GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: skaffold, prometheus, flux-image-automation-controller, nerdctl, drone-fips, kubernetes-dashboard, external-secrets-operator-fips, argocd-image-updater-fips, backup-restore-operator, osv-scanner, opentofu, telegraf, seaweedfs-rocksdb, istio, commercial-expanso-edge,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, crossplane-provider-azure-storagecache, openbao, flux-image-automation-controller, nerdctl, peerdb-flow, crossplane-provider-azure-operationalinsights, prometheus-podman-exporter-fips, drone-fips, kubernetes-dashboard,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, flux-image-automation-controller, nerdctl, peerdb-flow, prometheus-podman-exporter-fips, drone-fips, kubernetes-dashboard, external-secrets-operator-fips, argocd-image-updater-fips, chainloop-cli-fips, backup-restore-operator, osv-scanne...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, crossplane-provider-azure-storagecache, openbao, flux-image-automation-controller, nerdctl, peerdb-flow, crossplane-provider-azure-operationalinsights, prometheus-podman-exporter-fips, drone-fips, kubernetes-dashboard,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: skaffold, prometheus, flux-image-automation-controller, nerdctl, drone-fips, kubernetes-dashboard, external-secrets-operator-fips, argocd-image-updater-fips, backup-restore-operator, osv-scanner, opentofu, telegraf, seaweedfs-rocksdb, istio, commercial-expanso-edge,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, crossplane-provider-aws-kafkaconnect-fips, openbao, crossplane-provider-azure-operationalinsights, drone-fips, crossplane-provider-aws-datasync-fips, argocd-image-updater-fips, databricks-cli, crossplane-provider-aws-opensearchserverless...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, flux-image-automation-controller, nerdctl, prometheus-podman-exporter-fips, kubernetes-dashboard, external-secrets-operator-fips, argocd-image-updater-fips, chainloop-cli-fips, backup-restore-operator, osv-scanner, opentofu, telegraf,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, flux-image-automation-controller, nerdctl, peerdb-flow, prometheus-podman-exporter-fips, drone-fips, kubernetes-dashboard, external-secrets-operator-fips, argocd-image-updater-fips, chainloop-cli-fips, backup-restore-operator, osv-scanne...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: skaffold, podman, prometheus, openbao, flux-image-automation-controller, nerdctl, prometheus-podman-exporter-fips, kubernetes-dashboard, external-secrets-operator-fips, step-kms-plugin-fips, argocd-image-updater-fips, chainloop-cli-fips, backup-restore-operator,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: trivy, external-secrets-operator, aactl, tekton-chains, flux, gitlab-kas, prometheus-operator, argo-cd, syft, minio, snyk-cli, terraform-provider-tls, kaf, pulumi-language-yaml, pulumi-kubernetes-operator, zot, rancher-machine, crossplane-provider-azure-authorization...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: trivy, external-secrets-operator, aactl, tekton-chains, flux, gitlab-kas, prometheus-operator, argo-cd, syft, minio, snyk-cli, terraform-provider-tls, kaf, pulumi-language-yaml, pulumi-kubernetes-operator, zot, rancher-machine, crossplane-provider-azure-authorization...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, cert-manager, external-secrets-operator, skaffold, opentelemetry-collector, spire-server, cloud-provider-aws, aactl, osv-scanner, trivy-operator, knative-serving, flux, gitlab-kas, flux-image-automation-controller, gitea, prometheus-operator, k9s, minio,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: trivy, external-secrets-operator, aactl, flux, gitlab-kas, prometheus-operator, argo-cd, syft, minio, snyk-cli, kaf, pulumi-language-yaml, pulumi-kubernetes-operator, zot, argocd-image-updater, flux-source-controller, witness, openbao, rancher, k9s, containerd, zarf,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: trivy, cert-manager, external-secrets-operator, skaffold, opentelemetry-collector, spire-server, cloud-provider-aws, aactl, osv-scanner, trivy-operator, knative-serving, flux, gitlab-kas, flux-image-automation-controller, gitea, prometheus-operator, k9s,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: chezmoi, splunk-otel-collector, cert-manager, nuclei, trivy, external-secrets-operator, skaffold, melange, opentelemetry-collector, spire-server, cloud-provider-aws, aactl, osv-scanner, terragrunt, gomplate, flux, gitlab-kas, knative-serving, trivy-operator,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cert-manager, external-secrets-operator, opentelemetry-collector, spire-server, cloud-provider-aws, aactl, knative-serving, flux, gitlab-kas, prometheus-operator, minio, snyk-cli, kyverno, kubernetes-dashboard, loki, kaf, helm, zot, k3s, fscrypt, telegraf, kubernetes...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: trivy, external-secrets-operator, aactl, tekton-chains, flux, gitlab-kas, prometheus-operator, argo-cd, syft, minio, snyk-cli, terraform-provider-tls, kaf, pulumi-language-yaml, pulumi-kubernetes-operator, zot, rancher-machine, crossplane-provider-azure-authorization...

GO-2026-5419 Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering in github.com/fluxcd/notification-controller

Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering in github.com/fluxcd/notification-controller...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: spicedb-fips, podman, prometheus, openbao, crossplane-provider-azure-operationalinsights, drone-fips, addon-resizer-fips, blob-csi-fips, kubernetes-csi-livenessprobe, manifest-tool, boring-registry-fips, kubernetes-csi-driver-hostpath, argocd-image-updater-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: spicedb-fips, podman, prometheus, openbao, crossplane-provider-azure-operationalinsights, drone-fips, addon-resizer-fips, blob-csi-fips, kubernetes-csi-livenessprobe, manifest-tool, boring-registry-fips, kubernetes-csi-driver-hostpath, argocd-image-updater-fips,...