CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: ratify-fips, kyverno-notation-aws, kubescape-server, commercial-chainloop-cli, cloudbeat, kubescape, commercial-chainloop-backend, commercial-kyverno, kyverno-fips, teleport, policy-controller, trivy-fips, chainctl, aactl, trivy, trivy-operator-fips, crossplane,...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: ratify-fips, kyverno-notation-aws, kubescape-server, commercial-chainloop-cli, cloudbeat, kubescape, commercial-chainloop-backend, commercial-kyverno, kyverno-fips, teleport, policy-controller, trivy-fips, chainctl, aactl, trivy, trivy-operator-fips, crossplane,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: ratify, kyverno, teleport, trivy, crossplane, zot, kyverno-notation-aws, policy-controller, aactl, slsa-verifier, trivy-operator, kubescape...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: ratify, kyverno, teleport, trivy, crossplane, zot, kyverno-notation-aws, policy-controller, aactl, slsa-verifier, trivy-operator, kubescape...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitea, containerd, k9s, traefik, kubescape-server, minio, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, k3s, calico-fips, trivy-fips, minio-fips, argocd-image-updater-fips, cloud-provider-aws,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: scorecard, flux-kustomize-controller, step-issuer, step, external-dns, flux, slsa-verifier, guac, neuvector-sigstore-interface, crossplane-provider-family-azure, pulumi, opentelemetry-collector, melange, kine, gitea, k8sgpt, osv-scanner, steampipe, openbao,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, trivy, k3s, external-dns, flux, minio, cert-manager, zarf, chisel, kubescape, mattermost, knative-serving, flux-source-controller, loki, opentelemetry-collector, kine, gitea, kots, aactl, osv-scanner, prometheus-operator, cilium,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: k3s, external-dns, flux, minio, cert-manager, mattermost, knative-serving, loki, opentelemetry-collector, buildah, kine, cloud-provider-aws, kots, aactl, prometheus-operator, cilium, prometheus, istio, helm, kubernetes-dashboard, podman, spire-server, telegraf,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, k3s, flux, external-dns, karpenter, libnvidia-container, chezmoi, hubble, cert-manager, kube-arangodb, external-secrets-operator, datadog-agent, kubescape, mattermost, dask-gateway, aws-flb-kinesis, kine, falco-no-driver, aactl, kots,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: teleport, buildkitd, trivy, slsa-verifier, neuvector-sigstore-interface, zarf, rekor, kubescape, ratify, flux-source-controller, crossplane, gh, vexctl, policy-controller, aactl, tflint, witness, goreleaser, skaffold, cosign, sigstore-scaffolding, spire-server,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: teleport, buildkitd, trivy, slsa-verifier, neuvector-sigstore-interface, zarf, rekor, kubescape, ratify, flux-source-controller, crossplane, gh, vexctl, policy-controller, aactl, tflint, witness, goreleaser, skaffold, cosign, sigstore-scaffolding, spire-server,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: teleport, buildkitd, trivy, slsa-verifier, neuvector-sigstore-interface, zarf, rekor, kubescape, ratify, flux-source-controller, crossplane, gh, vexctl, policy-controller, aactl, tflint, witness, goreleaser, skaffold, cosign, sigstore-scaffolding, spire-server,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: teleport, buildkitd, trivy, slsa-verifier, neuvector-sigstore-interface, zarf, rekor, kubescape, ratify, flux-source-controller, crossplane, gh, vexctl, policy-controller, aactl, tflint, witness, goreleaser, skaffold, cosign, sigstore-scaffolding, spire-server,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: ratify-fips, cg, skaffold-fips, rekor-fips, kyverno-notation-aws, falcoctl-fips, flux-source-controller-fips, buildkitd-fips, cloudbeat, kubescape, kyverno-policy-reporter-plugins-kyverno, rekor, cosign, buildkitd, cosign-fips, ko, kyverno-fips, teleport,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: ratify-fips, cg, skaffold-fips, rekor-fips, kyverno-notation-aws, falcoctl-fips, flux-source-controller-fips, buildkitd-fips, cloudbeat, kubescape, kyverno-policy-reporter-plugins-kyverno, rekor, cosign, buildkitd, cosign-fips, ko, kyverno-fips, teleport,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: ratify-fips, cg, skaffold-fips, rekor-fips, kyverno-notation-aws, falcoctl-fips, flux-source-controller-fips, buildkitd-fips, cloudbeat, kubescape, kyverno-policy-reporter-plugins-kyverno, rekor, cosign, buildkitd, cosign-fips, ko, kyverno-fips, teleport,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: ratify-fips, cg, skaffold-fips, rekor-fips, kyverno-notation-aws, falcoctl-fips, flux-source-controller-fips, buildkitd-fips, cloudbeat, kubescape, kyverno-policy-reporter-plugins-kyverno, rekor, cosign, buildkitd, cosign-fips, ko, kyverno-fips, teleport,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: guac, nsc, restic, kine, glow, osv-scanner, openbao, redka, s5cmd, helm, rabbitmq-cluster-operator, govulncheck, actions-runner-controller, harbor-scanner-trivy, k8ssandra-client, k8s-device-plugin, pgpool2exporter, sops, aws-load-balancer-controller,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: containerd, kyverno-notation-aws, traefik, cluster-api-azure-controller, kind, spark-operator, cluster-api-helm-controller, ipfs-cluster, terraform-provider-azapi, gobuster, spire-controller-manager, azuredisk-csi, wgcf, nri-apache, kubecolor, gatekeeper, rclone, k3d...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: promxy, kubeflow-katib, bom, k3s, bento, newrelic-infrastructure-agent, rancher-agent, rancher-machine, crossplane, portieris, aactl, openbao, k3d, kpt, skaffold, prometheus, xeol, cluster-api-helm-controller, amazon-cloudwatch-agent-operator, docker-credential-gcr,...