cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet, k8ssandra-client, zot, k8sgpt, helm-operator, zarf, flux-source-controller, rancher-helm, eksctl, cert-manager-cmctl, trivy, kargo, linkerd2, helm-push, flux-helm-controller, k9s, cluster-api-helm-controller, pluto, helm-docs, tw, istio, chartmuseum,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: teleport, rancher-fleet, gitsign, gptscript, pulumi-language-java, trivy-operator, chezmoi, argo-workflows, zot, scorecard, witness, kaniko, zarf, flux-source-controller, kubevela, crossplane, flux-image-automation-controller, trivy, bom, src-fingerprint,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: teleport, rancher-fleet, rclone, argo-cd, syft, telegraf, terragrunt, kyverno, cerbos, flux, scorecard, gitaly...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: teleport, rancher-fleet, rclone, argo-cd, syft, terragrunt, kyverno, cerbos, scorecard, gitaly...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, kuberlr, gcsfuse, kor, swagger, zot, azure-service-operator, k8sgpt, cluster-api-provider-vsphere, nri-redis, kubernetes-dashboard, aactl, libnvidia-container, prometheus-operator, caddy, grafana-alloy, nodetaint, gobuster, kpt,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kine, karpenter, zarf, kubernetes, src, undock, buildkitd, kubernetes-dashboard, kube-fluentd-operator, grafana-operator, rekor, docker-cli-buildx, pinact, libnvidia-container, vexctl, timestamp-authority, prometheus-operator, caddy, glab, grafana-alloy, helm, grype,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: gcsfuse, tailscale, cloudprober, crossplane-provider-azure-managedidentity, authentik, beats, amazon-cloudwatch-agent-fips, falcosidekick-fips, spicedb-fips, cloud-provider-azure, cluster-api-helm-controller, crossplane-provider-aws-elasticsearch-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: gcsfuse, tailscale, cloudprober, crossplane-provider-azure-managedidentity, authentik, beats, amazon-cloudwatch-agent-fips, falcosidekick-fips, spicedb-fips, cloud-provider-azure, cluster-api-helm-controller, crossplane-provider-aws-elasticsearch-fips,...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: teleport, rancher-fleet, rclone, argo-cd, syft, terragrunt, kyverno, cerbos, scorecard, gitaly...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: teleport, rancher-fleet, rclone, argo-cd, syft, terragrunt, kyverno, cerbos, scorecard, gitaly...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: cerbos-fips, skaffold-fips, argo-cd, rclone-fips, external-secrets-operator-fips, grafana-fips, amazon-ssm-agent, packer-fips, gitlab-rails-ce-fips, grafana, seaweedfs-rocksdb, cerbos, terragrunt, upwind-agent, telegraf, terragrunt-fips, rclone, syft, nemo,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: cerbos-fips, skaffold-fips, argo-cd, rclone-fips, external-secrets-operator-fips, grafana-fips, amazon-ssm-agent, packer-fips, gitlab-rails-ce-fips, grafana, seaweedfs-rocksdb, cerbos, terragrunt, upwind-agent, telegraf, terragrunt-fips, rclone, syft, nemo,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: act, cerbos-fips, chainctl, google-osconfig-agent, argo-cd, kubevela, wolfictl, grafana, guac, coder-fips, skaffold, witness, redpanda-console, k9s, terragrunt-fips, argocd-image-updater, nemo, packer, trivy-operator, src-fingerprint-fips, rancher-fleet-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: pgtimetable-fips, cloudnative-pg-fips, cloudprober, authentik, falcosidekick-fips, spicedb-fips, harbor-fips, chainloop-control-plane-fips, kubeflow-pipelines, temporal-server, seaweedfs, step-ca, grafana, amass, gitlab-cng-fips, splunk-otel-collector-fips,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: kube-arangodb, rancher-fleet, trivy-operator, helm-mapkubeapis, k8ssandra-client, zot, k8sgpt, helm-operator, zarf, flux-source-controller, harbor, eksctl, cert-manager-cmctl, trivy, helm, nova, linkerd2, helm-push, consul-k8s, kuma, k9s, cluster-api-helm-controller,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kube-arangodb, rancher-fleet, trivy-operator, helm-mapkubeapis, k8ssandra-client, zot, k8sgpt, helm-operator, zarf, flux-source-controller, harbor, eksctl, cert-manager-cmctl, trivy, helm, nova, linkerd2, helm-push, consul-k8s, kuma, k9s, cluster-api-helm-controller,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cerbos-fips, consul-k8s-fips, chart-testing-fips, flux-source-controller, nova-fips, tigera-operator, linkerd2, cert-manager-cmctl, helm-diff, chartmuseum, gitlab-operator, harbor-fips, tw, cluster-api-helm-controller, trivy-operator-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: gcsfuse, docker-credential-ecr-login, karpenter, cluster-api-provider-vsphere, aactl, multus-cni, flux-image-automation-controller, kube-logging-operator-custom-runner, caddy, nodetaint, syft, lvm-driver, controller-gen, gitlab-pages, terraform-provider-azuread,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: karpenter, beats, aws-flb-kinesis-fips, cloud-provider-azure, minio-fips, oras, vault-env, opentofu, prometheus-podman-exporter, caddy, spegel-fips, buildah, vendir-fips, licenseclassifier, rke2-runtime-fips, kind, opentofu-fips, kubernetes, falco-no-driver, kbld-fip...