CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, telegraf, terraform-provider-time, kubernetes-dashboard-auth-fips, pguser, custom-pod-autoscaler, vexctl, timescaledb-tune, neuvector-sigstore-interface, grafana-fips, gotestsum, kube-arangodb-fips, blob-csi-fips, vertical-pod-autoscaler-fip...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, telegraf, terraform-provider-time, kubernetes-dashboard-auth-fips, pguser, custom-pod-autoscaler, vexctl, timescaledb-tune, neuvector-sigstore-interface, grafana-fips, gotestsum, kube-arangodb-fips, blob-csi-fips, vertical-pod-autoscaler-fip...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, telegraf, terraform-provider-time, kubernetes-dashboard-auth-fips, pguser, custom-pod-autoscaler, vexctl, timescaledb-tune, neuvector-sigstore-interface, grafana-fips, gotestsum, kube-arangodb-fips, blob-csi-fips, vertical-pod-autoscaler-fip...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: kyverno, aws-sigv4-proxy, telegraf, terraform-provider-time, kubernetes-dashboard-auth-fips, pguser, custom-pod-autoscaler, vexctl, timescaledb-tune, neuvector-sigstore-interface, grafana-fips, gotestsum, kube-arangodb-fips, blob-csi-fips, vertical-pod-autoscaler-fip...

EUVD-2019-1730

Malware in sbrugna...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: trivy, zarf, helm-mapkubeapis, cluster-api-helm-controller, envoy-gateway, helm-docs, headlamp, cert-manager-cmctl, cerbos, k8sgpt, trivy-operator, chart-testing, cilium-cli, eksctl, tw, helm-set-status, istio, consul-k8s, linkerd2, chartmuseum, pluto, kubescape, nov...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: trivy, zarf, helm-mapkubeapis, cluster-api-helm-controller, envoy-gateway, helm-docs, headlamp, cert-manager-cmctl, cerbos, k8sgpt, trivy-operator, chart-testing, cilium-cli, eksctl, helm-set-status, istio, consul-k8s, linkerd2, chartmuseum, pluto, kubescape, nova,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, op-geth, falcosidekick, tekton-chains, sqlexporter, external-dns, spire-server, k8sgpt, mc, kine, crossplane-provider-azure-authorization, traefik, fulcio, restic, flux-image-automation-controller, grafana-mimir, xeol, flyte, kaniko,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: trivy, zarf, docker, newrelic-infrastructure-agent, docker-cli-buildx, cluster-api-helm-controller, envoy-gateway, spegel, cert-manager-cmctl, k3s, buildkitd, k8sgpt, fuse-overlayfs-snapshotter, opa, ctop, cilium-cli, eksctl, helm, dagger, xeol, neuvector-scanner,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: multus-cni, ip-masq-agent, wire-go, spire-server, ghaudit, k8sgpt, nri-discovery-kubernetes, haproxy-ingress, restic, checksec, kaniko, kuberlr, velero-plugin-for-microsoft-azure, aws-flb-kinesis, http-echo, ini-file, sbom-scorecard, flannel, swagger, wazero, hey,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, tekton-chains, tempo, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, cri-tools, secrets-store-csi-driver-provider-gcp, sops, flyte, glab, kubernetes-dashboard-metrics-scraper-fips, kube-state-metrics, cadvisor-fips, cosign,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: chartmuseum, zarf, k8sgpt, cilium-cli, up, zot, flux-source-controller, flux-helm-controller, helm-operator, kubescape, eksctl, k9s, trivy, kots, helm-push, kubevela...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-push, trivy, zarf, k8sgpt, chartmuseum, up, k9s, kubescape, cilium-cli, helm-operator, kubevela, eksctl, zot, flux-source-controller, kots, flux-helm-controller...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: chartmuseum, zarf, k8sgpt, cilium-cli, up, zot, flux-source-controller, flux-helm-controller, helm-operator, kubescape, eksctl, k9s, trivy, kots, helm-push, kubevela...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: chartmuseum, k3d, paranoia, ctop, skaffold, k3s, up, aactl, tekton-chains, bom, kpt, rancher-agent, kubescape, scorecard, slsa-verifier, spire-server-fips, falcoctl-fips...

SUSE CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

Path traversal

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...

CVE-2019-1000009

Helm ChartMuseum version =0.1.0 and 0.8.1 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HTTP API to save charts that can result in a specially crafted chart could be uploaded and saved outside the intended location. This attack...