37 matches found
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: omni-fips, pulumi-kubernetes-operator, tetragon, cert-manager-istio-csr-fips, cluster-api-ipam-provider-in-cluster, kcp-fips, kube-oidc-proxy, beats, cluster-api-gcp-controller, kube-state-metrics-fips, keda, ocm-cli, cilium-fips, gitlab-kas-fips, flux-helm-controlle...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: argo-events, openbao, cloud-provider-aws, age, kubescape, sops, zot, pulumi-kubernetes-operator, chezmoi, rancher-machine, terraform-provider-azurerm, terraform-provider-tls, splunk-otel-collector, flux, nerdctl, go-discover, kargo, pulumi-language-java,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-iam, argo-events, openbao, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, kubescape, sops, zot, pulumi-kubernetes-operator, chezmoi, rancher-machine, terraform-provider-acme, terraform-provider-azurerm, terraform-provider-tls,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-iam, argo-events, openbao, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, kubescape, sops, zot, pulumi-kubernetes-operator, chezmoi, rancher-machine, terraform-provider-acme, terraform-provider-azurerm, terraform-provider-tls,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, dataplaneapi, victoriametrics, stakater-reloader, victoriametrics-cluster, go, goreleaser, mountpoint-s3-csi-driver, karpenter, dkron, flux-image-reflector-controller, flux, grafana-rollout-operator, omnibump, apko, oras, nova,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: bank-vaults, argo-events, openbao, rclone, vexctl, cloud-provider-aws, zot, azure-service-operator, kubescape, newrelic-infrastructure-agent, falco-exporter, grafana-agent-operator, rancher-machine, bento, terraform-provider-tls, redpanda, splunk-otel-collector,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: bank-vaults, argo-events, openbao, rclone, vexctl, cloud-provider-aws, zot, azure-service-operator, kubescape, newrelic-infrastructure-agent, falco-exporter, grafana-agent-operator, rancher-machine, bento, terraform-provider-tls, redpanda, splunk-otel-collector,...
CVE-2026-33252 vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, osv-scanner, glab, jaeger, opencost...
GHSA-Q382-VC8Q-7JHJ vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, osv-scanner, glab, jaeger, opencost...
GHSA-89XV-2J6F-QHC8 vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, osv-scanner, glab, jaeger, opencost...
GHSA-89XV-2J6F-QHC8 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, ferretdb, flux-operator-fips, opencost-fips, glab, datadog-agent-fips, jaeger, livekit-cli, opencost, flux-operator, datadog-agent, osv-scanner, jaeger-fips, gitlab-workhorse-ce-fips...
GHSA-Q382-VC8Q-7JHJ vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, ferretdb, flux-operator-fips, opencost-fips, glab, datadog-agent-fips, jaeger, livekit-cli, opencost, flux-operator, datadog-agent, osv-scanner, jaeger-fips, gitlab-workhorse-ce-fips...
CVE-2026-33252 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, ferretdb, flux-operator-fips, opencost-fips, glab, datadog-agent-fips, jaeger, livekit-cli, opencost, flux-operator, datadog-agent, osv-scanner, jaeger-fips, gitlab-workhorse-ce-fips...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, ferretdb, flux-operator-fips, opencost-fips, datadog-agent-fips, jaeger, github-mcp-server, opencost, flux-operator, datadog-agent, gptscript, osv-scanner, jaeger-fips, gitlab-workhorse-ce-fips...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, ferretdb, flux-operator-fips, opencost-fips, datadog-agent-fips, jaeger, github-mcp-server, opencost, flux-operator, datadog-agent, gptscript, osv-scanner, jaeger-fips, gitlab-workhorse-ce-fips...
SUSE CVE-2026-23990
The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...
GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator
Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...
GHSA-4XH5-JCJ2-CH8Q vulnerabilities
Vulnerabilities for packages: flux-operator...