GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: nemo, argocd-image-updater, aactl, harbor, backup-restore-operator, mattermost-fips, cloud-provider-aws, knative-serving, upwind-agent, external-secrets-operator-fips, trivy, kine, cilium, kubernetes, knative-kafka-broker, drone, flux, seaweedfs-rocksdb-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, crossplane-provider-keycloak, harbor, crossplane-provider-azure-storagesync, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, mattermost-fips, crossplane-provider-aws-kinesis-fips, knative-serving,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane, crossplane-provider-azure-managedidentity, nemo, argocd-image-updater, falcoctl, tekton-chains, witness, aactl, consul-fips, crossplane-provider-azure-storagesync, crossplane-provider-azure-synapse, gitlab-runner-fips, harbor, backup-restore-operator,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nemo, argocd-image-updater, aactl, harbor, backup-restore-operator, mattermost-fips, cloud-provider-aws, knative-serving, upwind-agent, external-secrets-operator-fips, trivy, kine, cilium, kubernetes, knative-kafka-broker, drone, flux, seaweedfs-rocksdb-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: crossplane, crossplane-provider-azure-managedidentity, nemo, argocd-image-updater, falcoctl, tekton-chains, witness, aactl, consul-fips, crossplane-provider-azure-storagesync, crossplane-provider-azure-synapse, gitlab-runner-fips, harbor, backup-restore-operator,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: nemo, argocd-image-updater, witness, aactl, harbor, backup-restore-operator, mattermost-fips, cloud-provider-aws, amazon-ssm-agent, knative-serving, upwind-agent, apko-fips, external-secrets-operator-fips, syft, trivy, kine, grype, cilium, kubernetes,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: nemo, argocd-image-updater, longhorn-cli, witness, aactl, harbor, gitlab-runner-fips, backup-restore-operator, mattermost-fips, cloud-provider-aws, amazon-ssm-agent, knative-serving, upwind-agent, apko-fips, external-secrets-operator-fips, docker-cli-buildx-fips, syf...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, crossplane-provider-keycloak, harbor, crossplane-provider-azure-storagesync, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, mattermost-fips, crossplane-provider-aws-kinesis-fips, knative-serving,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gptscript, docker-machine-driver-harvester, kubernetes-dashboard, flux-kustomize-controller, policy-controller, podman, terragrunt, gh, gitlab-runner, chisel, containerd, atlantis, scorecard, kine, osv-scanner, zot, falcoctl, cilium-cli, pulumi-language-yaml,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: gptscript, kubernetes-dashboard, flux-kustomize-controller, policy-controller, podman, terragrunt, crossplane-provider-aws-kms, gh, gitlab-runner, traefik, chisel, containerd, atlantis, scorecard, kine, osv-scanner, zot, falcoctl, crossplane-provider-aws-sqs,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: fscrypt, kubernetes-dashboard, skaffold, nerdctl, k3s, kubescape, kots, kyverno, telegraf, falco-no-driver, rancher, rancher-agent, chisel, containerd, istio, spire-server, kine, osv-scanner, zarf, zot, gitlab-kas, external-secrets-operator, loki, argocd-image-update...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: fscrypt, kubernetes-dashboard, nerdctl, buildah, k3s, podman, docker-cli-buildx, kots, kyverno, telegraf, falco-no-driver, rancher, rancher-agent, containerd, istio, spire-server, kine, zot, gitlab-kas, external-secrets-operator, loki, kaf, cilium-cli, kubernetes,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gptscript, kubernetes-dashboard, flux-kustomize-controller, policy-controller, podman, terragrunt, crossplane-provider-aws-kms, gh, gitlab-runner, traefik, chisel, containerd, atlantis, scorecard, kine, osv-scanner, zot, falcoctl, crossplane-provider-aws-sqs,...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

EUVD-2026-39794

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640 LXD Snapshot Import Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...

CVE-2026-9640 LXD Snapshot Import Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy...