GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: gitsign, guac, wolfictl, src-fingerprint, dagger, teleport, goreleaser, nfpm, flux-kustomize-controller, snyk-cli, kots, steampipe, zarf, zot, argo-events, osv-scanner, tfsec, argocd-image-updater, gitaly, flux-image-automation-controller, k9s, rancher-fleet,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: gitsign, guac, wolfictl, src-fingerprint, dagger, teleport, goreleaser, nfpm, flux-kustomize-controller, snyk-cli, kots, steampipe, zarf, zot, argo-events, osv-scanner, tfsec, argocd-image-updater, gitaly, flux-image-automation-controller, k9s, rancher-fleet,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, grafana-alloy-fips, src-fingerprint-fips, packer, wolfictl, gitlab-runner-fips, bom, gomplate, skaffold-fips, gitea, gitea-fips, grype-fips, trufflehog, pulumi, chainctl, cloudbeat-fips, gitlab-rails-ce-fips, kubevela, xeol-fips, kyverno,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: flux-source-controller, grafana-alloy-fips, src-fingerprint-fips, packer, wolfictl, gitlab-runner-fips, bom, gomplate, skaffold-fips, gitea, gitea-fips, grype-fips, trufflehog, pulumi, chainctl, cloudbeat-fips, gitlab-rails-ce-fips, kubevela, xeol-fips, kyverno,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: delve, guac, nri-mysql, rancher-system-upgrade-controller, wgcf, kubernetes-dashboard-auth, neuvector-sigstore-interface, docker-machine-driver-harvester, render-template, gobuster, docker-cli, dgraph, kubernetes-csi-external-health-monitor, kubeflow-katib, src,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: wait-for-port, libnvidia-container, migrate, timescaledb-tune, helm-push, grafana-pyroscope, neuvector-sigstore-interface, azure-service-operator, kubernetes-dashboard-auth, bom, tekton-chains, prometheus-operator, k3d, azuredisk-csi, k8sgpt, nri-memcached, nri-nginx...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: wait-for-port, libnvidia-container, migrate, timescaledb-tune, helm-push, grafana-pyroscope, neuvector-sigstore-interface, azure-service-operator, kubernetes-dashboard-auth, bom, tekton-chains, prometheus-operator, k3d, azuredisk-csi, k8sgpt, nri-memcached, nri-nginx...

GHSA-JC7W-C686-C4V9 vulnerabilities

Vulnerabilities for packages: guac, tflint, undock, filebrowser, nsc, gitness, vcluster, steampipe, zarf, zot, rancher-fleet, k9s, trivy-operator, terragrunt, opentofu, xeol, trufflehog, nuclei, gitleaks, trivy, gptscript, terraform, grafana-alloy, envoy-gateway, podman, kubescape-operator...

CVE-2025-58058 vulnerabilities

Vulnerabilities for packages: guac, tflint, undock, filebrowser, nsc, gitness, vcluster, steampipe, zarf, zot, rancher-fleet, k9s, trivy-operator, terragrunt, opentofu, xeol, trufflehog, nuclei, gitleaks, trivy, gptscript, terraform, grafana-alloy, envoy-gateway, podman, kubescape-operator...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: tflint, wolfictl, conftest, snyk-cli, steampipe, kots, zarf, zot, tfsec, rancher-fleet, k9s, trivy-operator, terragrunt, kubescape, opentofu, xeol, syft, trivy, terraform, grype...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: tflint, wolfictl, conftest, snyk-cli, steampipe, kots, zarf, zot, tfsec, rancher-fleet, k9s, trivy-operator, terragrunt, kubescape, opentofu, xeol, syft, trivy, terraform, grype...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: k9s, syft, snyk-cli, syft-fips, trivy, wolfictl, rancher-fleet, trivy-operator-fips, conftest, opentofu-fips, grype-fips, zot, tflint, chainctl, kots, zarf, terragrunt, cloudbeat-fips, xeol-fips, terraform, terraform-fips, kubescape, conftest-fips, steampipe,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: k9s, syft, snyk-cli, syft-fips, trivy, wolfictl, rancher-fleet, trivy-operator-fips, conftest, opentofu-fips, grype-fips, zot, tflint, chainctl, kots, zarf, terragrunt, cloudbeat-fips, xeol-fips, terraform, terraform-fips, kubescape, conftest-fips, steampipe,...

Malicious code in steampipe-reports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da60e6d3d0eabe3a13ee33ff083b62e33e8c5dd6a42852a73061c0ce975fa140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...