Open Source Vulnerabilities

tekton-chains-fips, fulcio

Security fix for GHSA-fcv2-xgw5-pqxf applied in: tekton-chains-fips 0.26.0-r1, fulcio 1.8.7-r2

bank-vaults, opentofu-fips, minio, openbao, velero, rabbitmq-messaging-topology-operator, temporal-server-fips, opentofu-fips, consul, thanos, traefik, fulcio

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

bank-vaults, opentofu-fips, openbao, velero, temporal-server-fips, opentofu-fips, consul, thanos, fulcio

Security fix for GHSA-78h2-9frx-2jm8 applied in: bank-vaults 1.32.1-r1, opentofu-fips 1.10.9-r4, openbao 2.5.4-r1, velero 1.16.2-r5, temporal-server-fips 1.31.1-r1, opentofu-fips 1.11.5-r3, consul 1.20.6-r0, thanos 0.41.0-r0, fulcio 1.8.7-r2

kubernetes-csi-external-snapshotter, bank-vaults, haproxy-ingress, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, kumactl, aws-network-policy-agent, smarter-device-manager, smarter-device-manager, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-5cv4-jp36-h3mw applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, haproxy-ingress 0.13.19-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, kumactl 2.14.0-r1, aws-network-policy-agent 1.3.5-r1, smarter-device-manager 1.20.11-r1, smarter-device-manager 1.20.11-r2, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

loki, loki, loki, loki, keda, knative-serving, knative-serving, velero, velero, prometheus, prometheus, temporal-server, temporal-server, temporal-server, temporal-server-fips, mongodb, mongodb, weaviate-fips, kubernetes-event-exporter, rancher-fleet-agent, thanos, thanos, prometheus, thanos, cadvisor, cadvisor, step-issuer

Security fix for GHSA-259r-337f-4rfw applied in: loki 3.7.1-r2, keda 2.20.2-r0, knative-serving 1.21.3-r0, velero 1.16.2-r15, velero 1.16.2-r8, prometheus 3.5.3-r12, prometheus 3.5.3-r8, temporal-server 1.30.6-r1, temporal-server 1.30.6-r2, temporal-server 1.30.8-r1, temporal-server-fips 1.31.4-r1, mongodb 8.1.3-r2, weaviate-fips 1.36.23-r2, kubernetes-event-exporter 1.4-r0, rancher-fleet-agent 0.13.16-r1, thanos 0.40.1-r3, thanos 0.41.0-r2, prometheus 3.5.3-r9, thanos 0.39.2-r4, cadvisor 0.55.1-r3, step-issuer 0.10.2-r3

bank-vaults, kubernetes-csi-external-snapshotter, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-qpw4-5x99-6vjp applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

bank-vaults, kubernetes-csi-external-snapshotter, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-9m57-25v3-79x9 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

cert-manager, kube-state-metrics, kyverno, rabbitmq-cluster-operator, rabbitmq-cluster-operator, kedacore-http-add-on, kubernetes-csi-external-resizer, kedacore-http-add-on, kyverno, yunikorn-k8shim, rabbitmq-messaging-topology-operator, tekton-chains, kube-state-metrics, kube-state-metrics, external-secrets-operator-fips, eks-distro-kube-scheduler, eks-distro-kube-scheduler, kube-rbac-proxy-fips, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, kubernetes, openbao, helm-operator, helm-operator, helm-operator, calico, fluent-operator, metallb, calico, kube-state-metrics, grafana-org-operator

Security fix for GHSA-gcjh-h69q-9w9g applied in: cert-manager 1.18.6-r4, kube-state-metrics 2.20.0-r0, kyverno 1.18.2-r1, rabbitmq-cluster-operator 2.20.1-r5, rabbitmq-cluster-operator 2.21.1-r2, kedacore-http-add-on 0.15.0-r0, kubernetes-csi-external-resizer 2.0.0-r2, kedacore-http-add-on 0.13.0-r0, kyverno 1.17.2-r2, yunikorn-k8shim 1.8.0-r1, rabbitmq-messaging-topology-operator 1.19.3-r2, tekton-chains 0.29.7-r1, kube-state-metrics 2.18.0-r7, kube-state-metrics 2.19.1-r1, external-secrets-operator-fips 2.7.0-r1, eks-distro-kube-scheduler 1.36.9-r1, kube-rbac-proxy-fips 0.22.0-r1, cluster-autoscaler 1.35.2-r1, cluster-autoscaler 1.36.1-r1, cluster-autoscaler 1.36.1-r6, cluster-autoscaler 1.36.1-r7, kubernetes 1.33.13-r0, openbao 2.6.3-r1, helm-operator 1.39.2-r1, helm-operator 1.42.3-r2, helm-operator 1.40.0-r1, calico 3.30.7-r6, fluent-operator 3.10.0-r0, metallb 0.16.0-r2, calico 3.32.1-r1, kube-state-metrics 2.16.0-r9, grafana-org-operator 1.13.0-r0

