GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, kubernetes-replicator...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: renovate, portieris, govulncheck, docker-cli, gptscript, kubernetes-event-exporter, kubernetes-dashboard-metrics-scraper, mods, protoc-gen-go-grpc, protoc-gen-go, sbom-scorecard, thanos-operator, kyverno-policy-reporter-ui, consul-k8s, mkcert, petname, kind,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, kubernetes-replicator...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: atlantis, dbmate, opentofu, step-kms-plugin, velero-plugin-for-microsoft-azure, rancher-loglevel, kubernetes-csi-node-driver-registrar, k6, redka, terraform-provider-azuread, kube-logging-operator-custom-runner, renovate, portieris, govulncheck, timoni,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, kratos, dex-k8s-authenticator, kube-logging-operator-custom-runner, grafana-pyroscope, crossplane-function-auto-ready-fips, cluster-api-fips, stakater-reloader, mesosphere-vsphere-csi, prometheus-stackdriver-exporter, external-dns, docker-cli-buildx,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, kratos, dex-k8s-authenticator, kube-logging-operator-custom-runner, grafana-pyroscope, crossplane-function-auto-ready-fips, cluster-api-fips, stakater-reloader, mesosphere-vsphere-csi, prometheus-stackdriver-exporter, external-dns, docker-cli-buildx,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, kratos, dex-k8s-authenticator, kube-logging-operator-custom-runner, grafana-pyroscope, crossplane-function-auto-ready-fips, cluster-api-fips, stakater-reloader, mesosphere-vsphere-csi, prometheus-stackdriver-exporter, external-dns, docker-cli-buildx,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, kratos, dex-k8s-authenticator, kube-logging-operator-custom-runner, grafana-pyroscope, crossplane-function-auto-ready-fips, cluster-api-fips, stakater-reloader, mesosphere-vsphere-csi, prometheus-stackdriver-exporter, external-dns, docker-cli-buildx,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, kratos, neuvector-fips, splunk-otel-collector-fips, kube-logging-operator-custom-runner, loki-3.6, grafana-pyroscope, eksctl, opentelemetry-collector, prometheus-stackdriver-exporter, golangci-lint, supercronic, external-dns, docker-cli-buildx,...

CVE-2023-30610

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...

CVE-2023-30610

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The awssigv4::SigningParams struct had a derived Debug implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is...