cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, rancher-helm, k8sgpt, kots, chart-testing, pluto, helm-push, envoy-gateway, istio, zarf, zot, cilium-cli, rancher-fleet, flux-helm-controller, cert-manager-cmctl, k8ssandra-client, eksctl, helm-docs, cerbos, flux-source-controller, tw,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gptscript, syft, witness, gomplate, pulumi-kubernetes-operator, skaffold, src-fingerprint, grafana-alloy, kubescape, kots, kyverno, kaniko, chezmoi, dagger, bom, gitlab-runner, wolfictl, pulumi, guac, pulumi-language-dotnet, scorecard, osv-scanner, argo-cd,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: gitaly, syft, rclone, rancher-fleet, flux, kyverno, scorecard, terragrunt, argo-cd, cerbos, telegraf, external-secrets-operator, teleport...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: gitaly, syft, rclone, rancher-fleet, scorecard, cerbos, terragrunt, argo-cd, kyverno, external-secrets-operator, teleport...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, gptscript, migrate, thanos-operator, docker-machine-driver-harvester, kubernetes-dashboard, cluster-api-helm-controller, rclone, glow, chart-testing, gcsfuse, lazydocker, swagger, bom, nri-nginx, portieris, containerd, emissary,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kubernetes-dashboard, nerdctl, pinact, buildah, k3s, buildkitd, grafana-alloy, docker-cli-buildx, kots, kyverno, dask-gateway, grafana-operator, telegraf, falco-no-driver, docker, pulumi, traefik, containerd, istio, pulumi-language-dotnet,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: grafana-mimir, crossplane-provider-aws-athena, crossplane-provider-keycloak, harbor, datadog-agent, crossplane-provider-azure-storagesync, gcp-compute-persistent-disk-csi-driver-fips, knative-client, lazydocker, kube-rbac-proxy, crossplane-provider-aws-kinesis-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: grafana-mimir, crossplane-provider-aws-athena, crossplane-provider-keycloak, harbor, datadog-agent, crossplane-provider-azure-storagesync, gcp-compute-persistent-disk-csi-driver-fips, knative-client, lazydocker, kube-rbac-proxy, crossplane-provider-aws-kinesis-fips,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: gitaly, syft, rclone, rancher-fleet, scorecard, cerbos, terragrunt, argo-cd, kyverno, external-secrets-operator, teleport...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: gitaly, syft, rclone, rancher-fleet, scorecard, cerbos, terragrunt, argo-cd, kyverno, external-secrets-operator, teleport...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: argo-cd, nemo, kyverno-fips, seaweedfs-rocksdb, external-secrets-operator, teleport, cerbos, argo-cd-fips, amazon-ssm-agent, packer-fips, grafana-fips, rancher-fleet, upwind-agent, external-secrets-operator-fips, syft, kyverno, rclone, skaffold-fips, rclone-fips,...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: argo-cd, nemo, kyverno-fips, seaweedfs-rocksdb, external-secrets-operator, teleport, cerbos, argo-cd-fips, amazon-ssm-agent, packer-fips, grafana-fips, rancher-fleet, upwind-agent, external-secrets-operator-fips, syft, kyverno, rclone, skaffold-fips, rclone-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: crossplane, nemo, argocd-image-updater, witness, grafana-alloy-fips, gitlab-runner-fips, amazon-ssm-agent, src-fingerprint-fips, grafana-alloy, upwind-agent, goreleaser, apko-fips, xeol-fips, kargo, external-secrets-operator-fips, syft, gitaly-fips, trivy, grype, cg,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: pgwatch, envoy-gateway, seaweedfs, harbor, grafana-alloy-fips, gitlab-cng, cloudprober-fips, grafana-alloy, authentik-fips, sftpgo-plugin-eventsearch, sqlexporter-fips, rke2-cloud-provider-fips, bento, gitaly-fips, kine, cloudnative-pg-fips, envoy-gateway-fips,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kubescape, k8sgpt, kots, chart-testing, pluto, helm-mapkubeapis, helm-push, envoy-gateway, istio, tigera-operator, headlamp, zarf, zot, helm-set-status, kuma, cilium-cli, trivy-operator, consul-k8s, rancher-fleet, cert-manager-cmctl, flux...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kubescape, k8sgpt, kots, chart-testing, pluto, helm-mapkubeapis, helm-push, envoy-gateway, istio, tigera-operator, headlamp, zarf, zot, helm-set-status, kuma, cilium-cli, trivy-operator, consul-k8s, rancher-fleet, cert-manager-cmctl, flux...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, kubescape, envoy-gateway, tigera-operator-fips, harbor, headlamp, chartmuseum, chart-testing, chartmuseum-fips, k8sgpt, cerbos, teleport, gitlab-operator, helm-diff, flux-source-controller-fips, helm-docs, tigera-operator, linkerd2-fips, kots...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: dapr, runc, addon-resizer, opensearch-k8s-operator, policy-controller, step-ca, swagger, lazydocker, bom, aws-s3-controller, nri-nginx, falco-exporter, manifest-tool, amazon-cloudwatch-agent-operator, controller-gen, dynamic-localpv-provisioner, zot, cilium-cli,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, harbor, datadog-agent, grafana-operator, mattermost-fips, gitlab-operator, knative-serving, apko-fips, xeol-fips, rook-fips, trivy, kine, docker-compose-fips, docker-cli, qemu-guesthelper, prometheus-fips, podman, podman-fips, atlantis-fips,...