GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, kubelet-csr-approver, kyverno-policy-reporter-ui,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cerbos-fips, pulumi-kubernetes-operator, prometheus-alertmanager, loki-fips, tekton-pipelines-fips, scorecard, sftpgo-plugin-pubsub, terraform-provider-grafana-fips, spicedb-operator, kubernetes-dns-node-cache-fips, jaeger-operator-fips, kube-vip-cloud-provider,...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: sops, thanos-operator, nri-f5, rancher-helm, kind, k9s, spqr, mesosphere-vsphere-csi, nri-apache, spire-controller-manager, gitsign, grafana-image-renderer, rke2-cloud-provider, sftpgo-plugin-eventstore, oauth2-proxy, metrics-server, kargo, postgres-operator,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: sops, thanos-operator, nri-f5, rancher-helm, kind, k9s, spqr, mesosphere-vsphere-csi, nri-apache, spire-controller-manager, gitsign, grafana-image-renderer, rke2-cloud-provider, sftpgo-plugin-eventstore, oauth2-proxy, metrics-server, kargo, postgres-operator,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, kubelet-csr-approver, stakater-reloader-fips, ko-fips, splunk-otel-collector, mongo-tools,...

CVE-2025-54576 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GHSA-7RH7-C77V-6434 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

CVE-2025-54576 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GHSA-7RH7-C77V-6434 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

Malicious code in grafana-pyroscope (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60f047f0a854cfa17b3119b25caf2e1a95069686aa77470689c2cfb55cddf1e0 Any computer that has this package installed or running should be considered...

MAL-2025-5534 Malicious code in grafana-pyroscope (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60f047f0a854cfa17b3119b25caf2e1a95069686aa77470689c2cfb55cddf1e0 Any computer that has this package installed or running should be considered...