CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: syft, kots, xeol, kubescape-server-fips, grype-db, terragrunt-fips, trivy, zarf-fips, grype, tflint, terraform, conftest-fips, task, packer-fips, packer, zarf, tfsec, cloudbeat-fips, terragrunt, xeol-fips, syft-fips, snyk-cli, terraform-fips, k9s, k9s-fips, task-fips...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: syft, kots, xeol, kubescape-server-fips, grype-db, terragrunt-fips, trivy, zarf-fips, grype, tflint, terraform, conftest-fips, task, packer-fips, packer, zarf, tfsec, cloudbeat-fips, terragrunt, xeol-fips, syft-fips, snyk-cli, terraform-fips, k9s, k9s-fips, task-fips...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, melange, flux-source-controller, zarf, kaniko-fips, trufflehog-fips, kubevela-fips, argo-events, jfrog-cli, kubevela, teleport, cloudbeat, flux-fips, trufflehog, commercial-chainloop-cli, pulumi-language-yaml, pulumi-language-java, nemo,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, melange, flux-source-controller, zarf, kaniko-fips, trufflehog-fips, kubevela-fips, argo-events, jfrog-cli, kubevela, teleport, cloudbeat, flux-fips, trufflehog, commercial-chainloop-cli, pulumi-language-yaml, pulumi-language-java, nemo,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, melange, flux-source-controller, zarf, kaniko-fips, trufflehog-fips, kubevela-fips, argo-events, jfrog-cli, kubevela, teleport, cloudbeat, flux-fips, trufflehog, commercial-chainloop-cli, pulumi-language-yaml, pulumi-language-java, nemo,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kyverno, gitlab-runner, gitaly, flux-source-controller, grype, rancher-fleet, k9s, zarf, cerbos, dagger, pulumi-language-yaml, xeol, flux-image-automation-controller, crossplane, src-fingerprint, trufflehog, wolfictl, kubescape, external-secrets-operator, flux, kargo...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kyverno, gitlab-runner, gitaly, flux-source-controller, grype, rancher-fleet, k9s, zarf, cerbos, dagger, pulumi-language-yaml, xeol, flux-image-automation-controller, crossplane, src-fingerprint, trufflehog, wolfictl, kubescape, external-secrets-operator, flux, kargo...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: kyverno, gitlab-runner, gitaly, flux-source-controller, grype, rancher-fleet, k9s, zarf, cerbos, dagger, pulumi-language-yaml, xeol, flux-image-automation-controller, crossplane, src-fingerprint, trufflehog, wolfictl, kubescape, external-secrets-operator, flux, kargo...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kyverno, gitlab-runner, gitaly, flux-source-controller, grype, rancher-fleet, k9s, zarf, cerbos, dagger, pulumi-language-yaml, xeol, flux-image-automation-controller, crossplane, src-fingerprint, trufflehog, wolfictl, kubescape, external-secrets-operator, flux, kargo...

grype-0.109.1-1.1 on GA media (moderate)

grype-0.109.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10317-1 Rating: moderate Cross-References: CVE-2025-12183 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-0.109.1-1.1...

OPENSUSE-SU-2026:10317-1 grype-0.109.1-1.1 on GA media

These are all security issues fixed in the grype-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitaly, rancher-fleet, zarf, crossplane-provider-aws-sns, cerbos, policy-controller, trufflehog, src-fingerprint, boring-registry, hydra, cilium-cli, terraform-provider-pagerduty, kots, openbao, syft, cert-manager-cmctl, buildkitd, apko, nfpm, ratify,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitaly, rancher-fleet, zarf, crossplane-provider-aws-sns, cerbos, policy-controller, trufflehog, src-fingerprint, boring-registry, hydra, cilium-cli, terraform-provider-pagerduty, kots, openbao, syft, cert-manager-cmctl, buildkitd, apko, nfpm, ratify,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, helm-push, xeol, melange, terraform-provider-pagerduty-fips, crossplane-provider-aws-rds, flux-source-controller, crossplane-provider-aws-route53-fips, gitlab-operator, datadog-agent-fips, docker-fips, rclone-fips,...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

SUSE CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: helm-push, kubernetes-ingress-defaultbackend-fips, k8sgateway, aws-node-termination-handler-fips, spqr, kubernetes-csi-driver-nfs, cert-manager-webhook-pdns, minio-operator, langfuse, sftpgo-plugin-pubsub, nri-mysql, etcd-fips, redis-operator-fips, influxd, pguser,...

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

EUVD-2025-199596

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...