GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: volsync-fips, blob-csi-fips, volsync, capslock, rancher-machine, velero-plugin-for-microsoft-azure-fips, monstache, cluster-api-gcp-controller-fips, vendir, packer-fips, seaweedfs-operator-fips, vt-cli, podinfo, kustomize, ferretdb, seaweedfs-operator, aws-sigv4-prox...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-csi, blob-csi-fips, volsync, capslock, rancher-machine, velero-plugin-for-microsoft-azure-fips, monstache, cluster-api-gcp-controller-fips, vendir, packer-fips, seaweedfs-operator-fips, vt-cli, podinfo, kustomize, ferretdb, seaweedfs-operator,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: volsync-fips, velero-plugin-for-csi, blob-csi-fips, volsync, capslock, rancher-machine, velero-plugin-for-microsoft-azure-fips, monstache, cluster-api-gcp-controller-fips, vendir, packer-fips, seaweedfs-operator-fips, vt-cli, podinfo, kustomize, ferretdb,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: volsync-fips, blob-csi-fips, volsync, capslock, rancher-machine, velero-plugin-for-microsoft-azure-fips, monstache, cluster-api-gcp-controller-fips, vendir, packer-fips, seaweedfs-operator-fips, vt-cli, podinfo, kustomize, ferretdb, seaweedfs-operator, aws-sigv4-prox...

EUVD-2019-1730

Malware in sbrugna...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: pluto, zot, helm-mapkubeapis, envoy-gateway, zarf, k8sgpt, k9s, eksctl, flux-source-controller, helm-operator, kargo, cert-manager-cmctl, k8ssandra-client, istio, linkerd2, cerbos, cluster-api-helm-controller, nova, headlamp, cilium-cli, chartmuseum, trivy,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: pluto, zot, helm-mapkubeapis, envoy-gateway, zarf, k8sgpt, k9s, eksctl, flux-source-controller, helm-operator, kargo, cert-manager-cmctl, k8ssandra-client, istio, linkerd2, cerbos, cluster-api-helm-controller, nova, headlamp, cilium-cli, chartmuseum, trivy,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, restic, velero-plugin-for-microsoft-azure, zarf, prometheus, distribution, flux-source-controller, k3s, crossplane-provider-azure, oauth2-proxy, tempo, thanos, crossplane, bank-vaults, kine, kubernetes,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: neuvector-scanner, buildkitd, newrelic-infrastructure-agent, zot, dagger, envoy-gateway, kubevela, zarf, k8sgpt, opa, eksctl, flux-source-controller, syft, helm-operator, docker-cli-buildx, grype, kargo, k3s, docker, cert-manager-cmctl, k8ssandra-client, melange,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: neuvector-scanner, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, flannel-cni-plugin, vault-benchmark, timoni, stakater-reloader, flux-source-controller, nsc, aws-efs-csi-driver, tempo, gobump, kaniko, k8s-device-plugin, mods, lazydocker, aactl, gosu,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, grafana-operator, kubernetes-ingress-defaultbackend, spegel, docker-credential-gcr, dynamic-localpv-provisioner-fips, cert-manager-webhook-pdns-fips, ghaudit, capslock, chainctl, prometheus-alertmanager-fips, kpt, nats-server, dgraph,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: eksctl, trivy, helm-operator, kubevela, kots, chartmuseum, kubescape, flux-source-controller, up, helm-push, zarf, zot, cilium-cli, flux-helm-controller, k9s, k8sgpt...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: kots, zot, up, cilium-cli, chartmuseum, kubescape, kubevela, trivy, zarf, helm-push, k8sgpt, k9s, flux-helm-controller, eksctl, flux-source-controller, helm-operator...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: eksctl, trivy, helm-operator, kubevela, kots, chartmuseum, kubescape, flux-source-controller, up, helm-push, zarf, zot, cilium-cli, flux-helm-controller, k9s, k8sgpt...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: tekton-chains, aactl, scorecard, k3d, spire-server-fips, kubescape, falcoctl-fips, chartmuseum, ctop, k3s, paranoia, slsa-verifier, rancher-agent, kpt, skaffold, up, bom...

SUSE CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

Path traversal

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...