209 matches found
artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2026-76825 via restrictedpython (5.4.0)
restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2026-768...
blixa (1.1.4), dothttp-insomnia-importer (0.1.0) +3 more potentially affected by CVE-2026-76825 via restrictedpython (7.0.0)
restrictedpython PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - blixa 1.1.4 - dothttp-insomnia-importer 0.1.0 - dothttp-req =0.0.43a2, =0.0.5rc1, =0.8.5b2, =0.9.6b6 Source cves: CVE-2026-76825...
GO-2026-6444 vulnerabilities
Vulnerabilities for packages: eksctl, helm-set-status, steampipe, grype, wolfictl, k3s, kubescape, fuse-overlayfs-snapshotter, xeol, nerdctl, k8ssandra-client, syft, cluster-api-helm-controller, zarf, k9s, neuvector-scanner, skaffold, kargo, spegel, helm, scorecard, helm-operator, kube-arangodb,...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.51.1-0.2.hum1 aarch64, x8664 syft-1.51.1-0.2.hum1.src src Security Fixes: syft: CVE-2026-88922...
artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2026-55830 via restrictedpython (5.4.0)
restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2026-558...
blixa (1.1.4), dothttp-insomnia-importer (0.1.0) +3 more potentially affected by CVE-2026-55830 via restrictedpython (7.0.0)
restrictedpython PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - blixa 1.1.4 - dothttp-insomnia-importer 0.1.0 - dothttp-req =0.0.43a2, =0.0.5rc1, =0.8.5b2, =0.9.6b6 Source cves: CVE-2026-55830...
artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2026-55830 via restrictedpython (5.4.0)
restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2026-558...
blixa (1.1.4), dothttp-insomnia-importer (0.1.0) +3 more potentially affected by CVE-2026-55830 via restrictedpython (7.0.0)
restrictedpython PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - blixa 1.1.4 - dothttp-insomnia-importer 0.1.0 - dothttp-req =0.0.43a2, =0.0.5rc1, =0.8.5b2, =0.9.6b6 Source cves: CVE-2026-55830...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.51.1-0.1.hum1 aarch64, x8664 syft-1.51.1-0.1.hum1.src src...
GO-2024-2490 vulnerabilities
Vulnerabilities for packages: zarf, k9s, wolfictl, kubescape, syft, grype...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: zarf, k9s, kubescape, syft, grype-fips, mattermost-fips, trufflehog-fips, k9s-fips, grype-db, gotenberg, trufflehog, chainctl, wolfictl, syft-fips, grype, filebrowser, undock, cg, gptscript, kots, gitleaks, mattermost, chezmoi, nuclei...
GO-2026-5058 vulnerabilities
Vulnerabilities for packages: zarf, k9s, zarf-fips, kubescape, snyk-cli, packer, syft, grype-fips, task, k9s-fips, grype-db, kubescape-server, terragrunt-fips, trivy-fips, steampipe, cloudbeat-fips, tflint-fips, terragrunt, terraform-fips, xeol, chainctl, trivy-operator,...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: k3d, melange, policy-controller-fips, kaniko, dagger, cri-tools, wolfictl, docker-compose, harbor-scanner-trivy-fips, harbor-scanner-trivy, syft, neuvector-scanner, policy-controller, helm-push, grype, buf...
GO-2024-3110 vulnerabilities
Vulnerabilities for packages: neuvector-fips, opentelemetry-collector-contrib-fips, neuvector, syft, grafana-alloy, grafana-alloy-fips, cadvisor, cadvisor-fips, kubernetes, neuvector-scanner, neuvector-scanner-fips, podman, kubernetes-fips, buildah, gosu, cluster-autoscaler,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: zarf, k9s, skaffold, kaniko, kubescape, syft, nerdctl, newrelic-infrastructure-agent, k3d, cadvisor, kubernetes, skopeo, buildkitd, wolfictl, grype, k3s, zot, docker, trivy, runc, ctop, kots, podman...
GO-2025-3528 vulnerabilities
Vulnerabilities for packages: rancher-fleet-fips, neuvector-fips, linkerd2, flux-helm-controller-fips, kaniko, cert-manager-cmctl, dagger, envoy-gateway-fips, k8ssandra-client, kubescape, skaffold, neuvector, helm, syft, grype-fips, nerdctl, newrelic-infrastructure-agent, zarf, beats,...
GO-2026-5758 vulnerabilities
Vulnerabilities for packages: neuvector-fips, skaffold, harvester-fips, kaniko, zarf-fips, kube-arangodb-fips, scorecard, datadog-agent, tigera-operator-fips, rancher, k8sgpt, trivy-fips, cluster-api-helm-controller-fips, consul-k8s, helm-operator, docker-compose, kube-mgmt-fips,...
GO-2024-2490 vulnerabilities
Vulnerabilities for packages: syft, grype, wolfictl, zarf, k9s, kubescape...