GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, nuclei, osv-scanner, act, gitlab-runner, steampipe, scorecard, guac, pulumi-language-yaml, nfpm, teleport, flux, src-fingerprint, crossplane, wolfictl, grype, kubescape, grafana-alloy, goreleaser, kaniko, skaffold, dagger,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, nuclei, osv-scanner, act, gitlab-runner, steampipe, scorecard, guac, pulumi-language-yaml, nfpm, teleport, flux, src-fingerprint, crossplane, wolfictl, grype, kubescape, grafana-alloy, goreleaser, kaniko, skaffold, dagger,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, nuclei, osv-scanner, act, gitlab-runner, steampipe, scorecard, guac, pulumi-language-yaml, nfpm, teleport, flux, src-fingerprint, crossplane, wolfictl, grype, kubescape, grafana-alloy, goreleaser, kaniko, skaffold, dagger,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, nuclei, osv-scanner, act, gitlab-runner, steampipe, scorecard, guac, pulumi-language-yaml, nfpm, teleport, flux, src-fingerprint, crossplane, wolfictl, grype, kubescape, grafana-alloy, goreleaser, kaniko, skaffold, dagger,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubevela, nuclei, osv-scanner, flux-source-controller, act, gitlab-runner, steampipe, scorecard, guac, pulumi-language-yaml, nfpm, teleport, flux, src-fingerprint, crossplane, wolfictl, grype, kubescape, grafana-alloy, goreleaser,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: falcoctl, flux-source-controller, gitlab-runner, guac, teleport, ratify, kyverno-notation-aws, docker-cli-buildx, buildkitd, crossplane, kubescape, tflint, goreleaser, skaffold, dagger, docker-compose, vexctl, kyverno, zarf, slsa-verifier, docker, spire-server,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: cloudbeat, image-factory, zarf-fips, ratify-fips, kubescape, kyverno, docker-compose, cosign-fips, gitlab-runner, slsa-verifier, spire-server-fips, spire-server, kyverno-policy-reporter-plugins-kyverno, trivy-operator-fips, goreleaser, crossplane-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, k8ssandra-client, azuredisk-csi, local-static-provisioner, fuse-overlayfs-snapshotter, flux, govulncheck, crossplane-provider-aws-rds, haproxy-ingress, datadog-agent, kubernetes-event-exporter, newrelic-infra-operator, terraform, minio, tfsec,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, grafana-alloy-fips, grafana-alloy, kyverno, gitaly-fips, nuclei, kubevela, kubevela-fips, argo-workflows-fips, gitlab-runner, apko, grype, grype-fips, cerbos-fips, gitea-fips, trivy-operator-fips...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: net-kourier-fips, kubernetes-csi-driver-nfs-fips, crossplane-provider-kubernetes, crossplane-provider-aws-cloudfront-fips, prometheus-stackdriver-exporter, db-operator-fips, consul-k8s, dataplaneapi-fips, slsa-verifier, k8ssandra-client-fips,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: net-kourier-fips, kubernetes-csi-driver-nfs-fips, crossplane-provider-kubernetes, crossplane-provider-aws-cloudfront-fips, prometheus-stackdriver-exporter, db-operator-fips, consul-k8s, dataplaneapi-fips, slsa-verifier, k8ssandra-client-fips,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-source-controller, teleport, ratify, kyverno-notation-aws, docker-cli-buildx, sigstore-scaffolding, buildkitd, crossplane, kubescape, tflint, goreleaser, skaffold, vexctl, witness, kyverno, zarf, slsa-verifier, docker, spire-server, policy-controller,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-source-controller, teleport, ratify, kyverno-notation-aws, docker-cli-buildx, sigstore-scaffolding, buildkitd, crossplane, kubescape, tflint, goreleaser, skaffold, vexctl, witness, kyverno, zarf, slsa-verifier, docker, spire-server, policy-controller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, cloud-provider-azure, authservice, nuclei, db-operator, vault-env, k8ssandra-client, juicefs-csi-driver, fuse-overlayfs-snapshotter, sftpgo-plugin-eventstore, lvm-driver, azure-service-operator, kserve-rest-proxy, flux,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, rancher-loglevel, k8ssandra-client, local-static-provisioner, fuse-overlayfs-snapshotter, flux, govulncheck, x509-certificate-exporter, haproxy-ingress, datadog-agent, kubernetes-event-exporter, newrelic-infra-operator, terraform,...