bank-vaults, kubernetes-csi-external-snapshotter, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-45gg-vh54-h5m9 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

argo-workflows, logstash-exporter-fips, logstash-exporter-fips, logstash-exporter-fips

Cancelling a query (e

python-3.14, python-3.14

bank-vaults, kubernetes-csi-external-snapshotter, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-78mq-xcr3-xm33 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

bank-vaults, kubernetes-csi-external-snapshotter, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-q4h4-gmj2-qvw2 applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

kubernetes-csi-external-snapshotter, bank-vaults, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-w879-237q-wc7r applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

kube-state-metrics, bank-vaults, grafana, minio, velero, thanos, fulcio, metrics-server, metrics-server

Security fix for GHSA-9h8m-3fm2-qjrq applied in: kube-state-metrics 2.18.0-r0, bank-vaults 1.32.1-r1, grafana 12.3.4-r0, minio 0.20250907.161309-r0, velero 1.16.2-r4, thanos 0.41.0-r0, fulcio 1.8.7-r2, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3

kubernetes-csi-external-snapshotter, bank-vaults, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-jppx-rxg9-jmrx applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

kube-state-metrics, opentelemetry-collector-contrib, bank-vaults, grafana, cluster-autoscaler-fips, minio, velero, velero, prometheus, temporal-server, thanos, prometheus, fulcio, metrics-server, metrics-server

OpenTelemetry-Go is the Go implementation of OpenTelemetry

rclone, dex, kubernetes-csi-external-snapshotter, kubernetes-csi-external-snapshotter, kubernetes-csi-external-snapshotter, rclone, rclone, rclone, haproxy-ingress, haproxy-ingress, velero, velero, velero, renovate, prometheus-alertmanager, argo-cd-fips, argo-cd-fips, argo-cd-fips, temporal-server-fips, prometheus, dex, cortex, runc, velero, velero, velero, velero, velero, thanos, dynatrace-operator, dynatrace-operator, dynatrace-operator, dynatrace-operator, etcd, velero-plugin-for-aws, velero-fips, velero-fips, velero-fips, kube-vip-fips, vault-k8s, velero, trust-manager, vault-k8s, logstash-exporter-fips, logstash-exporter-fips, logstash-exporter-fips

On Unix systems, opening a file in an os

kubernetes-csi-external-snapshotter, bank-vaults, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-89gr-r52h-f8rx applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

kubernetes-csi-external-snapshotter, bank-vaults, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-x527-x647-q7gg applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

kubernetes-csi-external-snapshotter, bank-vaults, yunikorn-k8shim, temporal-server-fips, ollama-fips, ollama-fips, flux-image-automation-controller, flux-image-automation-controller, kumactl, velero-fips, velero-fips, velero-fips, fulcio

Security fix for GHSA-rm3j-f69w-wqmq applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

minio, minio, cortex, cortex, thanos, metrics-server, metrics-server, metrics-server

Security fix for GHSA-8rm2-7qqf-34qm applied in: minio 0.20250907.161309-r3, minio 0.20250907.161309-r5, cortex 1.21.1-r2, cortex 1.21.1-r3, thanos 0.41.0-r0, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, metrics-server 0.8.1-r4

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

minio, minio, cortex, cortex, metrics-server, metrics-server, metrics-server

Security fix for GHSA-fw8g-cg8f-9j28 applied in: minio 0.20250907.161309-r3, minio 0.20250907.161309-r5, cortex 1.21.1-r2, cortex 1.21.1-r3, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, metrics-server 0.8.1-r4

minio, minio, cortex, cortex, thanos, metrics-server, metrics-server, metrics-server

