37 matches found
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: beats-fips, cloud-provider-azure-fips, image-factory, metallb, ceph-csi-operator, kgateway-fips, gatekeeper, kube-rbac-proxy-fips, opentelemetry-operator, cluster-api-fips, spicedb-operator-fips, calico, chainloop-control-plane, k8ssandra-client,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: snyk-cli, gomplate, wal-g, apko, cluster-api-azure-controller, skaffold, crossplane-provider-aws-dynamodb, docker-machine-driver-linode, pulumi-language-dotnet, falcoctl, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, kots,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: snyk-cli, gomplate, wal-g, apko, cluster-api-azure-controller, skaffold, pulumi-language-dotnet, falcoctl, kots, kine, ksops, act, mattermost, docker-machine-driver-harvester, rancher, syft, fscrypt, external-dns, crossplane-provider-family-azure,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: snyk-cli, gomplate, wal-g, apko, cluster-api-azure-controller, skaffold, crossplane-provider-aws-dynamodb, docker-machine-driver-linode, pulumi-language-dotnet, falcoctl, crossplane-provider-aws-s3, crossplane-provider-aws-memorydb, kots,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: volume-modifier-for-k8s, pluto, victoriametrics-cluster, mountpoint-s3-csi-driver, oras, local-path-provisioner, apko, github-mcp-server, dbmate, omnibump, temporal, supercronic, nodetaint, dgraph, nfs-subdir-external-provisioner, nova, gh, dkron, grafana-operator,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: snyk-cli, terraform-provider-pagerduty, wal-g, migrate, rancher-helm, apko, vault-env, opa-envoy, grafana-agent-operator, docker-machine-driver-linode, kafka-proxy, temporal, falcoctl, coredns, dgraph, kots, neuvector-scanner, dapr, grafana, grpc-health-probe,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: snyk-cli, terraform-provider-pagerduty, wal-g, migrate, rancher-helm, apko, vault-env, opa-envoy, grafana-agent-operator, docker-machine-driver-linode, kafka-proxy, temporal, falcoctl, coredns, dgraph, kots, neuvector-scanner, dapr, grafana, grpc-health-probe,...
CVE-2026-33252 vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, glab, jaeger, opencost, osv-scanner...
GHSA-Q382-VC8Q-7JHJ vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, glab, jaeger, opencost, osv-scanner...
GHSA-89XV-2J6F-QHC8 vulnerabilities
Vulnerabilities for packages: datadog-agent, ferretdb, glab, jaeger, opencost, osv-scanner...
GHSA-Q382-VC8Q-7JHJ vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, flux-operator, jaeger, opencost-fips, datadog-agent, datadog-agent-fips, jaeger-fips, glab, livekit-cli, osv-scanner, ferretdb, gitlab-workhorse-ce, opencost, flux-operator-fips...
CVE-2026-33252 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, flux-operator, jaeger, opencost-fips, datadog-agent, datadog-agent-fips, jaeger-fips, glab, livekit-cli, osv-scanner, ferretdb, gitlab-workhorse-ce, opencost, flux-operator-fips...
GHSA-89XV-2J6F-QHC8 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, flux-operator, jaeger, opencost-fips, datadog-agent, datadog-agent-fips, jaeger-fips, glab, livekit-cli, osv-scanner, ferretdb, gitlab-workhorse-ce, opencost, flux-operator-fips...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, flux-operator, jaeger, opencost-fips, datadog-agent, datadog-agent-fips, github-mcp-server, jaeger-fips, gptscript, osv-scanner, ferretdb, gitlab-workhorse-ce, opencost, flux-operator-fips...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, flux-operator, jaeger, opencost-fips, datadog-agent, datadog-agent-fips, github-mcp-server, jaeger-fips, gptscript, osv-scanner, ferretdb, gitlab-workhorse-ce, opencost, flux-operator-fips...
SUSE CVE-2026-23990
The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...
GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator
Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...
GHSA-4XH5-JCJ2-CH8Q vulnerabilities
Vulnerabilities for packages: flux-operator...