139 matches found
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
syft
Syft Una herramienta CLI y biblioteca Go para generar una Lista de Materiales de Software SBOM a partir de imágenes de contenedores y sistemas de archivos. Excepcional para la detección de vulnerabilidades cuando se usa con un escáner comoGrype. Características Genera SBOMs para imágenes de...
ndaal_public_SBOM_Auditor
ndaal SBOM Auditor A single-binary, offline web application to investigate SBOM Software Bill of Materials files. Upload an SBOM or import a folder of them, analyse each with an ensemble of independent tools, review the normalised findings in one local UI, and export the result in eight formats. ...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: docker-compose, skaffold, kubescape-operator, chartmuseum, helm-set-status, nerdctl, kube-arangodb, kubevela, neuvector-scanner, rancher-agent, trivy, falco-no-driver, tigera-operator, gatekeeper, k9s, k8sgpt, trivy-operator, k3s, helm-operator, kubescape, buildkitd,...
syft v1.52.0
Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype. Features Generates SBOMs for container images , filesystems , archives see the docs for a full list of...
CLEANSTART-2026-LL04438 Security fix for CVE-2026-33762 applied in: argo-cd 3.2.7-r2, argo-cd 3.3.5-r2, argo-cd-fips 3.1.14-r0, argo-cd-fips 3.2.9-r0, external-secrets-fips 0.17.0-r2, flux-image-automation-controller-fips 4.0.1-r0, gitlab-runner 18.11.1-r0, gptscript 0.9.8-r0, grafana-alloy 1.13.1-r1, grafana-alloy 1.14.0-r1, grafana-alloy 1.14.1-r1, grafana-alloy 1.14.2-r0, grafana-alloy 1.15.0-r0, grafana-alloy 1.16.0-r0, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-alloy-fips 1.16.0-r0, kubevela 1.10.8-r0, pulumi-kubernetes-operator 2.7.0-r0, syft 1.42.4-r0, timoni 0.25.2-r0
CVE-2026-33762 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.52.0-0.1.hum1 aarch64, x8664 syft-1.52.0-0.1.hum1.src src...
GO-2026-6444 vulnerabilities
Vulnerabilities for packages: docker-compose, skaffold, kubescape-operator, chartmuseum, helm-set-status, nerdctl, kube-arangodb, kubevela, neuvector-scanner, rancher-agent, trivy, tigera-operator, gatekeeper, k9s, k8sgpt, trivy-operator, k3s, helm-operator, kubescape, buildkitd, rancher,...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.51.1-0.2.hum1 aarch64, x8664 syft-1.51.1-0.2.hum1.src src Security Fixes: syft: CVE-2026-88922...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.51.1-0.1.hum1 aarch64, x8664 syft-1.51.1-0.1.hum1.src src...
GO-2024-2490 vulnerabilities
Vulnerabilities for packages: wolfictl, kubescape, syft, zarf, grype, k9s...
GO-2026-5058 vulnerabilities
Vulnerabilities for packages: snyk-cli, cloudbeat, terragrunt-fips, cg, cloudbeat-fips, k9s-fips, xeol, kots, grype-fips, trivy-operator-fips, packer, task-fips, zarf-fips, zot, terragrunt, tfsec, k9s, opentofu, tflint, kubescape-server-fips, grype-db, conftest-fips, trivy-operator,...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: cg, gptscript, k9s-fips, kots, grype-fips, k9s, grype-db, nuclei, chainctl, filebrowser, mattermost-fips, zarf, grype, wolfictl, trufflehog, mattermost, undock, chezmoi, trufflehog-fips, kubescape, syft, gitleaks, gotenberg, syft-fips...
GO-2024-3110 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, opentelemetry-collector-contrib-fips, neuvector-scanner-fips, k8s-device-plugin, cluster-autoscaler-fips, kubernetes, k3s, buildah, grafana-alloy, neuvector-fips, neuvector, gosu, grype, cadvisor-fips, neuvector-scanner, syft,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: kots, zot, kubernetes, buildkitd, newrelic-infrastructure-agent, k3s, k9s, zarf, skopeo, grype, wolfictl, skaffold, kubescape, syft, docker, k3d, nerdctl, cadvisor, podman, kaniko, trivy, runc, ctop...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: k3d, melange, harbor-scanner-trivy-fips, buf, harbor-scanner-trivy, policy-controller, dagger, docker-compose, wolfictl, neuvector-scanner, helm-push, kaniko, syft, grype, policy-controller-fips, cri-tools...
GO-2025-3528 vulnerabilities
Vulnerabilities for packages: k8ssandra-client-fips, kubevela, neuvector-scanner-fips, xeol, kots, grype-fips, k8ssandra-client, zot, buildkitd, envoy-gateway, cluster-api-helm-controller, beats-fips, k3s, cluster-api-helm-controller-fips, melange, newrelic-infrastructure-agent, osv-scanner,...
GO-2026-5758 vulnerabilities
Vulnerabilities for packages: helm-exporter-fips, zarf-fips, envoy-gateway, k3s, tigera-operator-fips, helm-mapkubeapis, docker-fips, neuvector-fips, helm-exporter, grype, wolfictl, chartmuseum-fips, helmfile, rancher-helm, skaffold, consul-k8s-fips, k8sgpt, kubescape-server, rancher-agent,...