vault-k8s-fips 1.7.5-r1, cert-manager-webhook-pdns-fips 2.5.5-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, yunikorn-k8shim-fips 1.8.0-r2

    Published
    30 Oct 2026
    Packages

    kaniko, kaniko

    Summary

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

    Published
    30 Oct 2026
    Packages

    kaniko, kaniko

    Summary

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

    Published
    30 Oct 2026
    Packages

    prometheus-fips, amazon-cloudwatch-agent, promxy, kaniko, kaniko

    Summary

    Moby is an open source container framework

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko

    Summary

    Security fix for GHSA-q9hv-hpm4-hj6x applied in: argo-events 1.6.3-r1, kaniko 1.24.0-r2

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko

    Summary

    CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko

    Summary

    Security fix for GHSA-w5pp-99ch-qj29 applied in: argo-events 1.6.3-r1, kaniko 1.24.0-r2

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko

    Summary

    Billy is an interface filesystem abstraction for Go

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko

    Summary

    Billy is an interface filesystem abstraction for Go

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko

    Summary

    Security fix for GHSA-m3xc-h892-ggx6 applied in: argo-events 1.6.3-r1, kaniko 1.24.0-r2

    Published
    30 Oct 2026
    Packages

    argo-events, kaniko, kaniko

    Summary

    Security fix for GHSA-qw64-3x98-g7q2 applied in: argo-events 1.6.3-r1, kaniko 1.24.0-r2

    Published
    30 Oct 2026
    Packages

    rancher-fleet-agent, syft, tigera-operator-fips, kaniko, kaniko

    Summary

    containerd is an open-source container runtime

    Published
    30 Oct 2026
    Packages

    newrelic-infrastructure-agent, rancher-fleet-agent, syft, tigera-operator-fips, kaniko, kaniko

    Summary

    containerd is an open-source container runtime

    Published
    30 Oct 2026
    Packages

    syft, tigera-operator-fips, kaniko, kaniko

    Summary

    Security fix for GHSA-xhf5-7wjv-pqxp applied in: syft 1.43.0-r1, tigera-operator-fips 1.40.13-r1, kaniko 1.24.0-r2

    Published
    30 Oct 2026
    Packages

    syft, tigera-operator-fips, kaniko, kaniko

    Summary

    Security fix for GHSA-jpcc-p29g-p8mq applied in: syft 1.43.0-r1, tigera-operator-fips 1.40.13-r1, kaniko 1.24.0-r2

    Published
    30 Oct 2026