CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: opa, k3s, restic, wgcf, flux-image-reflector-controller, petname, opentofu, azcopy, swagger, tailscale, rootlesskit, nodetaint, step, libnvidia-container, direnv, linkerd2-proxy-init, cargobump, prometheus-adapter, cluster-proportional-autoscaler,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: opa, k3s, restic, wgcf, flux-image-reflector-controller, petname, opentofu, azcopy, swagger, tailscale, rootlesskit, nodetaint, step, libnvidia-container, direnv, linkerd2-proxy-init, cargobump, prometheus-adapter, cluster-proportional-autoscaler,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, git-lfs, nri-f5, nri-apache, kubewatch, docker-fips, govulncheck, step-fips, ytt, ingress-nginx-controller-fips, cloudnative-pg, kafkaexporter-fips, gosu, oauth2-proxy-fips, slsa-verifier, dataplaneapi, overmind,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: chezmoi, step, buildkitd, fluent-bit-plugin-loki, druid, tekton-chains-fips, step-fips, prometheus-operator, spire-server-fips, cluster-autoscaler-fips, restic, request-1276, spire-server, ksops, thanos, thanos-fips, timestamp-authority-fips, trino, trivy, kubescape,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, trino, rook, harbor-registry, chezmoi, rclone, trivy, spire-server, secrets-store-csi-driver-provider-azure, restic, hugo-extended, zot, flux-image-reflector-controller, sqlpad, terragrunt, grafana-mimir, py3-azure-identity, ksops,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: tkn, ko-fips, zot, goreleaser, zarf, skaffold, ko, policy-controller, tekton-chains-fips, wolfictl, neuvector-sigstore-interface, spire-server-fips, aactl, policy-controller-fips, tekton-chains, flux-source-controller, slsa-verifier, spire-server, tkn-fips, kubescape...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: aactl, spire-server, zot, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, vexctl, kubescape, slsa-verifier, melange, falcoctl, tekton-chains, apko, skaffold, goreleaser, wolfictl, tkn, flux-source-controller...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: aactl, spire-server, zot, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, vexctl, kubescape, slsa-verifier, melange, falcoctl, tekton-chains, apko, skaffold, goreleaser, wolfictl, tkn, flux-source-controller...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, zot, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, vexctl, kubescape, slsa-verifier, melange, falcoctl, tekton-chains, apko, skaffold, goreleaser, wolfictl, tkn, flux-source-controller...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: tkn, ko-fips, zot, goreleaser, zarf, skaffold, ko, policy-controller, tekton-chains-fips, wolfictl, neuvector-sigstore-interface, spire-server-fips, aactl, policy-controller-fips, tekton-chains, flux-source-controller, slsa-verifier, spire-server, tkn-fips, kubescape...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: tkn, ko-fips, zot, goreleaser, zarf, skaffold, ko, policy-controller, tekton-chains-fips, wolfictl, neuvector-sigstore-interface, spire-server-fips, aactl, policy-controller-fips, tekton-chains, flux-source-controller, slsa-verifier, spire-server, tkn-fips, kubescape...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, zot, neuvector-sigstore-interface, gitsign, zarf, ko, policy-controller, vexctl, kubescape, slsa-verifier, melange, falcoctl, tekton-chains, apko, skaffold, goreleaser, wolfictl, tkn, flux-source-controller...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: kargo, tkn, cilium-cli, grype, buildkitd, zot, kaniko, ko, wolfictl, spire-server-fips, aactl, ctop, crossplane, cadvisor-fips, cadvisor, spire-server, trivy, prometheus, syft, buf, docker-compose, kubescape, loki, up, conftest-fips, conftest, dagger, melange...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: kargo, tkn, cilium-cli, grype, buildkitd, zot, kaniko, ko, wolfictl, spire-server-fips, aactl, ctop, crossplane, cadvisor-fips, cadvisor, spire-server, trivy, prometheus, syft, buf, docker-compose, kubescape, loki, up, conftest-fips, conftest, dagger, melange...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: rook, aactl, spire-server, grpc-health-probe, dgraph, k3s, weaviate, zot, temporal-ui-server, minio, terragrunt, kube-rbac-proxy, gitsign, flux-kustomize-controller, zarf, frp, ko, nerdctl, kargo, oauth2-proxy, policy-controller, temporal, vexctl, step, kubescape,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: falcoctl, boring-registry, spire-server-fips, mc, external-secrets-fips, minio-fips, boring-registry-fips, spire-server, falcoctl-fips, mc-fips, minio...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl, boring-registry, spire-server-fips, mc, external-secrets-fips, minio-fips, boring-registry-fips, spire-server, falcoctl-fips, mc-fips, minio...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: gitsign, tekton-chains, spire-server, vexctl, kubescape, minio, falcoctl, mc, boring-registry...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: tkn, boring-registry, kubevela, sops, grype, crossplane-provider-aws-cloudformation, cosign, pulumi-language-dotnet, zot, goreleaser, flux-kustomize-controller, crossplane-provider-aws-ec2, pulumi-kubernetes-operator, actions-runner-controller, skaffold, zarf,...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: ko, policy-controller, tkn, spire-server-fips, aactl, tekton-chains, flux-source-controller, cosign, skaffold, spire-server, melange, kubescape, slsa-verifier, falcoctl-fips, apko...