CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cerbos, crossplane, argocd-image-updater, apko, gomplate, nfpm, flux-image-automation-controller, pulumi, argo-workflows, kaniko, kyverno, terragrunt, trivy-operator, zarf, grype, bom, src-fingerprint, teleport, pulumi-kubernetes-operator, scorecard, dagger,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cerbos, crossplane, argocd-image-updater, apko, gomplate, nfpm, flux-image-automation-controller, pulumi, argo-workflows, kaniko, kyverno, terragrunt, trivy-operator, zarf, grype, bom, src-fingerprint, teleport, pulumi-kubernetes-operator, scorecard, dagger,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: cerbos, crossplane, argocd-image-updater, apko, gomplate, nfpm, flux-image-automation-controller, pulumi, argo-workflows, kaniko, kyverno, terragrunt, trivy-operator, zarf, grype, bom, src-fingerprint, teleport, pulumi-kubernetes-operator, scorecard, dagger,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: cerbos, crossplane, argocd-image-updater, apko, gomplate, nfpm, flux-image-automation-controller, pulumi, argo-workflows, kaniko, kyverno, terragrunt, trivy-operator, zarf, grype, bom, src-fingerprint, teleport, pulumi-kubernetes-operator, scorecard, dagger,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitlab-runner, src-fingerprint-fips, k9s, nemo, zarf, trivy-fips, cerbos-fips, chainloop-cli-fips, tfsec, chainloop-cli, jfrog-cli, pulumi-language-yaml, grype-db, packer, amazon-ssm-agent-fips, argo-cd-fips, apko, grafana-alloy-fips, gitlab-runner-fips,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gitlab-runner, src-fingerprint-fips, k9s, nemo, zarf, trivy-fips, cerbos-fips, chainloop-cli-fips, tfsec, chainloop-cli, jfrog-cli, pulumi-language-yaml, grype-db, packer, amazon-ssm-agent-fips, argo-cd-fips, apko, grafana-alloy-fips, gitlab-runner-fips,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitlab-runner, src-fingerprint-fips, k9s, nemo, zarf, trivy-fips, cerbos-fips, chainloop-cli-fips, tfsec, chainloop-cli, jfrog-cli, pulumi-language-yaml, grype-db, packer, amazon-ssm-agent-fips, argo-cd-fips, apko, grafana-alloy-fips, gitlab-runner-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitlab-runner, src-fingerprint-fips, k9s, nemo, zarf, trivy-fips, cerbos-fips, chainloop-cli-fips, tfsec, chainloop-cli, jfrog-cli, pulumi-language-yaml, grype-db, packer, amazon-ssm-agent-fips, argo-cd-fips, apko, grafana-alloy-fips, gitlab-runner-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gitlab-runner, src-fingerprint-fips, k9s, nemo, zarf, trivy-fips, cerbos-fips, chainloop-cli-fips, tfsec, chainloop-cli, jfrog-cli, pulumi-language-yaml, grype-db, packer, amazon-ssm-agent-fips, argo-cd-fips, apko, grafana-alloy-fips, gitlab-runner-fips,...

SUSE CVE-2026-28406

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

GO-2026-4580 kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko...