CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, bom, zarf-fips, pulumi, argo-events, skaffold-fips, external-secrets-operator-fips, steampipe, teleport, external-secrets-operator, nuclei, trivy, gitaly, rancher-fleet-fips, gptscript, pulumi-language-yaml, argo-cd-fips, jfrog-cli,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, bom, zarf-fips, pulumi, argo-events, skaffold-fips, external-secrets-operator-fips, steampipe, teleport, external-secrets-operator, nuclei, trivy, gitaly, rancher-fleet-fips, gptscript, pulumi-language-yaml, argo-cd-fips, jfrog-cli,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, bom, zarf-fips, pulumi, argo-events, skaffold-fips, external-secrets-operator-fips, steampipe, teleport, external-secrets-operator, nuclei, trivy, gitaly, rancher-fleet-fips, gptscript, pulumi-language-yaml, argo-cd-fips, jfrog-cli,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: gitaly, kots, zarf, gitsign, src-fingerprint, grype, argo-events, kyverno, argocd-image-updater, gomplate, teleport, tfsec, trivy-operator, nuclei, dagger, flux, kaniko, flux-image-automation-controller, kubescape, pulumi-kubernetes-operator, argo-workflows,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitaly, kots, zarf, gitsign, src-fingerprint, grype, argo-events, kyverno, argocd-image-updater, gomplate, teleport, tfsec, trivy-operator, nuclei, dagger, flux, kaniko, flux-image-automation-controller, kubescape, pulumi-kubernetes-operator, argo-workflows,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitaly, kots, zarf, gitsign, src-fingerprint, grype, argo-events, kyverno, argocd-image-updater, gomplate, teleport, tfsec, trivy-operator, nuclei, dagger, flux, kaniko, flux-image-automation-controller, kubescape, pulumi-kubernetes-operator, argo-workflows,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitaly, kots, zarf, gitsign, src-fingerprint, grype, argo-events, kyverno, argocd-image-updater, gomplate, teleport, tfsec, trivy-operator, nuclei, dagger, flux, kaniko, flux-image-automation-controller, kubescape, pulumi-kubernetes-operator, argo-workflows,...

grype-0.109.1-1.1 on GA media (moderate)

grype-0.109.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10317-1 Rating: moderate Cross-References: CVE-2025-12183 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-0.109.1-1.1...

OPENSUSE-SU-2026:10317-1 grype-0.109.1-1.1 on GA media

These are all security issues fixed in the grype-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitaly, gomplate, crossplane-provider-azure-managedidentity, crossplane-provider-aws-cloudwatchlogs, flux-notification-controller, crossplane-provider-aws-ec2, terraform-provider-azurerm, openbao, flux-image-automation-controller, pulumi-kubernetes-operator, extism,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitaly, gomplate, crossplane-provider-azure-managedidentity, crossplane-provider-aws-cloudwatchlogs, flux-notification-controller, crossplane-provider-aws-ec2, terraform-provider-azurerm, openbao, flux-image-automation-controller, pulumi-kubernetes-operator, extism,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terragrunt-fips, crossplane-provider-azure-sql, omnictl-multiarch, flux-source-controller-fips, q, crossplane-provider-aws-cognitoidentity, gitness, docker, flux-helm-controller-fips, crossplane-provider-aws-elasticache-fips,...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

SUSE CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: dask-gateway, harbor-cli, kafka-proxy, newrelic-k8s-metadata-injection, kbld-fips, flux-source-controller-fips, kine, request-1279-14, kubernetes-dashboard, authservice-fips, nri-couchbase, splunk-otel-collector-fips, seaweedfs-operator-fips, pgtimetable-fips,...

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

EUVD-2025-199596

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965

CVE-2025-65965 affects Grype versions 0.68.0–0.104.0 . If registry credentials are configured and Grype output is written with --file or --output json= , the credentials can be included in the output file in an unsanitized form. A fix is available in 0.104.1 . Workaround: avoid those options and ...

CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...