GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: cosign, trivy, aactl, gh, docker-cli-buildx, spire-server, falcoctl, ratify, sigstore-scaffolding, gitsign, trivy-operator, zot, tkn, goreleaser, kyverno, teleport, vexctl, tflint, crossplane, tekton-chains, slsa-verifier, neuvector-sigstore-interface, zarf, kubescap...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: certificate-transparency, kserve-modelmesh-serving, newrelic-infrastructure-agent, tetragon, kubernetes-csi-driver-hostpath, etcd, crossplane-provider-sql, step-issuer, trivy, aactl, gh, jitsucom-bulker, promxy, terraform-provider-kubernetes, contour, falcoctl,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: certificate-transparency, kserve-modelmesh-serving, newrelic-infrastructure-agent, kaniko, kubernetes-csi-driver-hostpath, etcd, crossplane-provider-sql, minio, step-issuer, cass-operator, aactl, jitsucom-bulker, trivy, vcluster, falcoctl, opentelemetry-operator,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: certificate-transparency, kserve-modelmesh-serving, newrelic-infrastructure-agent, kaniko, kubernetes-csi-driver-hostpath, etcd, crossplane-provider-sql, minio, step-issuer, cass-operator, aactl, jitsucom-bulker, trivy, vcluster, falcoctl, opentelemetry-operator,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: etcd-fips, helm-operator, moby-ryuk, terragrunt, cerbos-fips, tkn, nrdot-collector-k8s, eck-operator, argo-events, crossplane-provider-aws-rds-fips, cloud-provider-gcp-cloud-controller-manager-fips, opencost, cert-manager-google-cas-issuer-fips, argo-rollouts-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: etcd-fips, helm-operator, moby-ryuk, terragrunt, cerbos-fips, tkn, nrdot-collector-k8s, eck-operator, argo-events, crossplane-provider-aws-rds-fips, cloud-provider-gcp-cloud-controller-manager-fips, opencost, cert-manager-google-cas-issuer-fips, argo-rollouts-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, osv-scanner, crossplane-provider-aws-cloudfront, terragrunt, cerbos-fips, gitlab-runner, reports-server, argo-events, kubescape-server, crossplane-provider-aws-rds-fips, rclone, crossplane-provider-aws-iam-fips, crossplane-provider-aws-kms...

CVE-2026-26207

CVE-2026-26207 affects Discourse with the discourse-policy plugin. Prior to versions 2025.12.2, 2026.1.1 and 2026.2.0, PolicyController loads posts by ID without verifying the current user’s visibility, allowing authenticated users to interact with policies on posts they cannot view and to enumer...

CVE-2026-20107

The CVE concerns Cisco Application Policy Infrastructure Controller (APIC) in the Object Model CLI. A vulnerability in the CLI input validation could allow an authenticated, local attacker with any role granting CLI access to issue crafted commands and trigger a device reload, causing a DoS. Affe...

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability

A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. To exploit this vulnerability, the attacker...

Important: Red Hat Security Advisory: RHTAS - Tech Preview Release Of the Policy Controller Operator

The Tech Preview release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17,...

Important: Red Hat Security Advisory: RHTAS - Tech Preview Release Of the Policy Controller Operator

The Tech Preview release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17,...

Important: Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release Of the Policy Controller Operator

The Tech Preview release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.15, 4.16,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: skopeo-fips, helm-operator, falco-exporter, newrelic-fluent-bit-output, terragrunt, cerbos-fips, eck-operator, cloudnative-pg, nova-fips, kpt, crossplane-provider-azure, mongo-tools, sbomqs, argo-rollouts-fips, beats, pdfcpu, kube-logging-logging-operator,...

CVE-2025-46569 vulnerabilities

Vulnerabilities for packages: cosign, trivy, kyverno-notation-aws, conftest, tfsec, spire-server, witness, kots, policy-controller...

GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: cosign, trivy, kyverno-notation-aws, conftest, tfsec, spire-server, witness, kots, policy-controller...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GHSA-68G3-2P3G-W9PQ vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GHSA-RXX3-4978-3CC9 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: configmap-reload, thanos-operator, cass-operator, promxy, nri-f5, k9s, shfmt, esbuild, minify, cloudnative-pg, cni-plugins, flux-helm-controller, flux-kustomize-controller, velero-plugin-for-microsoft-azure, gostatsd, kubewatch, aws-flb-kinesis, mods, oras, xcaddy,...