GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, commercial-kyverno, ko-fips, slsa-verifier, trivy, chainctl-fips, kubescape-server, cloudbeat-fips, trivy-fips, kubescape-server-fips, kyverno-notation-aws-fips, trivy-operator-fips, cloudbeat, kubescape, trivy-operator, kyverno,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, commercial-kyverno, ko-fips, slsa-verifier, trivy, chainctl-fips, kubescape-server, cloudbeat-fips, trivy-fips, kubescape-server-fips, kyverno-notation-aws-fips, trivy-operator-fips, cloudbeat, kubescape, trivy-operator, kyverno,...

CVE-2026-39395 vulnerabilities

Vulnerabilities for packages: ratify, kyverno, crossplane, trivy-operator, teleport, kubescape, policy-controller, aactl, slsa-verifier, zot, trivy, kyverno-notation-aws...

GHSA-W6C6-C85G-MMV6 vulnerabilities

Vulnerabilities for packages: ratify, kyverno, crossplane, trivy-operator, teleport, kubescape, policy-controller, aactl, slsa-verifier, zot, trivy, kyverno-notation-aws...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zarf-fips, harbor, osv-scanner, rancher, knative-eventing-fips, spire-server, k9s-fips, argocd-image-updater, vitess, docker-machine-driver-harvester, trivy-fips, cloudbeat, mattermost, prometheus-mongodb-exporter, flux-image-automation-controller-fips, snyk-cli,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, rancher, chisel, spire-server, fscrypt, kaf, kubescape, rancher-agent, flux-source-controller, flux-image-automation-controller, knative-serving, minio, external-dns, telegraf, vitess, cilium, k9s, skaffold, kubernetes,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: snyk-cli, chisel, pulumi-language-yaml, terragrunt, ksops, gomplate, wolfictl, caddy, fulcio, vault-benchmark, telegraf, cosign, dagger, witness, podman, pulumi-language-java, helm, kots, step-issuer, prometheus, crossplane-provider-azure-authorization, gh,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, buildah, rancher, spire-server, fscrypt, kaf, rancher-agent, knative-serving, minio, external-dns, telegraf, vitess, cilium, kubernetes, podman, k3s, nerdctl, flux, cloud-provider-aws, helm, mattermost, cert-manager, kots, containerd,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, spire-server, fscrypt, kaf, cilium-envoy, kubescape, net-kourier, falco-no-driver, gitaly, newrelic-fluent-bit-output, knative-serving, aws-flb-kinesis, redka, dask-gateway, external-secrets-operator, grafana, external-dns, hubble,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: crossplane, spire-server, kubescape, flux-source-controller, tekton-chains, falcoctl, docker, ratify, cosign, goreleaser, skaffold, slsa-verifier, ko, witness, neuvector-sigstore-interface, trivy-operator, rekor, tflint, aactl, zarf, gitsign, kyverno-notation-aws,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: crossplane, spire-server, kubescape, flux-source-controller, tekton-chains, falcoctl, docker, ratify, cosign, goreleaser, skaffold, slsa-verifier, ko, witness, neuvector-sigstore-interface, trivy-operator, rekor, tflint, aactl, zarf, gitsign, kyverno-notation-aws,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: crossplane, spire-server, kubescape, flux-source-controller, tekton-chains, falcoctl, docker, ratify, cosign, goreleaser, skaffold, slsa-verifier, ko, witness, neuvector-sigstore-interface, trivy-operator, rekor, tflint, aactl, zarf, gitsign, kyverno-notation-aws,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: crossplane, spire-server, kubescape, flux-source-controller, tekton-chains, falcoctl, docker, ratify, cosign, goreleaser, skaffold, slsa-verifier, ko, witness, neuvector-sigstore-interface, trivy-operator, rekor, tflint, aactl, zarf, gitsign, kyverno-notation-aws,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, zarf, cosign-fips, skaffold-fips, tkn-fips, ko-fips, slsa-verifier, spire-server, buildkitd, rekor-fips, trivy, reports-server, cloudbeat-fips, gitsign, rekor, cosign, ko, tekton-chains-fips, sigstore-scaffolding,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, zarf, cosign-fips, skaffold-fips, tkn-fips, ko-fips, slsa-verifier, spire-server, buildkitd, rekor-fips, trivy, reports-server, cloudbeat-fips, gitsign, rekor, cosign, ko, tekton-chains-fips, sigstore-scaffolding,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, zarf, cosign-fips, skaffold-fips, tkn-fips, ko-fips, slsa-verifier, spire-server, buildkitd, rekor-fips, trivy, reports-server, cloudbeat-fips, gitsign, rekor, cosign, ko, tekton-chains-fips, sigstore-scaffolding,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno-notation-aws, zarf, cosign-fips, skaffold-fips, tkn-fips, ko-fips, slsa-verifier, spire-server, buildkitd, rekor-fips, trivy, reports-server, cloudbeat-fips, gitsign, rekor, cosign, ko, tekton-chains-fips, sigstore-scaffolding,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nri-cassandra, mockery, nri-memcached, go-jsonnet, src, k8ssandra-operator, openbao-k8s, thanos, neuvector-dbgen, telegraf, mountpoint-s3-csi-driver, podman, kuberay-operator, kots, gobump, gostatsd, ip-masq-agent, kubernetes-csi-external-snapshotter,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: ini-file, k3d, harbor, ipfs-cluster, envconsul, rancher-system-agent, terraform-provider-azapi, rabbitmq-default-user-credential-updater, rabbitmq-messaging-topology-operator, gobump, rancher, wgcf, portieris, vitess, chart-testing, ko, grafana-pyroscope,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: lazydocker, rancher, crossplane, traefik, rancher-agent, xeol, falcoctl, portieris, ctop, cluster-api-helm-controller, falco, helm-set-status, kube-arangodb, skaffold, cluster-api, k3s, kubeflow-katib, kpt, docker-credential-gcr, k3d, opentelemetry-operator,...