GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: jaeger-operator-fips, rancher-system-upgrade-controller, crossplane-provider-aws-fis, tetragon, crossplane-provider-gcp-beta-cloudplatform-fips, crossplane-provider-aws-chime, gitlab-operator, k8s-metacollector, consul-k8s, kapp, spire-server, kafkaexporter-fips,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: bazelisk, steampipe, flux-kustomize-controller, nri-couchbase, helm-operator, spire-server, dbmate, rancher-fleet, configmap-reload, k6, kubernetes-csi-node-driver-registrar, src, docker-machine-driver-linode, local-static-provisioner, oauth2-proxy, pguser, direnv,...

GO-2025-3917 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: syft, zarf, grype, kubescape, k9s, wolfictl...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: dataplaneapi, timoni, gptscript, nuclei, dataplaneapi-fips...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-push, nova, linkerd2, k9s-fips, trivy-fips, headlamp-fips, pluto-fips, helm-operator, istio, k8sgpt, consul-k8s, k9s, harbor-fips, chart-testing, flux-source-controller, nova-fips, chart-testing-fips, headlamp, flux-helm-controller-fips, chartmuseum,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: rustls-ffi, rustup, rye, parseable, ztunnel-fips, lychee, nushell, samply, zizmor, shadowsocks-rust, wasmcloud, xh, fnm, wasmtime, ntpd-rs, zola, cargo-audit, deno, kdash, buck2, atuin, uv, pixi, zed, linkerd2-proxy, oranda, ztunnel, sqlx, sccache, qdrant,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: trivy-fips, vexctl, tkn-fips, kyverno-notation-aws-fips, aactl, ratify-fips, kyverno-fips, commercial-chainloop-backend, kyverno-notation-aws, commercial-kyverno, crossplane-fips, tekton-chains-fips, zot, commercial-chainloop-cli, teleport, skaffold, ko,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: jaeger-operator-fips, nvidia-nsight-compute-13.0, helm-push, prometheus-adapter, aws-flb-firehose, terraform-provider-tls, redis-operator-fips, consul-k8s, yace, amazon-k8s-cni-fips, kapp, spire-server, kafkaexporter-fips, controller-gen, dagdotdev, fulcio,...

GO-2025-3460 vulnerabilities

Vulnerabilities for packages: zot, kots...

GO-2024-2870 vulnerabilities

Vulnerabilities for packages: zot, k8sgpt, kubescape...

GO-2024-2656 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, linkerd2, envoy-gateway, helm-push, zot, k9s, tw, chart-testing, helm-docs, helm-operator, trivy, istio, rancher-fleet, chartmuseum, pluto, zarf, rancher-helm, cerbos, k8ssandra-client, flux-helm-controller, cilium-cli, flux-source-controller,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, linkerd2, helm-push, k9s, headlamp, steampipe, kube-arangodb, gatekeeper, maru, teleport, kubescape-operator, tw, helm-set-status, rancher, rancher-agent, gogatekeeper, manifest-tool, helm-operator, trivy, kyverno-notation-aws, rancher-fleet,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, envoy-gateway, aws-otel-collector, zot, podman, undock, ko, nuclei, rancher, buildah, opentelemetry-operator, rancher-agent, rancher-machine, portieris, spire-server, trivy, amazon-cloudwatch-agent-operator, grafana, trivy-operator, skopeo,...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, envoy-gateway, aws-otel-collector, zot, podman, undock, ko, nuclei, rancher, buildah, opentelemetry-operator, rancher-agent, rancher-machine, portieris, spire-server, trivy, amazon-cloudwatch-agent-operator, grafana, trivy-operator, skopeo, kot...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, aws-node-termination-handler, gitlab-pages, cadvisor, kube-arangodb, gitlab-runner, cluster-api, gatekeeper, openfga, steampipe, ingress-nginx-controller, datadog-operator, db-operator, grafana-agent-operator, kaniko, keda, openbao,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: cosign, skopeo, zarf, aactl, slsa-verifier, sigstore-scaffolding, kots, vexctl, tekton-chains, kubescape, witness, falcoctl, falco-no-driver, gitsign...

Qualys Expands Serverless Security with Vulnerability Scanning for AWS Lambda

Key Takeaways Qualys now delivers automated AWS Lambda vulnerability scanning , extending serverless security beyond posture checks CSPM into workload-level risk visibility. CSPM alone only catches misconfigurations excessive permissions, exposure, logging, encryption — it can't detect vulnerable...