Vulnerability Database

CLEANSTART-2026-AZ82176

CleanStart/cri-tools

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit 23 hours ago

Fix available
Severity - 5.3 (Medium)

CLEANSTART-2026-MD34208

CleanStart/buildkitd

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit yesterday

Fix available
Severity - 5.3 (Medium)

OESA-2026-4068

openEuler:24.03-LTS-SP4/git-lfs

git-lfs security update 25 Sep

Fix available
Severity - 10.0 (Critical)

OESA-2026-3879

openEuler:24.03-LTS-SP1/git-lfs

git-lfs security update 20 Sep

Fix available
Severity - 10.0 (Critical)

OESA-2026-3880

openEuler:24.03-LTS-SP3/git-lfs

git-lfs security update 20 Sep

Fix available
Severity - 10.0 (Critical)

CLEANSTART-2026-NZ83550

CleanStart/apache-nifi
CleanStart/argo-cd
CleanStart/argo-cd-fips
CleanStart/cert-manager-cmctl-fips
CleanStart/cert-manager-fips
... 46 more

Security fix for CVE-2025-58186 applied in: apache-nifi 2.10.0-r4, argo-cd 2.14.20-r0, argo-cd-fips 2.13.9-r3, argo-cd-fips 2.14.20-r0, argo-cd-fips 3.1.9-r0, cert-manager-cmctl-fips 2.4.0-r1, cert-manager-fips 1.18.2-r0, cert-manager-fips 1.19.1-r0, cert-manager-webhook-pdns-fips 2.2.0-r0, chartmuseum-fips 0.15.0-r4, chartmuseum-fips 0.16.3-r3, cni-plugin-flannel 1.6.0-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, dex-fips 2.41.1-r4, dex-fips 2.42.1-r4, dex-fips 2.43.1-r4, druid-exporter-fips 0.11-r2, eck-operator-fips 3.2.0-r0, external-dns-fips 0.20.0-r0, flux-notification-controller-fips 1.5.0-r0, git-lfs-fips 3.7.0-r0, go-discover-fips 0_git20250325-r0, go-fips-1.24 1.24.9-r0, go-fips-1.25 1.25.1-r0, harbor-registry 3.0.0.1-r2, harbor-registry-fips 3.0.0-r1, helm 3.19.0-r0, helm-fips 3.19.0-r0, helm-operator 1.41.1-r0, k8ssandra-client-fips 0.7.0-r2, k8ssandra-client-fips 0.7.0-r4, k8ssandra-operator 1.26.0-r0, kube-rbac-proxy-fips 0.19.1-r1, kube-state-metrics 2.16.0-r3, kubernetes 1.34.1-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kured 1.20.0-r0, kustomize-fips 5.7.1-r0, kyverno 1.15.2-r0, logstash-exporter 1.9.1-r0, metallb 0.14.9-r0, metallb 0.15.2-r0, minio-operator 7.1.1-r0, modelmesh-runtime-adapter 0.12.0-r0, modelmesh-runtime-adapter 0.12.0-r1, nvidia-container-toolkit 1.19.0-r0, opensearch-k8s-operator-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0, spark-operator 2.2.1-r0, stakater-reloader 1.4.8-r0, step 0.28.7-r1, step-cli 0.28.7-r1, step-issuer 0.9.9-r1, step-issuer-fips 0.9.11-r1, step-issuer-fips 0.9.9-r1, vault-k8s 1.7.0-r0, velero 1.17.0-r0, velero-plugin-for-aws 1.13.0-r0, velero-plugin-for-csi 0.7.1-r0, wave 0.10.0-r0 18 Sep

Fix available

CGA-2c9w-qr8r-444j

Chainguard/katib-suggestion-goptuna-compat
Wolfi/katib-suggestion-goptuna-compat

See record for full details 15 Sep

No fix available

CGA-38jh-c34f-jh64

Chainguard/katib-suggestion-hyperopt
Wolfi/katib-suggestion-hyperopt

See record for full details 15 Sep

Fix available

MINI-whm3-8h8x-9g95

MinimOS/google-cloud-sdk-core

See record for full details 02 Sep

Fix available

ROOT-OS-DEBIAN-13-CVE-2025-58186

Root:Debian:13/golang-1.24
Root:Debian:13/rootio-golang-1.24

CVE-2025-58186 in golang-1.24 - Patched by Root 24 Aug

Fix available

MINI-3h8f-247v-rvmc

MinimOS/signoz-otel-collector

See record for full details 03 Aug

Fix available

openSUSE-SU-2026:21483-1

openSUSE:Leap 16.0/govulncheck-vulndb

Security update for govulncheck-vulndb 30 Jul

Fix available

CGA-x4gr-xr47-5mxp

Chainguard/katib-suggestion-optuna-enas
Wolfi/katib-suggestion-optuna-enas

See record for full details 13 Jul

Fix available

CGA-wf4v-gjhw-xp5p

Chainguard/katib-suggestion-hyperband
Wolfi/katib-suggestion-hyperband

See record for full details 13 Jul

Fix available

CGA-h569-q263-5xv3

Chainguard/katib-tfevent-metricscollector
Wolfi/katib-tfevent-metricscollector

See record for full details 13 Jul

Fix available

CGA-j3jc-74f2-fpgq

Chainguard/katib-suggestion-pbt-enas
Wolfi/katib-suggestion-pbt-enas

See record for full details 13 Jul

Fix available

Vulnerabilities