GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: livekit-cli, docker-cli-buildx, chainctl, dagger, kube-mgmt, docker-compose-fips, cloudbeat-fips, docker, trivy-operator, zarf-fips, spegel-fips, cloudbeat, packer-fips, kubescape-server, spegel, buildkitd-fips, kube-mgmt-fips, kubescape, trivy, neuvector-scanner-fip...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: livekit-cli, docker-cli-buildx, chainctl, dagger, kube-mgmt, docker-compose-fips, cloudbeat-fips, docker, trivy-operator, zarf-fips, spegel-fips, cloudbeat, packer-fips, kubescape-server, spegel, buildkitd-fips, kube-mgmt-fips, kubescape, trivy, neuvector-scanner-fip...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: livekit-cli, docker-cli-buildx, chainctl, dagger, kube-mgmt, docker-compose-fips, cloudbeat-fips, docker, trivy-operator, zarf-fips, spegel-fips, cloudbeat, packer-fips, kubescape-server, spegel, buildkitd-fips, kube-mgmt-fips, kubescape, trivy, neuvector-scanner-fip...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: livekit-cli, docker-cli-buildx, chainctl, dagger, kube-mgmt, docker-compose-fips, cloudbeat-fips, docker, trivy-operator, zarf-fips, spegel-fips, cloudbeat, packer-fips, kubescape-server, spegel, buildkitd-fips, kube-mgmt-fips, kubescape, trivy, neuvector-scanner-fip...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: livekit-cli, docker-cli-buildx, chainctl, dagger, kube-mgmt, docker-compose-fips, cloudbeat-fips, docker, trivy-operator, zarf-fips, spegel-fips, cloudbeat, packer-fips, kubescape-server, spegel, buildkitd-fips, kube-mgmt-fips, kubescape, trivy, neuvector-scanner-fip...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: livekit-cli, docker-cli-buildx, chainctl, dagger, kube-mgmt, docker-compose-fips, cloudbeat-fips, docker, trivy-operator, zarf-fips, spegel-fips, cloudbeat, packer-fips, kubescape-server, spegel, buildkitd-fips, kube-mgmt-fips, kubescape, trivy, neuvector-scanner-fip...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: redpanda-operator, kubescape-operator-fips, spegel-fips, packer-fips, jfrog-cli, amazon-ecs-agent-fips, amazon-ecs-agent, google-osconfig-agent, spegel, datadog-agent-fips, kubescape, helm-fips, headlamp-fips, neuvector-scanner-fips, linkerd2-fips, zot,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: redpanda-operator, kubescape-operator-fips, spegel-fips, packer-fips, jfrog-cli, amazon-ecs-agent-fips, amazon-ecs-agent, google-osconfig-agent, spegel, datadog-agent-fips, kubescape, helm-fips, headlamp-fips, neuvector-scanner-fips, linkerd2-fips, zot,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: redpanda-operator, kubescape-operator-fips, spegel-fips, packer-fips, jfrog-cli, amazon-ecs-agent-fips, amazon-ecs-agent, google-osconfig-agent, spegel, datadog-agent-fips, kubescape, helm-fips, headlamp-fips, neuvector-scanner-fips, linkerd2-fips, zot,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitaly, nfpm, zarf, zot, scorecard, teleport, trivy, dagger, syft, gitsign, gitlab-runner, flux, crossplane, gptscript, grype, pulumi, pulumi-kubernetes-operator, cerbos, snyk-cli, argo-events, argo-cd, apko, argo-workflows, goreleaser, kargo, witness, skaffold, gite...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitaly, nfpm, zarf, zot, scorecard, teleport, trivy, dagger, syft, gitsign, gitlab-runner, flux, crossplane, gptscript, grype, pulumi, pulumi-kubernetes-operator, cerbos, snyk-cli, argo-events, argo-cd, apko, argo-workflows, goreleaser, kargo, witness, skaffold, gite...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitaly, nfpm, zarf, zot, scorecard, teleport, trivy, dagger, syft, gitsign, gitlab-runner, flux, crossplane, gptscript, grype, pulumi, pulumi-kubernetes-operator, cerbos, snyk-cli, argo-events, argo-cd, apko, argo-workflows, goreleaser, kargo, witness, skaffold, gite...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: gitaly, nfpm, zarf, zot, scorecard, teleport, trivy, dagger, syft, gitsign, gitlab-runner, flux, crossplane, gptscript, grype, pulumi, pulumi-kubernetes-operator, cerbos, snyk-cli, argo-events, argo-cd, apko, argo-workflows, goreleaser, kargo, witness, skaffold, gite...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: cg, gitlab-runner, gitlab-runner-fips, nuclei, pulumi-language-yaml, pulumi-language-dotnet, packer-fips, jfrog-cli, trufflehog, mapotf, google-osconfig-agent, cerbos-fips, kubescape, bom, argo-workflows-fips, zot, coder, kubevela-fips, amazon-ssm-agent, flux,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cg, gitlab-runner, gitlab-runner-fips, nuclei, pulumi-language-yaml, pulumi-language-dotnet, packer-fips, jfrog-cli, trufflehog, mapotf, google-osconfig-agent, cerbos-fips, kubescape, bom, argo-workflows-fips, zot, coder, kubevela-fips, amazon-ssm-agent, flux,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cg, gitlab-runner, gitlab-runner-fips, nuclei, pulumi-language-yaml, pulumi-language-dotnet, packer-fips, jfrog-cli, trufflehog, mapotf, google-osconfig-agent, cerbos-fips, kubescape, bom, argo-workflows-fips, zot, coder, kubevela-fips, amazon-ssm-agent, flux,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: cg, gitlab-runner, gitlab-runner-fips, nuclei, pulumi-language-yaml, pulumi-language-dotnet, packer-fips, jfrog-cli, trufflehog, mapotf, google-osconfig-agent, cerbos-fips, kubescape, bom, argo-workflows-fips, zot, coder, kubevela-fips, amazon-ssm-agent, flux,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: cg, gitlab-runner, gitlab-runner-fips, nuclei, pulumi-language-yaml, pulumi-language-dotnet, commercial-chainloop-cli, packer-fips, jfrog-cli, trufflehog, mapotf, google-osconfig-agent, cerbos-fips, kubescape, bom, argo-workflows-fips, zot, kubevela-fips,...

SUSE CVE-2026-28406

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

GO-2026-4580 kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko...