GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, ocm-kubernetes-controller-fips, cluster-api-helm-controller, manifest-tool, falcoctl-fips, trivy, kube-arangodb, helm-mapkubeapis, gitlab-operator-fips, consul-k8s, cert-manager-cmctl, gitlab-operator, tigera-operator,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: osv-scanner, terragrunt, cerbos-fips, gitlab-runner, argo-events, kubescape-server, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, kaniko, external-secrets-operator-fips, nuclei, gitaly-fips, trufflehog, src-fingerprint-fips, trivy, gomplate,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: etcd-fips, osv-scanner, terragrunt, reports-server, frankenphp-8.3, argo-events, kubescape-server, knative-kafka-broker-fips, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, tekton-pipelines, splunk-otel-collector, prometheus-podman-exporter-fip...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: mcp-grafana, dagger, minio, nuclei, terraform-mcp-server, vcluster, k8sgpt, grafana-alloy, loki, ollama, malcontent, k3s, goreleaser, datadog-agent, lazygit, gitlab-runner, teleport, tempo, maru, nfpm, terragrunt, eksctl, opentelemetry-collector, cri-tools, dgraph,...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, ocm-kubernetes-controller-fips, cluster-api-helm-controller, manifest-tool, falcoctl-fips, trivy, kube-arangodb, helm-mapkubeapis, gitlab-operator-fips, consul-k8s, cert-manager-cmctl, gitlab-operator, tigera-operator,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, ocm-kubernetes-controller-fips, cluster-api-helm-controller, manifest-tool, falcoctl-fips, trivy, kube-arangodb, helm-mapkubeapis, gitlab-operator-fips, consul-k8s, cert-manager-cmctl, gitlab-operator, tigera-operator,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, ocm-kubernetes-controller-fips, cluster-api-helm-controller, manifest-tool, falcoctl-fips, trivy, kube-arangodb, helm-mapkubeapis, gitlab-operator-fips, consul-k8s, cert-manager-cmctl, gitlab-operator, tigera-operator,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, ocm-kubernetes-controller-fips, cluster-api-helm-controller, manifest-tool, falcoctl-fips, trivy, kube-arangodb, helm-mapkubeapis, gitlab-operator-fips, consul-k8s, cert-manager-cmctl, gitlab-operator, tigera-operator,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-operator, kubescape-server, cluster-api-helm-controller, kaniko, neuvector, newrelic-infrastructure-agent, manifest-tool, docker-compose-fips, trivy, datadog-agent, kube-arangodb, datadog-agent-fips, helm-mapkubeapis, packer, consul-k8s, cg, tigera-operator,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: helm-operator, osv-scanner, kubescape-server, cluster-api-helm-controller, kaniko, neuvector, newrelic-infrastructure-agent, manifest-tool, docker-compose-fips, containerd-fips, trivy, datadog-agent, kube-arangodb, datadog-agent-fips, helm-mapkubeapis, packer,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: osv-scanner, terragrunt, cerbos-fips, gitlab-runner, argo-events, kubescape-server, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, kaniko, external-secrets-operator-fips, nuclei, gitaly-fips, trufflehog, src-fingerprint-fips, trivy, gomplate,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: osv-scanner, terragrunt, cerbos-fips, gitlab-runner, argo-events, kubescape-server, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, kaniko, external-secrets-operator-fips, nuclei, gitaly-fips, trufflehog, src-fingerprint-fips, trivy, gomplate,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: osv-scanner, terragrunt, cerbos-fips, gitlab-runner, argo-events, kubescape-server, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, kaniko, external-secrets-operator-fips, nuclei, gitaly-fips, trufflehog, src-fingerprint-fips, trivy, gomplate,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: mcp-grafana, dagger, minio, nuclei, terraform-mcp-server, vcluster, k8sgpt, grafana-alloy, loki, ollama, malcontent, k3s, goreleaser, datadog-agent, lazygit, gitlab-runner, teleport, tempo, maru, nfpm, terragrunt, eksctl, opentelemetry-collector, cri-tools, dgraph,...

CVE-2023-50976

Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API...

EUVD-2023-34868

Malicious code in bioql PyPI...

EUVD-2023-28634

Malicious code in bioql PyPI...

EUVD-2023-55703

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: skopeo-fips, helm-operator, falco-exporter, newrelic-fluent-bit-output, terragrunt, cerbos-fips, eck-operator, cloudnative-pg, nova-fips, kpt, crossplane-provider-azure, mongo-tools, sbomqs, argo-rollouts-fips, beats, pdfcpu, kube-logging-logging-operator,...

CVE-2023-30450

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...