cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-operator, flux-source-controller, kargo, helm-docs, k8ssandra-client, tw, rancher-helm, chartmuseum, cilium-cli, kots, zot, chart-testing, envoy-gateway, flux-helm-controller, pluto, helm-push, k8sgpt, k9s, linkerd2, cert-manager-cmctl,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux-source-controller, steampipe, gitea, gptscript, xeol, kargo, guac, nfpm, kubevela, flux, scorecard, trivy-operator, argo-events, teleport, kyverno, syft, kaniko, kubescape, pulumi-kubernetes-operator, gitsign, argo-workflows, src-fingerprint, nuclei, kots,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: rclone, argo-cd, telegraf, rancher-fleet, syft, gitaly, external-secrets-operator, flux, terragrunt, cerbos, teleport, kyverno, scorecard...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: rclone, argo-cd, rancher-fleet, syft, gitaly, external-secrets-operator, terragrunt, cerbos, teleport, kyverno, scorecard...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kuberlr, migrate, controller-gen, fulcio, nri-haproxy, kubernetes-dashboard, envconsul, cis-operator, wgcf, docker-machine-driver-harvester, terraform-mcp-server, nova, tekton-chains, dive, ip-masq-agent, aws-otel-collector, kubernetes-csi-driver-nfs, timescaledb-tun...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: opentofu, dataplaneapi, traefik, flux, rekor, kyverno, k3s, kubernetes-dashboard, kube-fluentd-operator, libnvidia-container, kubeflow-katib, cilium-cli, docker-cli-buildx, kine, kots, caddy, grype, snyk-cli, timestamp-authority, cert-manager, apko, hubble, kubernete...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, crossplane-provider-aws-ecs-fips, volcano, cluster-api-helm-controller-fips, cert-manager-openshift-routes-fips, syft-fips, databricks-cli-fips, gatus, crossplane-provider-aws-secretsmanager, haproxy-ingress-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, crossplane-provider-aws-ecs-fips, volcano, cluster-api-helm-controller-fips, cert-manager-openshift-routes-fips, syft-fips, databricks-cli-fips, gatus, crossplane-provider-aws-secretsmanager, haproxy-ingress-fips,...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: rclone, argo-cd, rancher-fleet, syft, gitaly, external-secrets-operator, terragrunt, cerbos, teleport, kyverno, scorecard...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: rclone, argo-cd, rancher-fleet, syft, gitaly, external-secrets-operator, terragrunt, cerbos, teleport, kyverno, scorecard...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: argo-cd, teleport, rclone-fips, cerbos-fips, cerbos, syft-fips, grafana, external-secrets-operator, seaweedfs-rocksdb-fips, scorecard, telegraf, amazon-ssm-agent, upwind-agent, rancher-fleet-fips, gitlab-rails-ce-fips, syft, terragrunt, terragrunt-fips, chainloop-cli...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: argo-cd, teleport, rclone-fips, cerbos-fips, cerbos, syft-fips, grafana, external-secrets-operator, seaweedfs-rocksdb-fips, scorecard, telegraf, amazon-ssm-agent, upwind-agent, rancher-fleet-fips, gitlab-rails-ce-fips, syft, terragrunt, terragrunt-fips, chainloop-cli...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: grype-fips, teleport, syft-fips, apko-fips, osv-scanner, trivy, argo-workflows-fips, flux-image-automation-controller, k9s-fips, grype, chainloop-cli-fips, kubescape-server-fips, nuclei, trivy-fips, kyverno-fips, witness, kubevela-fips, trivy-operator,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: teleport, keda-fips, seaweedfs, trillian-fips, openfga, step-issuer-fips, src, telegraf, openbao-fips, cloudprober, step-fips, temporal, harbor, argo-workflows-fips, splunk-otel-collector, gitlab-cng-fips, timescaledb-parallel-copy, rke2-cloud-provider, zitadel,...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: helm-operator, flux-source-controller, flux, helm-docs, trivy-operator, helm-mapkubeapis, k8ssandra-client, tw, kube-arangodb, kubescape, chartmuseum, cilium-cli, kots, nova, tigera-operator, zot, chart-testing, envoy-gateway, consul-k8s, pluto, helm-push, harbor, k9...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: helm-operator, flux-source-controller, flux, helm-docs, trivy-operator, helm-mapkubeapis, k8ssandra-client, tw, kube-arangodb, kubescape, chartmuseum, cilium-cli, kots, nova, tigera-operator, zot, chart-testing, envoy-gateway, consul-k8s, pluto, helm-push, harbor, k9...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: k8ssandra-client, consul-k8s-fips, teleport, chaos-mesh-fips, cerbos-fips, cerbos, cluster-api-helm-controller-fips, headlamp-fips, nova-fips, linkerd2, helm-operator, helm-operator-fips, zarf-fips, cilium-cli, envoy-gateway-fips, kube-arangodb-fips, kubescape-server...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, oras, dfc, sriov-network-device-plugin, kubernetes-dashboard, envconsul, kuberay-operator, kube-fluentd-operator, gitsign, terraform-mcp-server, terraform-provider-azuread, chezmoi, nova, direnv, neuvector-dbgen, sbomqs,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: azure-aad-pod-identity-mic, kube-fluentd-operator, jsonnet-bundler, filebrowser, gitlab-operator-fips, etcd, rancher-helm, kubernetes-fips, net-kourier, beats, trivy-fips, witness, k8ssandra-client-fips, kubernetes-csi-node-driver-registrar, tofu-controller-fips,...