CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kube-arangodb, helm-fips, k9s, redpanda-operator, newrelic-infrastructure-agent, manifest-tool, buildkitd-fips, zarf, trivy-fips, buildkitd, kgateway-fips, kubescape-operator-fips, chartmuseum, jfrog-cli, chaos-mesh, grype-db, packer, rancher-agent, livekit-cli,...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: terraform-mcp-server, go, ko, k8s-device-plugin, hubble-ui, gke-gcloud-auth-plugin, boring-registry, rancher-webhook, kyverno-policy-reporter-kyverno-plugin, nri-f5, sftpgo, spiffe-helper, timestamp-authority, cri-tools, nats, rancher-machine, aws-nuke, scorecard,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: dapr, grafana-mimir, authservice, go, ko, k8s-device-plugin, hubble-ui, knative-operator, terraform-provider-sendgrid, minio-object-browser, libnvidia-container, cue, boring-registry, kyverno-policy-reporter-kyverno-plugin, keda, sftpgo, spiffe-helper,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: pluto, google-cloud-otel-ops-collector, crossplane-provider-aws-ssm-fips, tempo, newrelic-infrastructure-agent, falco-no-driver, dockerize, harbor-cli, crossplane-function-auto-ready, bento, spiffe-helper, flannel-fips, kubeflow-fips, quic-go, q, trivy-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: pluto, tempo, dockerize, kubeflow-fips, trivy-fips, rabbitmq-default-user-credential-updater-fips, chisel, json-exporter, xcover, terraform-docs, tetragon-fips, sbom-convert, nova, external-dns-fips, nerdctl, apko-fips, cloud-provider-azure, cilium-certgen, nri-mssql...

CLEANSTART-2026-KJ56465 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 5.4.8-r0

Multiple security vulnerabilities affect the neuvector-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: gotrue-fips, neuvector, teleport-operator-fips, omni-fips, omni, rancher-agent, commercial-grafana, mattermost-fips, neuvector-fips, zitadel, rancher, teleport, mattermost, dex-fips, dex, gotrue...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

NeuVector scanner (CVE-2025-67860) is affected: the scanner process accepts registry and controller credentials via command-line arguments, potentially exposing sensitive credentials to local users. Root cause: credentials handled in command-line context. Impact: limited confidentiality risk (Low...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...