CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, reports-server, kyverno-fips, policy-controller-fips, cg, trivy, zot, flux-source-controller-fips, falcoctl, crossplane-fips, chainctl, teleport-operator-fips, docker, image-factory, teleport, tkn, kyverno-notation-aws-fips, ratify-fips,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, reports-server, kyverno-fips, policy-controller-fips, cg, trivy, zot, flux-source-controller-fips, falcoctl, crossplane-fips, chainctl, teleport-operator-fips, docker, image-factory, teleport, tkn, kyverno-notation-aws-fips, ratify-fips,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, reports-server, kyverno-fips, policy-controller-fips, cg, trivy, zot, flux-source-controller-fips, falcoctl, crossplane-fips, chainctl, teleport-operator-fips, docker, image-factory, teleport, tkn, kyverno-notation-aws-fips, ratify-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: runc, spark-operator, sftpgo-plugin-kms, kube-vip, kubeflow, rabbitmq-messaging-topology-operator, kube-vip-cloud-provider, src-fingerprint, gitlab-pages, pdfcpu, policy-controller, temporal-ui-server, terraform-provider-tls, kapp, rancher-fleet,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: gcsfuse, cg, trivy, wgcf, zot, tigera-operator, kubernetes-dashboard-web, aws-application-networking-k8s, swagger, migrate, oauth2-proxy, kubernetes-dashboard-api, headlamp, rabbitmq-cluster-operator, step-kms-plugin, cluster-api-helm-controller, cluster-api, polaris...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, crossplane, promxy, rancher-agent, undock, ctop, kubeflow-katib, k3s, skaffold, lazydocker, falcoctl, aactl, bento, amazon-cloudwatch-agent-operator, openbao, bom, helm-set-status, docker-credential-gcr, rancher-machine, prometheus,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: helm-set-status, xeol-fips, falcoctl, beats, harvester-fips, xeol, opentelemetry-operator, gitlab-rails-ce-fips, portieris-fips, cluster-api-fips, harbor-scanner-trivy-fips, rancher-agent, redpanda, harbor-fips, kubevirt-cdi-uploadserver, harbor, rancher, undock,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: runc, crossplane-provider-aws-elasticache, terraform-provider-acme, spark-operator, sftpgo-plugin-kms, kubeflow, rabbitmq-messaging-topology-operator, src-fingerprint, terraform-provider-grafana, temporal-ui-server, terraform-provider-tls, controller-gen, kapp,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: runc, terraform-provider-acme, wire-go, ini-file, rabbitmq-messaging-topology-operator, src-fingerprint, pdfcpu, terraform-provider-grafana, policy-controller, terraform-provider-tls, controller-gen, kapp, capslock, flux-image-reflector-controller, kwok, malcontent,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: runc, terraform-provider-acme, wire-go, ini-file, rabbitmq-messaging-topology-operator, src-fingerprint, pdfcpu, terraform-provider-grafana, policy-controller, terraform-provider-tls, controller-gen, kapp, capslock, flux-image-reflector-controller, kwok, malcontent,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: malcontent, trivy, wgcf, kafkaexporter, aws-application-networking-k8s, flux-kustomize-controller, scorecard, nvidia-nsight-compute-13.0, prometheus-redis-exporter, sbom-convert, doppler-kubernetes-operator, rabbitmq-cluster-operator, grpcurl,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: cosign, kaniko, sftpgo-plugin-kms, goreleaser, minio-operator, k8sgpt, kyverno-notation-aws, policy-controller, falcosidekick, skaffold, falcoctl, opencost, flux-notification-controller, crossplane-provider-azure-authorization, flux-image-reflector-controller, openba...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, cert-exporter, trillian-fips, trivy, logstash-exporter, karpenter-fips, rootlesskit, wave-fips, kafkaexporter, tigera-operator, smarter-device-manager, wgcf, zot, prometheus-stackdriver-exporter, metrics-server-fips,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: policy-controller-fips, zot, falcoctl, chainctl, tkn, tekton-chains-fips, tkn-fips, slsa-verifier, melange, apko, neuvector-sigstore-interface, gitsign, zarf, ko-fips, wolfictl, kubescape, skaffold, spire-server-fips, vexctl, aactl, tekton-chains,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: flux-source-controller, goreleaser, apko, zot, policy-controller, skaffold, falcoctl, neuvector-sigstore-interface, aactl, tekton-chains, tkn, kubescape, melange, vexctl, slsa-verifier, spire-server, ko, wolfictl, zarf, gitsign...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: flux-source-controller, goreleaser, apko, zot, policy-controller, skaffold, falcoctl, neuvector-sigstore-interface, aactl, tekton-chains, tkn, kubescape, melange, vexctl, slsa-verifier, spire-server, ko, wolfictl, zarf, gitsign...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: flux-source-controller, goreleaser, apko, zot, policy-controller, skaffold, falcoctl, neuvector-sigstore-interface, aactl, tekton-chains, tkn, kubescape, melange, vexctl, slsa-verifier, spire-server, ko, wolfictl, zarf, gitsign...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, zot, falcoctl, chainctl, tkn, tekton-chains-fips, tkn-fips, slsa-verifier, melange, apko, neuvector-sigstore-interface, gitsign, zarf, ko-fips, wolfictl, kubescape, skaffold, spire-server-fips, vexctl, aactl, tekton-chains,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, zot, falcoctl, chainctl, tkn, tekton-chains-fips, tkn-fips, slsa-verifier, melange, apko, neuvector-sigstore-interface, gitsign, zarf, ko-fips, wolfictl, kubescape, skaffold, spire-server-fips, vexctl, aactl, tekton-chains,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: flux-source-controller, goreleaser, apko, zot, policy-controller, skaffold, falcoctl, neuvector-sigstore-interface, aactl, tekton-chains, tkn, kubescape, melange, vexctl, slsa-verifier, spire-server, ko, wolfictl, zarf, gitsign...