CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: terragrunt, tfsec, opentofu, conftest, zarf, grype, zot, wolfictl, terraform, trivy-operator, steampipe, rancher-fleet, k9s, kots, trivy, tflint, syft, kubescape, xeol, snyk-cli...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: terragrunt, tfsec, opentofu, conftest, zarf, grype, zot, wolfictl, terraform, trivy-operator, steampipe, rancher-fleet, k9s, kots, trivy, tflint, syft, kubescape, xeol, snyk-cli...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: grype-db, xeol-fips, zarf, chainctl, grype, trivy, syft-fips, syft, xeol, tflint, tfsec, steampipe, wolfictl, k9s-fips, cloudbeat, rancher-fleet, kubescape, rancher-fleet-fips, cloudbeat-fips, k9s, conftest, terraform, trivy-operator-fips, opentofu-fips,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: grype-db, xeol-fips, zarf, chainctl, grype, trivy, syft-fips, syft, xeol, tflint, tfsec, steampipe, wolfictl, k9s-fips, cloudbeat, rancher-fleet, kubescape, rancher-fleet-fips, cloudbeat-fips, k9s, conftest, terraform, trivy-operator-fips, opentofu-fips,...

Malicious code in dependency-conftest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aaa3faf1923724759fdae15904fd1769602cd6b493cdffa30ca091cb19fa3a8 Any computer that has this package installed or running should be considered...

MAL-2025-4555 Malicious code in dependency-conftest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aaa3faf1923724759fdae15904fd1769602cd6b493cdffa30ca091cb19fa3a8 Any computer that has this package installed or running should be considered...

CVE-2025-46569 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, kyverno-notation-aws, tfsec, cosign, conftest, witness, kots, trivy...

GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, kyverno-notation-aws, tfsec, cosign, conftest, witness, kots, trivy...

CVE-2024-8260 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, k8sgpt, tfsec, cosign, zot, kots, snyk-cli, conftest, zarf, opa, kubescape...

OPENSUSE-SU-2024:14190-1 conftest-0.54.0-1.1 on GA media

These are all security issues fixed in the conftest-0.54.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: tflint, conftest-fips, snyk-cli, tfsec, k9s, conftest, terragrunt, wolfictl, kubescape, kots, terraform, grype, zarf, trivy, trivy-fips, zot...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: tflint, terragrunt, terraform, tfsec, zot, kots, snyk-cli, conftest, zarf, k9s, grype, kubescape, trivy, wolfictl...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: tflint, conftest-fips, snyk-cli, tfsec, k9s, conftest, terragrunt, wolfictl, kubescape, kots, terraform, grype, zarf, trivy, trivy-fips, zot...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: tigera-operator, prometheus-blackbox-exporter, sigstore-scaffolding-fips, vexctl, kubernetes-dashboard-metrics-scraper, neuvector-dbgen-fips, prometheus-pushgateway, prometheus-mysqld-exporter, kube-logging-operator, vt-cli, ytt, certificate-transparency,...

GHSA-Q64H-39HV-4CF7 vulnerabilities

Vulnerabilities for packages: tflint, conftest-fips, tfsec, k9s, conftest, terraform, kubescape, zarf, zot...

GHSA-Q64H-39HV-4CF7 vulnerabilities

Vulnerabilities for packages: tflint, terraform, tfsec, zot, conftest, zarf, k9s, kubescape...

CVE-2024-3817 vulnerabilities

Vulnerabilities for packages: tflint, conftest-fips, tfsec, k9s, conftest, terraform, kubescape, zarf, zot...

CVE-2024-3817 vulnerabilities

Vulnerabilities for packages: tflint, terraform, tfsec, zot, conftest, zarf, k9s, kubescape...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: buildkitd, melange, cadvisor, grype, trivy, loki, up, spire-server, syft, cilium-cli, wolfictl, buf, kubescape, kargo, dagger, docker-compose, cadvisor-fips, conftest, ko, spire-server-fips, zot, kaniko, ctop, conftest-fips, aactl, crossplane, tkn, prometheus...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: buildkitd, melange, cadvisor, grype, trivy, loki, up, spire-server, syft, cilium-cli, wolfictl, buf, kubescape, kargo, dagger, docker-compose, cadvisor-fips, conftest, ko, spire-server-fips, zot, kaniko, ctop, conftest-fips, aactl, crossplane, tkn, prometheus...