GO-2025-3485 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, harbor-registry, gomplate, temporal-ui-server, skaffold, kots, argo-workflows, flux-kustomize-controller, neuvector-scanner, podman, undock, trufflehog, k3d, flux-source-controller, flyte, kiali, rook, distribution, spiffe-helper, k3s, vexctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, snyk-cli, ksops, tekton-chains, terraform, fulcio, rekor, gomplate, actions-runner-controller, flux-image-automation-controller, kubernetes-event-exporter, crossplane-provider-azure-authorization, slsa-verifier, step-ca, flux-kustomize-controlle...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: snyk-cli, docker-credential-gcr, grafana-agent-operator, trillian, kubernetes-dns-node-cache, harbor-registry, gomplate, kubernetes-csi-driver-hostpath, crane, chartmuseum, certificate-transparency, wireguard-go, skaffold, ferretdb, ghaudit, argo-workflows, capslock,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: snyk-cli, gomplate, gitlab-runner, skaffold, crossplane-provider-azure-authorization, kots, k9s, knative-serving, flux-kustomize-controller, flux, atlantis, datadog-agent, telegraf, eksctl, podman, scorecard, docker-machine-driver-harvester, flux-source-controller,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, snyk-cli, kubescape-operator, calico, grafana-agent-operator, trillian, kubernetes-dns-node-cache, harbor-registry, gomplate, kubernetes-csi-driver-hostpath, node-feature-discovery, chartmuseum, certificate-transparency, haproxy-ingress,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: octo-sts, emissary, crossplane-provider-aws-emrserverless, distribution, conftest-fips, syft, flux-kustomize-controller, cyberark-secrets-provider-for-k8s, harbor-fips, otel-cli, cloud-provider-azure-fips, kots, chainloop-cli, grafana-agent-operator,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: octo-sts, emissary, crossplane-provider-aws-emrserverless, distribution, conftest-fips, syft, flux-kustomize-controller, cyberark-secrets-provider-for-k8s, harbor-fips, otel-cli, cloud-provider-azure-fips, kots, chainloop-cli, grafana-agent-operator,...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: octo-sts, conftest-fips, syft, harbor-fips, otel-cli, cloud-provider-azure-fips, tfsec, skaffold-fips, spicedb, kubevirt-cdi-operator-fips, weaviate, prometheus-alertmanager, kube-metrics-adapter, gcp-compute-persistent-disk-csi-driver, cert-manager, minio-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: octo-sts, conftest-fips, syft, harbor-fips, otel-cli, cloud-provider-azure-fips, tfsec, skaffold-fips, spicedb, kubevirt-cdi-operator-fips, weaviate, prometheus-alertmanager, kube-metrics-adapter, gcp-compute-persistent-disk-csi-driver, cert-manager, minio-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: nri-mysql-fips, flux-kustomize-controller, fulcio-fips, prometheus-mysqld-exporter, kots, rekor-fips, gitea-fips, spicedb-fips, minio, percona-xtradb-cluster-operator, apko-fips, prometheus-mysqld-exporter-fips, spicedb, terragrunt, splunk-otel-collector,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, harbor-registry, gomplate, temporal-ui-server, skaffold, kots, argo-workflows, flux-kustomize-controller, neuvector-scanner, podman, undock, trufflehog, k3d, flux-source-controller, flyte, kiali, rook, distribution, spiffe-helper, k3s, vexctl,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: octo-sts, argo-cd-fips, distribution, trivy-fips, guac, flux-kustomize-controller, fulcio-fips, harbor-fips, kots, rekor-fips, harbor-registry-fips, argocd-image-updater, argo-cd, minio, prometheus-podman-exporter, terragrunt, external-secrets-fips, trivy, skopeo,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, harbor-registry, gomplate, temporal-ui-server, skaffold, kots, argo-workflows, flux-kustomize-controller, neuvector-scanner, podman, undock, trufflehog, k3d, flux-source-controller, flyte, kiali, rook, distribution, spiffe-helper, k3s, vexctl,...

OPENSUSE-SU-2025:14612-1 sops-3.9.3-1.1 on GA media

These are all security issues fixed in the sops-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: grafana, litestream, chezmoi, flux-kustomize-controller-fips, sops-fips, age, age-fips, ksops, flux-kustomize-controller, grafana-fips, sops...

GO-2022-0410 Local directory executable lookup in sops (Windows-only) in go.mozilla.org/sops

Local directory executable lookup in sops Windows-only in go.mozilla.org/sops...

OPENSUSE-SU-2024:14104-1 sops-3.9.0-1.1 on GA media

These are all security issues fixed in the sops-3.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: guac, flux-kustomize-controller, fulcio-fips, kots, rekor-fips, minio, terragrunt, external-secrets-fips, skopeo, weaviate, minio-fips, temporal-fips, temporal, kubescape, policy-controller, caddy-fips, frp, vault, sigstore-scaffolding-fips, falcoctl-fips, nerdctl,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, spire-server-fips, crossplane-provider-aws-s3, zot, flux-source-controller, grype, melange, crossplane-provider-aws-lambda, pulumi-language-dotnet, goreleaser, slsa-verifier, flux-kustomize-controller, syft,...

Malicious code in helm-secrets-sops-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90757472cd29931d6c7fbc69f6821bd0be3b056fdf34c1d231e3c4ad896f2f54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...