GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, kubescape-server-fips, spire-server-fips, cloudbeat-fips, cloudbeat, falcoctl, kyverno, trivy-operator-fips, trivy-operator, teleport-operator-fips, tflint-fips, tflint, policy-controller-fips, docker-fips, tkn-fips, aactl, crossplane-fips, ratify...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-notation-aws, trivy, gitsign, kubescape, falcoctl, policy-controller, tflint, tekton-chains, tkn, trivy-operator, zarf, crossplane, neuvector-sigstore-interface, aactl, ratify...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-notation-aws, trivy, gitsign, kubescape, falcoctl, policy-controller, tflint, tekton-chains, tkn, trivy-operator, zarf, crossplane, neuvector-sigstore-interface, aactl, ratify...

GHSA-4JJ9-CGQC-X9H5 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-66001 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, kubescape-server-fips, spire-server-fips, cloudbeat-fips, cloudbeat, falcoctl, kyverno, trivy-operator-fips, trivy-operator, tflint-fips, tflint, policy-controller-fips, docker-fips, tkn-fips, aactl, ko, crossplane-fips, ko-fips, ratify,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, kubescape-server-fips, spire-server-fips, cloudbeat-fips, cloudbeat, falcoctl, kyverno, trivy-operator-fips, trivy-operator, tflint-fips, tflint, policy-controller-fips, docker-fips, tkn-fips, aactl, ko, crossplane-fips, ko-fips, ratify,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kyverno, policy-controller, zarf, teleport, goreleaser, trivy-operator, crossplane, aactl, ratify, kyverno-notation-aws, ko, spire-server, kubescape, neuvector-sigstore-interface, gitsign, tflint, falcoctl, tkn, tekton-chains, slsa-verifier...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kyverno, policy-controller, zarf, teleport, goreleaser, trivy-operator, crossplane, aactl, ratify, kyverno-notation-aws, ko, spire-server, kubescape, neuvector-sigstore-interface, gitsign, tflint, falcoctl, tkn, tekton-chains, slsa-verifier...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, k9s-fips, cluster-api-helm-controller, zarf, cto...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: tekton-pipelines, zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, k9s-fips, cluster-api-helm-controller, zarf, cto...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, cto...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, cto...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, cto...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, zot, tigera-operator, chainctl, kots, neuvector-scanner-fips, grype, packer, xeol, tigera-operator-fips, docker-compose, trivy-fips, kube-arangodb, helm-set-status, docker-compose-fips, helm-exporter, cluster-api-helm-controller, k9s-fips, zarf, cto...