GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, witness, falcoctl, tkn, slsa-verifier, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: tflint, gitsign, neuvector-sigstore-interface, tekton-chains, witness, falcoctl, tkn, slsa-verifier, buildkitd, trivy, flux-source-controller, kyverno-notation-aws, vexctl, teleport, gh, trivy-operator, cosign, sigstore-scaffolding, zarf, skaffold, kubescape, zot,...

GHSA-FPHV-W9FQ-2525 vulnerabilities

Vulnerabilities for packages: buildkitd-fips, tkn-fips, zarf, cloudbeat-fips, chainctl, reports-server, neuvector-sigstore-interface-fips, crossplane, kyverno, kyverno-fips, slsa-verifier, cloudbeat, crossplane-fips, trivy, teleport, tflint, cg, spire-server-fips, teleport-operator-fips,...

CVE-2026-23991 vulnerabilities

Vulnerabilities for packages: buildkitd-fips, tkn-fips, zarf, cloudbeat-fips, chainctl, reports-server, neuvector-sigstore-interface-fips, crossplane, kyverno, kyverno-fips, slsa-verifier, cloudbeat, crossplane-fips, trivy, teleport, tflint, cg, spire-server-fips, teleport-operator-fips,...

CVE-2026-23992 vulnerabilities

Vulnerabilities for packages: buildkitd-fips, tkn-fips, zarf, cloudbeat-fips, chainctl, reports-server, neuvector-sigstore-interface-fips, crossplane, kyverno, kyverno-fips, slsa-verifier, cloudbeat, crossplane-fips, trivy, teleport, tflint, cg, spire-server-fips, teleport-operator-fips,...

GHSA-846P-JG2W-W324 vulnerabilities

Vulnerabilities for packages: buildkitd-fips, tkn-fips, zarf, cloudbeat-fips, chainctl, reports-server, neuvector-sigstore-interface-fips, crossplane, kyverno, kyverno-fips, slsa-verifier, cloudbeat, crossplane-fips, trivy, teleport, tflint, cg, spire-server-fips, teleport-operator-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: gitness, nri-jmx, kube-rbac-proxy, rancher-machine, grafana, k9s, snyk-cli, nats, go-md2man, nfpm, rancher-telemetry, openbao-k8s, tofu-controller, seaweedfs, k6, prometheus-adapter, terraform-provider-random, k8sgateway, nvidia-container-toolkit, scorecard, nri-f5,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: terraform-mcp-server, glow, cni-plugins, blob-csi, trivy, karpenter, cluster-api-helm-controller, teleport, consul-k8s, cg, contour, nri-nginx, chart-testing, argo-events, flux-operator, opentofu, src, nri-redis, tkn, migrate, azure-service-operator, caddy,...

CVE-2025-54410 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, k3s, rancher-agent, cluster-api-helm-controller, prometheus, kpt, openbao, docker-credential-gcr, rancher-machine, falcoctl, promxy, crossplane, xeol, opentelemetry-operator, amazon-cloudwatch-agent-operator, k3d, lazydocker, skaffold, bento,...

GHSA-4VQ8-7JFC-9CVP vulnerabilities

Vulnerabilities for packages: ctop, neuvector-scanner-fips, xeol-fips, lazydocker, traefik, openbao-fips, crossplane, cluster-api-helm-controller-fips, prometheus, gatekeeper, helm-mapkubeapis, docker-credential-gcr-fips, harbor-scanner-trivy, cluster-api-helm-controller,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: gitness, aws-network-policy-agent, caddy, kube-rbac-proxy, rancher-machine, xeol, crossplane-provider-aws-rds, malcontent, rancher-telemetry, openbao-k8s, cert-manager-istio-csr, k6, prometheus-adapter, terraform-provider-random, scorecard, velero-plugin-for-aws,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: gitness, aws-network-policy-agent, caddy, nri-jmx, kube-rbac-proxy, yam, wire-go, snyk-cli, go-md2man, terraform-provider-pagerduty, malcontent, openbao-k8s, seaweedfs, cert-manager-istio-csr, k6, prometheus-adapter, terraform-provider-random, scorecard,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: gitness, aws-network-policy-agent, caddy, nri-jmx, kube-rbac-proxy, yam, wire-go, snyk-cli, go-md2man, terraform-provider-pagerduty, malcontent, openbao-k8s, seaweedfs, cert-manager-istio-csr, k6, prometheus-adapter, terraform-provider-random, scorecard,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: grype-fips, tkn-fips, lvm-driver, cni-plugins, grpcurl, nvidia-nsight-compute-12.9, licenseclassifier, terraform-provider-grafana-fips, go-bindata, nginx-prometheus-exporter-fips, terraform-provider-pagerduty, go-md2man, whereabouts-fips, prometheus-nats-exporter,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: gitness, k3s, oauth2-proxy, git-sync, octo-sts, openbao, opentelemetry-collector-contrib, minio-operator, secrets-store-csi-driver-provider-azure, buildkitd, xeol, trivy, jitsucom-bulker, amazon-cloudwatch-agent-operator, flux-notification-controller, glab, step,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose-fips, nvidia-container-toolkit, mage, prometheus-mongodb-exporter, tfsec, dockerize-fips, thanos, falcosidekick, skopeo, grpcurl, prometheus-postgres-exporter-fips, kubernetes-csi-external-provisioner, prometheus-stackdriver-exporter, karpenter-fips,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, falcoctl, tkn, slsa-verifier, wolfictl, flux-source-controller, vexctl, melange, zarf, skaffold, kubescape, apko, zot, spire-server, aactl, goreleaser, ko, policy-controller...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: tkn-fips, zarf, chainctl, slsa-verifier, spire-server-fips, goreleaser, gitsign, zot, flux-source-controller, melange, tekton-chains, policy-controller, tkn, wolfictl, spire-server, kubescape, falcoctl, apko, tekton-chains-fips, policy-controller-fips, skaffold,...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, falcoctl, tkn, slsa-verifier, wolfictl, flux-source-controller, vexctl, melange, zarf, skaffold, kubescape, apko, zot, spire-server, aactl, goreleaser, ko, policy-controller...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: gitsign, neuvector-sigstore-interface, tekton-chains, falcoctl, tkn, slsa-verifier, wolfictl, flux-source-controller, vexctl, melange, zarf, skaffold, kubescape, apko, zot, spire-server, aactl, goreleaser, ko, policy-controller...