GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: falco-no-driver, skaffold, rancher-helm, zot, grype-db, crossplane-fips, cluster-api-helm-controller, helmfile, envoy-gateway-fips, kaniko, docker-cli-buildx-fips, k9s, buildkitd, rancher, cloudbeat-fips, neuvector, ctop, redpanda-operator, kube-arangodb-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: falco-no-driver, skaffold, rancher-helm, zot, grype-db, crossplane-fips, cluster-api-helm-controller, helmfile, envoy-gateway-fips, kaniko, docker-cli-buildx-fips, k9s, buildkitd, rancher, cloudbeat-fips, neuvector, ctop, redpanda-operator, kube-arangodb-fips,...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

The vulnerability of the NeuVector Enforcer security container arises from the lack of data cleaning at the management level, allowing a perpetrator to execute arbitrary code and trigger a service failure.

The vulnerability of the NeuVector Enforcer security container is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and trigger a service failure...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nova, flux-source-controller, gitness, envconsul, newrelic-nri-statsd, nats-server, nri-f5, openbao-k8s, opentofu, rqlite, aws-flb-firehose, newrelic-infrastructure-agent, tkn, kubernetes-csi-external-attacher, cloud-provider-azure, nsc, buf, kubernetes-dashboard-api...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, slsa-verifier, flux-source-controller, gitness, envconsul, golangci-lint, tofu-controller, bento, crossplane-provider-azure-storage, opencost, cis-operator, docker-cli, apache-exporter, kubernetes-dashboard-auth, ko, opentofu, rancher-agen...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: falco-no-driver, external-dns, mongo-tools, rabbitmq-default-user-credential-updater-fips, volcano-fips, kafka-proxy-fips, regclient-fips, litmus-chaos-operator, crossplane-fips, external-dns-fips, rke2-runtime, ko, atlantis, metacontroller, kubevirt-cdi-uploadproxy,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: external-dns, mongo-tools, volcano-fips, external-dns-fips, ko, kubevirt-cdi-uploadproxy, gostatsd, rekor-fips, kubernetes-dashboard, crossplane-provider-aws-elbv2, buildtools-fips, mountpoint-s3-csi-driver, github-mcp-server, logstash-exporter, caddy, overmind,...

CLEANSTART-2026-KJ56465 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 5.4.8-r0

Multiple security vulnerabilities affect the neuvector-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: neuvector-fips, omni, dex-fips, commercial-grafana, mattermost-fips, neuvector, gotrue, teleport, zitadel, rancher-agent, rancher, gotrue-fips, teleport-operator-fips, dex, omni-fips, mattermost...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

NeuVector scanner (CVE-2025-67860) is affected: the scanner process accepts registry and controller credentials via command-line arguments, potentially exposing sensitive credentials to local users. Root cause: credentials handled in command-line context. Impact: limited confidentiality risk (Low...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...