GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: helm, secrets-store-csi-driver, filebrowser, emissary, lvm-driver, wave, bento, tetragon, kyverno, spire-server, aws-flb-firehose, kubernetes-csi-driver-nfs, cluster-api-provider-vsphere, envoy-gateway, istio, trivy-operator, datadog-agent, vault-benchmark,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: helm, nfs-subdir-external-provisioner, secrets-store-csi-driver, filebrowser, tetragon, liquibase-package-manager, cluster-api-provider-vsphere, logstash-exporter, pvc-autoresizer, chartmuseum, crossplane-provider-keycloak, vertical-pod-autoscaler, kube-vip, nuclei,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, yace, sonobuoy-fips, flux-helm-controller-fips, mig-parted-fips, tetragon-fips, crossplane-provider-azure-authorization, cilium-certgen, scorecard, telegraf, kubevela-fips, aws-application-networking-k8s, controller-gen, json-exporter,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: opentofu-fips, nri-redis, php-fpmexporter, git-sync, rabbitmq-default-user-credential-updater, vertical-pod-autoscaler-fips, gatekeeper-fips, kubelet-csr-approver-fips, newrelic-infrastructure-agent, yace, agentbeat, kubernetes-dashboard-metrics-scraper,...

CLEANSTART-2026-KJ56465 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 5.4.8-r0

Multiple security vulnerabilities affect the neuvector-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: dex-fips, gotrue-fips, dex, omni-fips, mattermost, zitadel, commercial-grafana, gotrue, omni, rancher-agent, mattermost-fips, teleport, teleport-operator-fips, neuvector, neuvector-fips, rancher...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...