GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, argo-workflows-fips, argo-workflows, trivy-operator, coder-fips, syft-fips, grype, kaniko-fips, scorecard, flux, trivy-operator-fips, terragrunt-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips, pulumi-kubernetes-operator...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, argo-workflows-fips, argo-workflows, trivy-operator, coder-fips, syft-fips, grype, kaniko-fips, scorecard, flux, trivy-operator-fips, terragrunt-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips, pulumi-kubernetes-operator...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, argo-workflows, trivy-operator, coder-fips, syft-fips, grype, kaniko-fips, scorecard, flux, trivy-operator-fips, terragrunt-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, argo-workflows, trivy-operator, syft-fips, grype, flux-source-controller-fips, kaniko-fips, scorecard, flux, trivy-operator-fips, terragrunt-fips, cloudbeat-fips, chainctl, k9s-fips,...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3-fips, crossplane-provider-aws-efs, dapr, livekit-egress, sftpgo, falcoctl-fips, kots, velero-plugin-for-aws-fips, crossplane-provider-aws-firehose, falcosidekick, crossplane-provider-aws-wafv2, cloudprober-fips, kyverno-policy-reporter,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: dapr, flux-operator-fips, wolfictl, cloudflared, flux-source-controller, knative-kafka-broker, falcosidekick-fips, gitlab-kas-fips, syft-fips, oauth2-proxy, consul-fips, rabbitmq-messaging-topology-operator-fips, cert-manager-istio-csr, splunk-otel-collector-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, argo-workflows, trivy-operator, syft-fips, grype, flux-source-controller-fips, kaniko-fips, scorecard, flux, trivy-operator-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, argo-workflows, trivy-operator, syft-fips, grype, flux-source-controller-fips, kaniko-fips, scorecard, flux, trivy-operator-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy, osv-scanner, teleport, zarf, apko, gomplate, cerbos, pulumi-kubernetes-operator, pulumi-language-dotnet, zot, gitsign, argocd-image-updater, k9s, rancher-fleet, bom, gitlab-runner, argo-workflows, xeol, src-fingerprint, crossplane, steampipe,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy, osv-scanner, teleport, zarf, apko, gomplate, cerbos, pulumi-kubernetes-operator, pulumi-language-dotnet, zot, gitsign, argocd-image-updater, k9s, rancher-fleet, bom, gitlab-runner, argo-workflows, xeol, src-fingerprint, crossplane, steampipe,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy, osv-scanner, teleport, zarf, apko, gomplate, cerbos, pulumi-kubernetes-operator, pulumi-language-dotnet, zot, gitsign, argocd-image-updater, k9s, rancher-fleet, bom, gitlab-runner, argo-workflows, xeol, src-fingerprint, crossplane, steampipe,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy, osv-scanner, teleport, zarf, apko, gomplate, cerbos, pulumi-kubernetes-operator, pulumi-language-dotnet, zot, gitsign, argocd-image-updater, k9s, rancher-fleet, bom, gitlab-runner, argo-workflows, xeol, src-fingerprint, crossplane, steampipe,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3-fips, dapr, prometheus-elasticsearch-exporter-fips, kuma, cloudflared, crossplane-provider-aws-firehose, flux-source-controller, cilium-envoy-fips, crossplane-provider-aws-ec2-fips, gitlab-kas-fips, syft-fips, prometheus-pgbouncer-exporter,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3-fips, dapr, github-mcp-server, mongo-tools-fips, prometheus-elasticsearch-exporter-fips, kuma, kubescape-http-request, flux-operator-fips, influx, cloudflared, crossplane-provider-aws-firehose, flux-source-controller, pgpool2exporter,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, sftpgo, step-kms-plugin, tkn, falcoctl-fips, kots, temporal-ui-server, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, kyverno-policy-reporter, fulcio-fips, argo-workflows, cert-manager-fips, oauth2-proxy,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, ko, minio, buildah, rabbitmq-messaging-topology-operator, argo-workflows, kyverno-notation-aws, gatus, grpc-health-probe, vault-benchmark, undock, temporal, skaffold, step-issuer, containerd, bank-vaults, grafana-mimir, sops, pulumi, guac,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, ko, minio, buildah, rabbitmq-messaging-topology-operator, argo-workflows, kyverno-notation-aws, gatus, grpc-health-probe, vault-benchmark, undock, temporal, skaffold, step-issuer, containerd, bank-vaults, grafana-mimir, sops, pulumi, guac,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, opentelemetry-collector-contrib, timestamp-authority, zarf, cosign, opentelemetry-collector, slsa-verifier, buildkitd, gomplate, pulumi-kubernetes-operator, actions-runner-controller, policy-controller, terraform-provider-azurerm, rekor, zot,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: spire-server, falcoctl, opentelemetry-collector-contrib, timestamp-authority, zarf, cosign, opentelemetry-collector, slsa-verifier, buildkitd, gomplate, pulumi-kubernetes-operator, actions-runner-controller, policy-controller, terraform-provider-azurerm, rekor, zot,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, volume-modifier-for-k8s-fips, tkn, kube-logging-logging-operator, falcoctl-fips, kots, secrets-store-csi-driver, flux-source-controller, amass, atlantis-fips, oauth2-proxy, wireguard-go, gitness, dive,...