225 matches found
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: go-discover, golangci-lint, cluster-api-provider-vsphere, kserve-modelmesh-serving, flux-notification-controller, delve, terraform-provider-pagerduty, kubernetes-dashboard-auth, secrets-store-csi-driver-provider-azure, knative-eventing, opa-envoy, slsa-verifier,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent-fips, longhorn-instance-manager, onepassword-operator, crossplane-provider-family-aws-fips, chartmuseum-fips, docker-credential-acr-env-fips, aws-otel-collector-fips, apache-exporter, nerdctl, whereabouts-fips, authservice,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent-fips, longhorn-instance-manager, onepassword-operator, crossplane-provider-family-aws-fips, chartmuseum-fips, docker-credential-acr-env-fips, aws-otel-collector-fips, apache-exporter, nerdctl, whereabouts-fips, authservice,...
CLEANSTART-2026-TO88856 Security fixes for CVE-2023-7256, CVE-2024-7598, CVE-2024-8006, CVE-2025-1767, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-67499, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.31.2-r0, 3.31.2-r1, 3.31.2-r2
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VI42371 Security fixes for CVE-2025-13281, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-6v2p-p543-phr9, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.28.5-r2, 3.28.5-r4
Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: sbom-scorecard, calico, gogatekeeper, kuma, minio-operator, slsa-verifier, vale, helm-set-status, spegel, goreleaser, runc, kyverno-policy-reporter-ui, tetragon, wire-go, crossplane-provider-aws-cloudwatchlogs, boring-registry, azure-workload-identity-webhook,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: calico, gogatekeeper, golangci-lint, kuma, minio-operator, kserve-modelmesh-serving, flux-notification-controller, lazygit, opensearch-k8s-operator, helm-operator, terraform-provider-pagerduty, podinfo, ip-masq-agent, slsa-verifier, vale, rancher-machine, ytt,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: sbom-scorecard, calico, gogatekeeper, kuma, minio-operator, slsa-verifier, vale, helm-set-status, spegel, goreleaser, runc, kyverno-policy-reporter-ui, tetragon, wire-go, crossplane-provider-aws-cloudwatchlogs, boring-registry, azure-workload-identity-webhook,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: calico, gogatekeeper, golangci-lint, kuma, minio-operator, kserve-modelmesh-serving, flux-notification-controller, lazygit, opensearch-k8s-operator, helm-operator, terraform-provider-pagerduty, podinfo, ip-masq-agent, slsa-verifier, vale, rancher-machine, ytt,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: sbom-scorecard, calico, gogatekeeper, kuma, minio-operator, slsa-verifier, vale, helm-set-status, spegel, goreleaser, runc, kyverno-policy-reporter-ui, tetragon, wire-go, crossplane-provider-aws-cloudwatchlogs, boring-registry, azure-workload-identity-webhook,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: calico, gogatekeeper, golangci-lint, kuma, minio-operator, kserve-modelmesh-serving, flux-notification-controller, lazygit, opensearch-k8s-operator, helm-operator, terraform-provider-pagerduty, podinfo, ip-masq-agent, slsa-verifier, vale, rancher-machine, ytt,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: calico, gogatekeeper, golangci-lint, kuma, minio-operator, kserve-modelmesh-serving, flux-notification-controller, lazygit, opensearch-k8s-operator, helm-operator, terraform-provider-pagerduty, podinfo, ip-masq-agent, slsa-verifier, vale, rancher-machine, ytt,...
GHSA-JV3W-X3R3-G6RM vulnerabilities
Vulnerabilities for packages: azure-ipam, multus-cni, istio-fips, amazon-k8s-cni-fips, calico, containerd, rootlesskit-fips, nerdctl, buildkitd-fips, rke2-runtime, multus-cni-fips, datadog-agent, flannel-fips, podman, rootlesskit, kuma, buildkitd, calico-fips, flannel, docker, datadog-agent-fips,...
CVE-2025-67499 vulnerabilities
Vulnerabilities for packages: azure-ipam, multus-cni, istio-fips, amazon-k8s-cni-fips, calico, containerd, rootlesskit-fips, nerdctl, buildkitd-fips, rke2-runtime, multus-cni-fips, datadog-agent, flannel-fips, podman, rootlesskit, kuma, buildkitd, calico-fips, flannel, docker, datadog-agent-fips,...
EUVD-2022-54538
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was findin...
EUVD-2022-1122
Malicious code in bioql PyPI...
EUVD-2022-6001
Malicious code in bioql PyPI...
EUVD-2023-2890
Malicious code in bioql PyPI...
