73 matches found
GHSA-7JXH-36Q5-GCQV vulnerabilities
Vulnerabilities for packages: kubescape-operator, rancher-agent, helm-set-status, tigera-operator, datadog-agent, newrelic-infrastructure-agent, dagger, nerdctl, cluster-api-helm-controller, kubescape, kubevela, helm-mapkubeapis, scorecard, headlamp, fuse-overlayfs-snapshotter, zarf, eksctl, syft...
CVE-2026-53495 vulnerabilities
Vulnerabilities for packages: kubescape-operator, rancher-agent, helm-set-status, tigera-operator, datadog-agent, newrelic-infrastructure-agent, dagger, nerdctl, cluster-api-helm-controller, kubescape, kubevela, helm-mapkubeapis, scorecard, headlamp, fuse-overlayfs-snapshotter, zarf, eksctl, syft...
CVE-2026-61712
A flaw was found in BuildKit. A remote attacker could provide a malicious base image or build with oversized /etc/passwd and /etc/group files. When BuildKit attempts to resolve usernames or group identifiers from these files, it reads them without an upper bound, leading to excessive memory...
GHSA-72X6-4J93-7W86 BuildKit has a possible runtime DoS via unbounded group parsing
Impact Maliciously crafted base image or build can cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory OOM kill of the buildkitd process. Patches Issue is fixed in BuildKit v0.31.1+ Workarounds Use trusted build...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: kubevela, kube-oidc-proxy, rancher-webhook, prometheus-adapter, k3s, rancher-webhook-fips, up, kubernetes, metrics-server-fips, buildkitd, kubernetes-fips, caddy...
GO-2024-2492 vulnerabilities
Vulnerabilities for packages: scorecard, kubescape, zot, guac, docker, conftest, conftest-fips, trivy, skaffold, kaniko, buildkitd...
GO-2024-2494 vulnerabilities
Vulnerabilities for packages: scorecard, kubescape, zot, guac, docker, conftest, conftest-fips, trivy, skaffold, kaniko, buildkitd...
GO-2024-2497 vulnerabilities
Vulnerabilities for packages: scorecard, kubescape, zot, guac, docker, conftest, conftest-fips, trivy, skaffold, kaniko, buildkitd...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: k9s, grype, skopeo, zot, kubescape, cadvisor, k3s, zarf, skaffold, kaniko, buildkitd, wolfictl, runc, kots, docker, trivy, podman, syft, ctop, k3d, kubernetes, newrelic-infrastructure-agent, nerdctl...
GO-2024-2493 vulnerabilities
Vulnerabilities for packages: scorecard, kubescape, zot, guac, docker, conftest, conftest-fips, trivy, skaffold, kaniko, buildkitd...
GO-2025-4108 vulnerabilities
Vulnerabilities for packages: k9s, grype, headlamp-fips, kube-arangodb-fips, gitlab-rails-ce, nerdctl-fips, xeol-fips, apm-server, apm-server-fips, rancher, zot, chainctl, falco-no-driver, helm, beats, fuse-overlayfs-snapshotter, steampipe, zarf, buildkitd, consul-k8s-fips, kargo, headlamp,...
GO-2026-5758 vulnerabilities
Vulnerabilities for packages: k9s, grype, headlamp-fips, kube-mgmt, kube-arangodb-fips, gitlab-rails-ce, linkerd2-fips, crossplane, spegel-fips, xeol-fips, rancher, zot, chainctl, falco-no-driver, helm, fuse-overlayfs-snapshotter, steampipe, buildkitd-fips, zarf, buildkitd, consul-k8s-fips, docke...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: k3d, kubernetes, newrelic-infrastructure-agent, nerdctl, kubescape, zarf, syft, trivy, runc, wolfictl, grype, kots, docker, k3s, skaffold, k9s, zot, buildkitd, podman, skopeo, cadvisor, ctop, kaniko...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: gitness, k3d, newrelic-infrastructure-agent, kubescape, kubevela, flux-helm-controller, fuse-overlayfs-snapshotter, cilium-cli, eksctl, trivy, grype, kots, flux-source-controller, melange, skaffold, zot, buildkitd, helm, helm-push, ctop, kaniko, k8sgpt, up...
GO-2024-2494 vulnerabilities
Vulnerabilities for packages: conftest, skaffold, kaniko, guac, trivy, kubescape, zot, buildkitd, scorecard, docker...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: k3s, caddy, kubernetes, buildkitd, prometheus-adapter, kubevela, up...
GO-2024-2497 vulnerabilities
Vulnerabilities for packages: conftest, skaffold, kaniko, guac, trivy, kubescape, zot, buildkitd, scorecard, docker...
GO-2026-4377 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, falcoctl, ko, kubescape, neuvector-sigstore-interface, tflint, teleport, cosign, gitsign, tkn, zarf, trivy, flux-source-controller, vexctl, docker, skaffold, tekton-chains, sigstore-scaffolding, zot, buildkitd, gh, policy-controller, witness,...
GO-2023-2331 vulnerabilities
Vulnerabilities for packages: k3s, kubernetes, metrics-server, temporal-server, kubescape, temporal, buildkitd, kubernetes-csi-external-resizer, kubevela, kine, cri-tools, volume-modifier-for-k8s, envoy-ratelimit, docker-compose...