337 matches found
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: buf, policy-controller, dagger, k3d, syft, melange, helm-push, kaniko, wolfictl, harbor-scanner-trivy, neuvector-scanner, cri-tools, docker-compose, grype...
GO-2024-2791 vulnerabilities
Vulnerabilities for packages: kubernetes, ctop, wolfictl, cadvisor, opentelemetry-collector-contrib, buildah, neuvector-scanner, grype...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, kubernetes-csi-external-provisioner, kube-vip, net-kourier, slsa-verifier, frp, bank-vaults, pgpool2exporter, terraform-provider-acme, step-ca, flyte, cert-manager-webhook-pdns, crossplane-provider-aws-elasticache,...
GO-2026-5778 vulnerabilities
Vulnerabilities for packages: zarf, slsa-verifier, ko, tkn, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, policy-controller, tekton-chains, crossplane, falcoctl, spire-server, kyverno-notation-aws, goreleaser, gitsign, ratify, kyverno, tflint, aactl...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, cosign, scorecard, slsa-verifier, nerdctl, terraform-provider-acme, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, cluster-api-azure-controller, kubescape, gatus, ksops, witness,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: zarf, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, flux-source-controller, witness, policy-controller, tekton-chains, sigstore-scaffolding, falcoctl, spire-server, kyverno-notation-aws, goreleaser, docker-cli-buildx,...
GO-2026-4354 vulnerabilities
Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, flux-source-controller, witness, policy-controller, tekton-chains, falcoctl, spire-server, kyverno-notation-aws, goreleaser, gitsign, ratif...
GO-2026-4358 vulnerabilities
Vulnerabilities for packages: zarf, slsa-verifier, cosign, falco-no-driver, vexctl, ko, skopeo, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, trivy-operator, undock, flux-source-controller, witness, policy-controller, tekton-chains, sigstore-scaffolding, rekor, guac, buildah,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, flux-source-controller, witness, policy-controller, tekton-chains, crossplane, docker, sigstore-scaffolding, falcoctl, spire-server,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, flux-source-controller, witness, policy-controller, tekton-chains, docker, sigstore-scaffolding, rekor, falcoctl, spire-server,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: k3s, mongo-tools, aws-otel-collector, nri-f5, nuclei, glow, chartmuseum, rabbitmq-default-user-credential-updater, cerbos, ipfs-cluster, nri-nginx, cluster-api-azure-controller, cni-plugins, dive, kapp-controller, kpt, witness, swagger, tekton-chains, kapp, wal-g,...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: zarf, slsa-verifier, cosign, vexctl, ko, tkn, zot, skaffold, neuvector-sigstore-interface, kubescape, teleport, trivy-operator, flux-source-controller, witness, policy-controller, tekton-chains, docker, sigstore-scaffolding, rekor, falcoctl, spire-server,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: zarf, k3s, cosign, scorecard, slsa-verifier, vexctl, bank-vaults, skopeo, step-ca, nuclei, tkn, zot, neuvector-sigstore-interface, pulumi, kubescape, flux-source-controller, ksops, flux-image-automation-controller, grafana-mimir,...
CVE-2026-25703
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
EUVD-2026-53297
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703 Potential information leakage from manager /network/graph API in NeuVector
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703
NeuVector up to version 5.4.9 potentially leaks information from the manager, specifically via the /network/graph API, due to missing authentication and cached data containing sensitive information. Affected component: NeuVector manager API surface; vulnerability arises from insufficient access c...
CVE-2026-25703 Potential information leakage from manager /network/graph API in NeuVector
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703: Missing Authentication for Critical Function
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...