Security fix for GHSA-wg65-39gg-5wfj applied in: minio 0.20250907.161309-r3, minio 0.20250907.161309-r5, cortex 1.21.1-r2, cortex 1.21.1-r3, thanos 0.41.0-r0, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, metrics-server 0.8.1-r4

loki, loki, loki, loki, minio, minio, keda, elastic-beats, cortex, cortex, thanos, thanos, metrics-server, metrics-server, metrics-server

Prometheus is an open-source monitoring system and time series database

loki, loki, loki, loki, minio, minio, keda, elastic-beats, cortex, cortex, thanos, thanos, thanos, metrics-server, metrics-server, metrics-server

Prometheus is an open-source monitoring system and time series database

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

dex, loki, loki, loki, loki, kubernetes-csi-external-snapshotter, bank-vaults, cluster-autoscaler-fips, velero, yunikorn-k8shim, prometheus-alertmanager, vault, vault, temporal-server, temporal-server, argo-rollouts-fips, opentofu, dex, etcd-fips, flux-image-automation-controller, flux-image-automation-controller, dynatrace-operator, dynatrace-operator, kubernetes-event-exporter, cluster-autoscaler, temporal-server, rancher-fleet-agent, tekton-pipelines-fips, secrets-store-csi-driver-provider-aws, step-kms-plugin, thanos, etcd, traefik, velero-plugin-for-aws, cloudnative-pg, opentelemetry-collector, velero-plugin-for-csi, velero-plugin-for-csi, velero-plugin-for-csi, cadvisor, cadvisor, kube-vip-fips, metrics-server, metrics-server, rqlite

Security fix for GHSA-hrxh-6v49-42gf applied in: dex 2.45.1-r5, loki 3.7.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, bank-vaults 1.32.1-r1, cluster-autoscaler-fips 1.33.6-r1, velero 1.16.2-r8, yunikorn-k8shim 1.8.0-r1, prometheus-alertmanager 0.32.0-r0, vault 1.19.5-r1, temporal-server 1.30.6-r1, temporal-server 1.30.6-r2, argo-rollouts-fips 1.9.1-r2, opentofu 1.12.7-r1, dex 2.42.1-r1, etcd-fips 3.6.13-r1, flux-image-automation-controller 1.2.1-r1, dynatrace-operator 1.10.1-r1, kubernetes-event-exporter 1.4-r0, cluster-autoscaler 1.35.2-r1, temporal-server 1.31.3-r1, rancher-fleet-agent 0.13.16-r1, tekton-pipelines-fips 1.14.0-r2, secrets-store-csi-driver-provider-aws 3.1.4-r0, step-kms-plugin 0.17.0-r0, thanos 0.39.2-r3, etcd 3.5.32-r1, traefik 3.6.25-r0, velero-plugin-for-aws 1.14.2-r1, cloudnative-pg 1.29.2-r1, opentelemetry-collector 0.154.0-r1, velero-plugin-for-csi 0.5.1-r4, velero-plugin-for-csi 0.4.3-r3, velero-plugin-for-csi 0.6.3-r3, cadvisor 0.57.0-r3, kube-vip-fips 1.2.1-r1, metrics-server 0.8.1-r2, metrics-server 0.8.1-r3, rqlite 9.4.5-r2

loki, loki, loki, loki, minio, minio, keda, elastic-beats, cortex, cortex, thanos, thanos, thanos, metrics-server, metrics-server, metrics-server

Prometheus is an open-source monitoring system and time series database

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

go-fips-1.26, go-fips-1.26, argo-workflows, argo-workflows, velero, vt-cli, go1.25, consul-k8s-fips, velero-plugin-for-aws, logstash-exporter-fips, logstash-exporter-fips

net/url package does not set a limit on the number of query parameters in a query

bank-vaults, grafana, rclone, velero, velero, opentofu, velero-plugin-for-aws, rqlite

Security fix for GHSA-xmrv-pmrh-hhx2 applied in: bank-vaults 1.32.1-r1, grafana 13.0.0-r0, rclone 1.72.1-r4, velero 1.16.2-r4, velero 1.16.2-r5, opentofu 1.12.7-r1, velero-plugin-for-aws 1.11.1-r3, rqlite 9.4.5-r5

nextcloud-server-35

deno, deno

deno, deno

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4

kayenta-2026.4