GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno-notation-aws, ratify, spire-server, gh, sigstore-scaffolding, rekor, tkn, goreleaser, kubescape, neuvector-sigstore-interface, docker, vexctl, skaffold, ko, witness, tekton-chains, slsa-verifier, falcoctl, teleport, aactl, flux-source-controller,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno-notation-aws, ratify, spire-server, gh, sigstore-scaffolding, rekor, tkn, goreleaser, kubescape, neuvector-sigstore-interface, docker, vexctl, skaffold, ko, witness, tekton-chains, slsa-verifier, falcoctl, teleport, aactl, flux-source-controller,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: kubescape, gh, ko, kyverno-policy-reporter-plugins-kyverno-fips, tflint-fips, cloudbeat-fips, sigstore-scaffolding-fips, zot, teleport-operator-fips, falcoctl-fips, gitsign, sigstore-scaffolding, spire-server, image-factory, kyverno, witness, rekor-fips,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: kubescape, gh, ko, kyverno-policy-reporter-plugins-kyverno-fips, tflint-fips, cloudbeat-fips, sigstore-scaffolding-fips, zot, teleport-operator-fips, falcoctl-fips, gitsign, sigstore-scaffolding, spire-server, image-factory, kyverno, witness, rekor-fips,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: kubescape, gh, ko, kyverno-policy-reporter-plugins-kyverno-fips, tflint-fips, cloudbeat-fips, sigstore-scaffolding-fips, zot, teleport-operator-fips, falcoctl-fips, gitsign, sigstore-scaffolding, spire-server, image-factory, kyverno, witness, rekor-fips,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: kubescape, gh, ko, kyverno-policy-reporter-plugins-kyverno-fips, tflint-fips, cloudbeat-fips, sigstore-scaffolding-fips, zot, teleport-operator-fips, falcoctl-fips, gitsign, sigstore-scaffolding, spire-server, image-factory, kyverno, witness, rekor-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, gitness, sftpgo-plugin-eventsearch, grafana, task, k8ssandra-operator, newrelic-prometheus-configurator, fuse-overlayfs-snapshotter, kor, newrelic-nri-statsd, kafkaexporter, cluster-api-aws-controller, kube-metrics-adapter,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: libnvidia-container, kubeflow-katib, undock, cluster-api, zot, amazon-cloudwatch-agent-operator, cluster-api-azure-controller, docker-machine-driver-harvester, lazydocker, rabbitmq-cluster-operator, glow, cilium-cli, dapr, wgcf, aws-otel-collector, cg, harbor,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, portieris, newrelic-infrastructure-agent, rancher-agent, promxy, docker-credential-gcr, bom, ctop, k3s, amazon-cloudwatch-agent-operator, k3d, skaffold, prometheus, rancher-machine, undock, helm-mapkubeapis, bento, kpt,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: docker-credential-gcr-fips, kubeflow-katib, harbor-scanner-trivy-fips, undock, cluster-api, promxy, amazon-cloudwatch-agent-operator, gitlab-rails-ce, amazon-ecs-agent, falcoctl-fips, traefik-fips, lazydocker, portieris, newrelic-infrastructure-agent, consul-k8s-fips...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, flux-kustomize-controller, gitness, sftpgo-plugin-eventsearch, cadvisor, victoriametrics-operator, task, k8ssandra-operator, cloudnative-pg, yq, fuse-overlayfs-snapshotter, argo-rollouts, kor, newrelic-nri-statsd, aws-network-policy-agent,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, gitness, cadvisor, task, cloudnative-pg, yq, fuse-overlayfs-snapshotter, newrelic-nri-statsd, aws-network-policy-agent, kafkaexporter, cert-exporter, fulcio, docker-credential-ecr-login, undock, kube-metrics-adapter, age, multus-cni,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, gitness, cadvisor, task, cloudnative-pg, yq, fuse-overlayfs-snapshotter, newrelic-nri-statsd, aws-network-policy-agent, kafkaexporter, cert-exporter, fulcio, docker-credential-ecr-login, undock, kube-metrics-adapter, age, multus-cni,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kbld, libnvidia-container, yq-fips, metallb, amazon-cloudwatch-agent-operator, postgres-operator-fips, fuse-overlayfs-snapshotter, pgtimetable-fips, wgcf, cert-manager-webhook-pdns-fips, gcp-compute-persistent-disk-csi-driver-fips, sriov-network-device-plugin,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: timestamp-authority, flux-notification-controller, flux-kustomize-controller, gitness, promxy, oauth2-proxy, hydra, argo-rollouts, docker, kubernetes-dashboard-auth, k3s, gomplate, skaffold, kyverno-policy-reporter-ui, fulcio, ko, kube-metrics-adapter,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, libnvidia-container, grpcurl, mage, multus-cni, prometheus-postgres-exporter-fips, metacontroller, extism, glab, govulncheck, zot, pombump, secrets-store-csi-driver-provider-gcp, cadvisor, falcoctl-fips, fuse-overlayfs-snapshotter,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: spire-server, apko, goreleaser, kubescape, neuvector-sigstore-interface, wolfictl, vexctl, skaffold, melange, gitsign, ko, tekton-chains, slsa-verifier, falcoctl, aactl, flux-source-controller, zarf, zot, tkn, policy-controller...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: kubescape, ko, zot, apko, falcoctl-fips, gitsign, spire-server, zarf, spire-server-fips, slsa-verifier, falcoctl, tkn-fips, tekton-chains, tekton-chains-fips, flux-source-controller, goreleaser, ko-fips, policy-controller, neuvector-sigstore-interface, melange, tkn,...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: spire-server, apko, goreleaser, kubescape, neuvector-sigstore-interface, wolfictl, vexctl, skaffold, melange, gitsign, ko, tekton-chains, slsa-verifier, falcoctl, aactl, flux-source-controller, zarf, zot, tkn, policy-controller...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: spire-server, apko, goreleaser, kubescape, neuvector-sigstore-interface, wolfictl, vexctl, skaffold, melange, gitsign, ko, tekton-chains, slsa-verifier, falcoctl, aactl, flux-source-controller, zarf, zot, tkn, policy-controller...