GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dbmate, aws-privateca-issuer, external-secrets-operator, fluxcd-kustomize-mutating-webhook, flux-image-reflector-controller, local-path-provisioner, mariadb-operator, newrelic-k8s-metadata-injection, karpenter, gh, go, stakater-reloader, aws-load-balancer-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nfpm, kyverno-policy-reporter-ui, local-path-provisioner, go, grpcurl, istio, dapr, gatus, kubernetes-csi-driver-hostpath, mockery, k8s-device-plugin, crossplane-provider-sql, dfc, snyk-cli, spire-controller-manager, chezmoi, gcsfuse, nri-f5, kyverno, nuclei,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-rollouts, boring-registry-fips, lazygit, crossplane-provider-aws-elasticache, cloudbeat-fips, flux-image-automation-controller, skaffold, crossplane-provider-aws-sns-fips, crossplane-provider-family-aws, flux-source-controller-fips, kubescape-server,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nfpm, grpcurl, harbor-registry, tempo, kubernetes-csi-driver-hostpath, mockery, k8s-device-plugin, dfc, snyk-cli, spire-controller-manager, nri-f5, nuclei, slsa-verifier, k8sgpt, nri-redis, hydra, terraform-provider-time, harbor-scanner-trivy, rancher-loglevel,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: velero, local-path-provisioner, metallb, grpcurl, harbor-registry, tempo, gatus, kubernetes-csi-driver-hostpath, crossplane-provider-sql, spire-controller-manager, gcsfuse, nuclei, slsa-verifier, crossplane-provider-aws-route53, croc, k8sgpt, addon-resizer,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: velero, local-path-provisioner, metallb, grpcurl, harbor-registry, tempo, gatus, kubernetes-csi-driver-hostpath, crossplane-provider-sql, spire-controller-manager, gcsfuse, nuclei, slsa-verifier, crossplane-provider-aws-route53, croc, k8sgpt, addon-resizer,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: velero, sbom-scorecard, kyverno-policy-reporter-ui, local-path-provisioner, metallb, grpcurl, shfmt, wait-for-port, mage, harbor-registry, tempo, gatus, kubernetes-csi-driver-hostpath, crossplane-provider-sql, snyk-cli, spire-controller-manager, linkerd2-proxy-init,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: velero, sbom-scorecard, kyverno-policy-reporter-ui, local-path-provisioner, metallb, grpcurl, shfmt, wait-for-port, mage, harbor-registry, tempo, gatus, kubernetes-csi-driver-hostpath, crossplane-provider-sql, snyk-cli, spire-controller-manager, linkerd2-proxy-init,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: velero, grafana-mimir, sops, k3s, falcoctl, kyverno-policy-reporter-ui, loki, openbao, skaffold, kaniko, external-dns, terragrunt, secrets-store-csi-driver-provider-azure, kubernetes-dashboard-auth, docker, argo-workflows, pulumi, kube-metrics-adapter,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: velero, sbom-scorecard, metallb, grpcurl, shfmt, wait-for-port, mage, harbor-registry, tempo, kubernetes-csi-driver-hostpath, mockery, ferretdb, k8s-device-plugin, crossplane-provider-sql, spire-controller-manager, gcsfuse, linkerd2-proxy-init, nri-f5, nuclei,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: step, flux-image-automation-controller, kubeflow-katib, restic, chartmuseum, rook, sigstore-scaffolding, metacontroller, logstash-exporter, flux-kustomize-controller, kubeflow-fips, helm-push, configmap-reload, rekor-fips, prometheus-blackbox-exporter, tflint,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, kaniko, flux-image-automation-controller, crossplane-provider-aws-kinesis, skaffold, wolfictl, gitness, crossplane-provider-family-aws, goreleaser, pulumi-kubernetes-operator, syft, pulumi-language-yaml, crossplane-provider-aws-s3...