GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, k6-operator-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, temporal, seaweedfs-operator-fips...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: cloudbeat, multus-cni-fips, net-kourier-fips, ratify-fips, portieris-fips, stampdalf, mc, age, contour-fips, crossplane-provider-kubernetes, prometheus-stackdriver-exporter, kube-logging-operator-custom-runner-fips, seaweedfs-operator-fips, db-operator-fips, vault-k8...

EUVD-2022-3043

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: net-kourier-fips, cert-manager-csi-driver-fips, kubescape, glab, apache-beam-python-3.11-sdk, mc, prometheus-stackdriver-exporter, temporal, db-operator-fips, consul-k8s, apko, slsa-verifier, k8ssandra-client-fips, spire-server-fips,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, nuclei, php-fpmexporter, fuse-overlayfs-snapshotter, amass, thanos, paranoia, flux, govulncheck, docker-credential-ecr-login, grype, nats-server, nerdctl, kubernetes-event-exporter, local-path-provisioner, gobuster, kube-rbac-proxy,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: steampipe, cert-manager-istio-csr, guac, nerdctl, grafana-alloy, kube-rbac-proxy, skaffold, dagger, kargo, minio, trufflehog, apko, argo-workflows, ko, boring-registry, temporal, gomplate, zot, tekton-chains, pulumi, timestamp-authority, step-ca, rekor, weaviate,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: nerdctl, istio-pilot-agent, spire-controller-manager, kubescape, step-ca-fips, grafana-alloy-fips, grafana-alloy, kyverno, podman, rabbitmq-messaging-topology-operator-fips, bank-vaults-fips, harbor-registry, kube-rbac-proxy-fips, temporal, spiffe-helper,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: steampipe, cert-manager-istio-csr, guac, nerdctl, grafana-alloy, kube-rbac-proxy, skaffold, dagger, kargo, minio, trufflehog, apko, argo-workflows, ko, boring-registry, temporal, gomplate, zot, tekton-chains, pulumi, timestamp-authority, step-ca, rekor, weaviate,...

CVE-2022-24877

Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: sops-fips, chezmoi, age-fips, ksops, flux-kustomize-controller-fips, flux-kustomize-controller, grafana, sops, litestream, grafana-fips, age...

GO-2022-0260 Privilege escalation to cluster admin on multi-tenant environments in github.com/fluxcd/kustomize-controller

Privilege escalation to cluster admin on multi-tenant environments in github.com/fluxcd/kustomize-controller...

OPENSUSE-SU-2024:13299-1 kustomize-5.1.1-1.1 on GA media

These are all security issues fixed in the kustomize-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: zot, grafana-mimir, falcoctl, nuclei, k8sgpt, step, prometheus-operator, druid, flux-source-controller, secrets-store-csi-driver-provider-azure, velero, bank-vaults, airflow, guac, chezmoi, thanos, flux, sigstore-scaffolding, fulcio, buildkitd, rekor, hugo, ksops,...