GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: tigera-operator, kaniko-fips, jfrog-cli, grype-db, tigera-operator-fips, helmfile, consul-k8s, chainctl-fips, helm-exporter, dagger, buildkitd-fips, zot, tekton-pipelines-fips, kube-mgmt-fips, spegel, docker, crossplane-fips, kubescape-operator, google-osconfig-agent...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: tigera-operator, kaniko-fips, jfrog-cli, grype-db, tigera-operator-fips, helmfile, consul-k8s, chainctl-fips, helm-exporter, dagger, buildkitd-fips, zot, tekton-pipelines-fips, kube-mgmt-fips, spegel, docker, crossplane-fips, kubescape-operator, google-osconfig-agent...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: tigera-operator, kaniko-fips, jfrog-cli, grype-db, tigera-operator-fips, helmfile, consul-k8s, chainctl-fips, helm-exporter, dagger, buildkitd-fips, zot, kube-mgmt-fips, spegel, docker, crossplane-fips, kubescape-operator, google-osconfig-agent, chainctl,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: tigera-operator, kaniko-fips, jfrog-cli, grype-db, tigera-operator-fips, helmfile, consul-k8s, chainctl-fips, helm-exporter, dagger, buildkitd-fips, zot, kube-mgmt-fips, spegel, docker, crossplane-fips, kubescape-operator, google-osconfig-agent, chainctl,...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: opa-envoy, db-operator, delve, argocd-image-updater, terraform-provider-tls, terraform-provider-sendgrid, k8sgpt-operator, k8ssandra-operator, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, net-kourier, argo-rollouts, kyverno-policy-reporter-kyverno-plugin,...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

NeuVector scanner (CVE-2025-67860) is affected: the scanner process accepts registry and controller credentials via command-line arguments, potentially exposing sensitive credentials to local users. Root cause: credentials handled in command-line context. Impact: limited confidentiality risk (Low...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

SUSE CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via handling passwords as command arguments. An attacker can obtain sensitive information by accessing process arguments through system interfaces. Remediation Upgrade github.com/neuvector/scanner to...

GO-2026-4490 NeuVector scanner insecurely handles passwords as command arguments in github.com/neuvector/scanner

NeuVector scanner insecurely handles passwords as command arguments in github.com/neuvector/scanner. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

NeuVector scanner insecurely handles passwords as command arguments

Impact A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users. This may allow unauthorized access to registries or the NeuVector...