CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: aactl, kine, spire-server, snyk-cli, k8s-device-plugin, cert-manager, cloud-provider-aws, grafana, istio, aws-flb-cloudwatch, runc, telegraf, zot, argo-cd, nerdctl, kube-arangodb, hubble, k3s, knative-serving, redka, newrelic-fluent-bit-output, falco-no-driver,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, goreleaser, buildkitd, cosign, crossplane, policy-controller, kyverno-notation-aws, rekor, trivy, vexctl, zot, trivy-operator, ratify, zarf, falcoctl, slsa-verifier, skaffold, tekton-chains, gitsign, flux-source-controller, docker, teleport,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, goreleaser, buildkitd, cosign, crossplane, policy-controller, kyverno-notation-aws, rekor, trivy, vexctl, zot, trivy-operator, ratify, zarf, falcoctl, slsa-verifier, skaffold, tekton-chains, gitsign, flux-source-controller, docker, teleport,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, goreleaser, buildkitd, cosign, crossplane, policy-controller, kyverno-notation-aws, rekor, trivy, vexctl, zot, trivy-operator, ratify, zarf, falcoctl, slsa-verifier, skaffold, tekton-chains, gitsign, flux-source-controller, docker, teleport,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, goreleaser, buildkitd, cosign, crossplane, policy-controller, kyverno-notation-aws, rekor, trivy, vexctl, zot, trivy-operator, ratify, zarf, falcoctl, slsa-verifier, skaffold, tekton-chains, gitsign, flux-source-controller, docker, teleport,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: trivy, neuvector-sigstore-interface-fips, cloudbeat-fips, spire-server-fips, vexctl, chainctl, kyverno-policy-reporter-plugins-kyverno, falcoctl, crossplane-fips, rekor, aactl, image-factory-fips, flux-source-controller-fips, crossplane, ratify-fips, cloudbeat,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: trivy, neuvector-sigstore-interface-fips, cloudbeat-fips, spire-server-fips, vexctl, chainctl, kyverno-policy-reporter-plugins-kyverno, falcoctl, crossplane-fips, rekor, aactl, image-factory-fips, flux-source-controller-fips, crossplane, ratify-fips, cloudbeat,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: trivy, neuvector-sigstore-interface-fips, cloudbeat-fips, spire-server-fips, vexctl, chainctl, kyverno-policy-reporter-plugins-kyverno, falcoctl, crossplane-fips, rekor, aactl, image-factory-fips, flux-source-controller-fips, crossplane, ratify-fips, cloudbeat,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: trivy, neuvector-sigstore-interface-fips, cloudbeat-fips, spire-server-fips, vexctl, chainctl, kyverno-policy-reporter-plugins-kyverno, falcoctl, crossplane-fips, rekor, aactl, image-factory-fips, flux-source-controller-fips, crossplane, ratify-fips, cloudbeat,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-nginx, thanos-operator, infinispan-operator, podinfo, rancher-fleet, incert, src-fingerprint, redka, hcloud, sftpgo-plugin-eventsearch, dive, terraform-docs, nri-postgresql, opa-envoy, net-kourier, go-md2man, k6, prometheus-alertmanager,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: nri-redis, trivy, migrate, rabbitmq-default-user-credential-updater, cerbos, oauth2-proxy, gendesk, prometheus, falcoctl, dapr, nri-memcached, helm-operator, karpenter, contour, ratify, rke2-runtime, telegraf, dive, azure-service-operator, apm-server, cis-operator,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: aactl, portieris, crossplane, helm-mapkubeapis, traefik, amazon-cloudwatch-agent-operator, rancher, docker-credential-gcr, rancher-agent, promxy, undock, newrelic-infrastructure-agent, lazydocker, kube-arangodb, k3s, bom, kubeflow-katib, xeol, falcoctl, bento,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, kpt, opentelemetry-operator-fips, harbor, istio, neuvector-scanner-fips, newrelic-infrastructure-agent, cluster-api-helm-controller, prometheus, rancher-agent, docker-credential-gcr-fips, falcoctl, crossplane-fips,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: dbmate, temporal-ui-server, cert-manager, thanos-operator, src-fingerprint, vault-k8s, timoni, amazon-k8s-cni, mc, falcoctl, hcloud, sftpgo-plugin-eventsearch, dive, opa-envoy, k6, prometheus-alertmanager, kubernetes-dns-node-cache, tkn,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, nri-nginx, thanos-operator, incert, src-fingerprint, redka, vault-k8s, timoni, amazon-k8s-cni, falcoctl, hcloud, nri-postgresql, go-md2man, k6, prometheus-alertmanager, kubernetes-dns-node-cache, tkn, flux-image-reflector-controller, syft,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: dbmate, cert-manager, nri-nginx, thanos-operator, incert, src-fingerprint, redka, vault-k8s, timoni, amazon-k8s-cni, falcoctl, hcloud, nri-postgresql, go-md2man, k6, prometheus-alertmanager, kubernetes-dns-node-cache, tkn, flux-image-reflector-controller, syft,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: fulcio-fips, nri-redis, opentofu-fips, git-sync, rabbitmq-default-user-credential-updater, vertical-pod-autoscaler-fips, gatekeeper-fips, opentelemetry-collector, licenseclassifier, yace, agentbeat, kubernetes-dashboard-metrics-scraper, crossplane-fips, kubernetes,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: spire-server, terragrunt, secrets-store-csi-driver-provider-azure, step-kms-plugin, cert-manager, buildkitd, cosign, falcosidekick, policy-controller, aws-eks-pod-identity-agent, thanos, sops, rancher, gomplate, loki, timestamp-authority, zot, harbor-registry, mc,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: fulcio-fips, php-fpmexporter, vertical-pod-autoscaler-fips, rabbitmq-default-user-credential-updater, kubernetes-dashboard-metrics-scraper, kubernetes, tfsec, cilium-fips, http-echo, prometheus-alertmanager-fips, cfssl, scorecard, litefs, coredns, tigera-operator-fip...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: spire-server-fips, vexctl, chainctl, falcoctl, aactl, spire-server, policy-controller, falco, zot, slsa-verifier, tekton-chains, ko-fips, ko, neuvector-sigstore-interface, kubescape, tkn-fips, wolfictl, policy-controller-fips, gitsign, falcoctl-fips, tkn, goreleaser,...