GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: mockgen, aws-otel-collector, secrets-store-csi-driver-provider-aws, sbomqs, opensearch-k8s-operator, sbom-convert, sftpgo-plugin-auth, portieris, nri-rabbitmq, crossplane-provider-aws-cloudwatchlogs, spark-operator, wal-g, polaris, yunikorn-k8shim, nri-kafka,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: descheduler-fips, kyverno-policy-reporter-plugins-kyverno, hydra-fips, prometheus-alertmanager, thanos, grafana-beyla, aws-ebs-csi-driver-fips, terraform-fips, istio-fips, kubernetes-csi-external-health-monitor, cortex-fips, dkron-fips, cluster-autoscaler,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: goreleaser, trivy-operator, crossplane-provider-keycloak, crossplane-provider-aws-route53, crossplane, argocd-image-updater, sops, helm, gptscript, syft, gomplate, ratify, zarf, crossplane-provider-aws-cloudwatchlogs, scorecard, q, wal-g, aactl, gitlab-runner,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: goreleaser, trivy-operator, crossplane-provider-keycloak, crossplane-provider-aws-route53, crossplane, argocd-image-updater, sops, helm, gptscript, syft, gomplate, ratify, zarf, crossplane-provider-aws-cloudwatchlogs, scorecard, q, wal-g, aactl, gitlab-runner,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-policy-reporter-plugins-kyverno, omnictl-multiarch, crossplane-provider-aws-iam, cloudbeat, kyverno-fips, crossplane-provider-aws-elasticache-fips, cloudbeat-fips, docker-cli-buildx-fips, hydra-fips, xeol-fips, kubescape-server, tekton-pipelines-fips...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-policy-reporter-plugins-kyverno, omnictl-multiarch, crossplane-provider-aws-iam, cloudbeat, kyverno-fips, crossplane-provider-aws-elasticache-fips, cloudbeat-fips, docker-cli-buildx-fips, hydra-fips, xeol-fips, kubescape-server, tekton-pipelines-fips...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: descheduler-fips, gitsign, crossplane-provider-aws-iam, prometheus-mysqld-exporter, hydra-fips, nri-prometheus, prometheus-alertmanager, swagger, ytt-fips, docker-machine-driver-harvester, longhorn-share-manager-fips, sonobuoy-fips, thanos, kapp,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: descheduler-fips, gitsign, crossplane-provider-aws-iam, prometheus-mysqld-exporter, hydra-fips, nri-prometheus, prometheus-alertmanager, swagger, ytt-fips, docker-machine-driver-harvester, longhorn-share-manager-fips, sonobuoy-fips, thanos, kapp,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: descheduler-fips, gitsign, crossplane-provider-aws-iam, prometheus-mysqld-exporter, hydra-fips, nri-prometheus, prometheus-alertmanager, swagger, ytt-fips, docker-machine-driver-harvester, longhorn-share-manager-fips, sonobuoy-fips, thanos, kapp,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, argo-events, opentelemetry-collector-contrib, cluster-api-aws-controller, splunk-otel-collector, bento, sqlexporter, grafana-alloy, jitsucom-bulker...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, argo-events, opentelemetry-collector-contrib, cluster-api-aws-controller, splunk-otel-collector, bento, sqlexporter, grafana-alloy, jitsucom-bulker...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: sqlexporter, amazon-cloudwatch-agent-fips, grafana-alloy, telegraf, vault, dapr-fips, jitsucom-bulker, splunk-otel-collector, vault-fips, sqlexporter-fips, opentelemetry-collector-contrib, argo-events, dapr, splunk-otel-collector-fips, amazon-cloudwatch-agent, bento,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: sqlexporter, amazon-cloudwatch-agent-fips, grafana-alloy, telegraf, vault, dapr-fips, jitsucom-bulker, splunk-otel-collector, vault-fips, sqlexporter-fips, opentelemetry-collector-contrib, argo-events, dapr, splunk-otel-collector-fips, amazon-cloudwatch-agent, bento,...

EUVD-2013-5040

Malware in sbrugna...

EUVD-2013-5770

Malware in sbrugna...

EUVD-2024-20948

Malicious code in bioql PyPI...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: mockgen, aws-otel-collector, portieris, gptscript, kubernetes-csi-driver-nfs, ratify, envconsul, nri-rabbitmq, chartmuseum, spark-operator, wal-g, polaris, aactl, chart-testing, yunikorn-k8shim, dive, kubecolor, bom, kapp-controller, nri-nginx, guac, step-kms-plugin,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: mockgen, aws-otel-collector, portieris, gptscript, kubernetes-csi-driver-nfs, ratify, envconsul, nri-rabbitmq, chartmuseum, spark-operator, wal-g, polaris, aactl, chart-testing, yunikorn-k8shim, dive, kubecolor, bom, kapp-controller, nri-nginx, guac, step-kms-plugin,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: gcsfuse, linkerd2-cni-plugin, karpenter, cloud-provider-gcp-cloud-controller-manager, nats-server-config-reloader, nri-consul, swagger, mongo-tools, docker-machine-driver-harvester, kubernetes-dashboard-web, kapp, vault, fulcio, wal-g,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitsign, karpenter, prometheus-adapter, prometheus-node-exporter-fips, nvidia-nsight-compute-13.2, pvc-autoresizer, azurefile-csi-fips, sftpgo-plugin-geoipfilter, terraform-provider-time, bank-vaults, newrelic-nri-statsd, terraform-provider-sendgrid-fips, etcd-fips,...