cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, trivy, rancher-fleet, pluto, helm-push, rancher-helm, zarf, cilium-cli, chart-testing, kargo, linkerd2, cert-manager-cmctl, k8sgpt, k9s, envoy-gateway, flux-helm-controller, cluster-api-helm-controller, flux-source-controller, eksctl, zot, cerbos,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: teleport, external-secrets-operator, argo-cd, gitaly, cerbos, rclone, kyverno, scorecard, syft, terragrunt, rancher-fleet...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: trivy, src-fingerprint, pulumi, dagger, melange, gitea, rancher-fleet, bom, trivy-operator, nfpm, teleport, argo-events, pulumi-kubernetes-operator, gptscript, apko, pulumi-language-java, scorecard, syft, trufflehog, zarf, pulumi-language-yaml,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: teleport, external-secrets-operator, argo-cd, gitaly, cerbos, rclone, kyverno, scorecard, syft, terragrunt, rancher-fleet, telegraf, flux...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubecolor, lazydocker, trivy, k3s, portieris, clickhouse-operator, azure-service-operator, kubernetes-csi-driver-nfs, falcoctl, ratify, src, argo-events, rclone, tkn, docker-machine-driver-harvester, harbor-cli, kpt, kor, kubernetes-dashboard-api, cilium-cli,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: pinact, docker, helm, k3s, pulumi, caddy, melange, glab, grafana-operator, k8s-device-plugin, karpenter, mattermost, dataplaneapi, rekor, src, buildah, apko, scorecard, zarf, pulumi-language-yaml, redka, grype, libnvidia-container, cilium-cli, flux, falco-no-driver,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: skopeo, prometheus, syft-fips, rancher-webhook, db-operator, kubernetes-csi-livenessprobe, rekor, vitess, crossplane-provider-aws-cloudformation, gotrue-fips, crossplane-provider-aws-sesv2, jobset-fips, amazon-eks-ami-fips, coredns-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: skopeo, prometheus, syft-fips, rancher-webhook, db-operator, kubernetes-csi-livenessprobe, rekor, vitess, crossplane-provider-aws-cloudformation, gotrue-fips, crossplane-provider-aws-sesv2, jobset-fips, amazon-eks-ami-fips, coredns-fips,...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: teleport, external-secrets-operator, argo-cd, gitaly, cerbos, rclone, kyverno, scorecard, syft, terragrunt, rancher-fleet...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: teleport, external-secrets-operator, argo-cd, gitaly, cerbos, rclone, kyverno, scorecard, syft, terragrunt, rancher-fleet...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: syft-fips, terragrunt-fips, skaffold-fips, cerbos, telegraf, terragrunt, rancher-fleet, nemo, syft, gitaly, packer-fips, chainloop-cli, gitlab-rails-ce, grafana-fips, teleport, upwind-agent, external-secrets-operator, rclone, grafana, argo-cd-fips, amazon-ssm-agent,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: syft-fips, terragrunt-fips, skaffold-fips, cerbos, telegraf, terragrunt, rancher-fleet, nemo, syft, gitaly, packer-fips, chainloop-cli, gitlab-rails-ce, grafana-fips, teleport, upwind-agent, external-secrets-operator, rclone, grafana, argo-cd-fips, amazon-ssm-agent,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: nfpm, syft-fips, google-osconfig-agent, argo-events, jfrog-cli, kargo, nemo, syft, packer-fips, amazon-ssm-agent-fips, osv-scanner, grafana-alloy, external-secrets-operator, pulumi-language-yaml, grype-fips, zot, coder, src-fingerprint, argo-cd, trivy, dagger, xeol,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: spire-server-fips, commercial-chainloop-backend, gitness, juicefs, pgtimetable, bento-fips, gotrue-fips, migrate, kine, sftpgo-plugin-eventstore, grafana-alloy, opentelemetry-collector-contrib-fips, harbor, splunk-otel-collector, pgwatch, sftpgo, gitlab-kas,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k8ssandra-client, trivy, helm, nova, harbor, rancher-fleet, pluto, trivy-operator, tigera-operator, helm-push, helm-set-status, zarf, cilium-cli, flux, chart-testing, kube-arangodb, kuma, linkerd2, cert-manager-cmctl, k9s, envoy-gateway, helm-mapkubeapis,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, trivy, helm, nova, harbor, rancher-fleet, pluto, trivy-operator, tigera-operator, helm-push, helm-set-status, zarf, cilium-cli, flux, chart-testing, kube-arangodb, kuma, linkerd2, cert-manager-cmctl, k9s, envoy-gateway, helm-mapkubeapis,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chaos-mesh, kots, envoy-gateway-fips, kuma, kubescape-server-fips, jfrog-cli, helm-diff-fips, cloudbeat, envoy-gateway, kubescape-server, cerbos, k8ssandra-client, helm, consul-k8s-fips, linkerd2-fips, gitlab-operator, rancher-fleet, tigera-operator-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: argo-rollouts, k8ssandra-client, trivy, timoni, falcoctl, crossplane-provider-azure-storage, x509-certificate-exporter, argo-events, percona-server-mongodb-operator, mods, kpt, kor, certificate-transparency, nri-haproxy, grafana-rollout-operator, contour, kubewatch,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: karpenter-fips, prometheus, commercial-chainloop-backend, k8ssandra-client, coredns-fips, eksctl, neuvector-scanner-fips, gatekeeper-fips, gitlab-kas, mattermost, flux-helm-controller-fips, tkn, tofu-controller-fips, trivy, flux-fips, ingress-nginx-controller-fips,...