GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: eks-distro, zarf-fips, grafana-operator, ingress-nginx-controller-fips, k8s-device-plugin, cerbos, kube-conformance, ocm-kubernetes-controller-fips, grafana-alloy, docker-fips, apm-server-fips, cloud-provider-azure-fips, commercial-spilo, vault-secrets-operator,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zarf-fips, commercial-expanso-edge, argocd-image-updater, flux-source-controller-fips, omnictl-multiarch, trivy, knative-kafka-broker, docker-machine-driver-harvester, trivy-fips, osv-scanner, omnictl-multiarch-fips, nemo, coder-fips, drone, knative-serving,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: zot, snyk-cli, zarf, prometheus, mattermost, kubernetes-dashboard, k9s, cilium, flux-source-controller, rancher, kaf, k3s, fscrypt, gitea, istio, kine, kubernetes, helm, chisel, loki, osv-scanner, flux-image-automation-controller, cert-manager, cilium-cli,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: zot, snyk-cli, prometheus, mattermost, kubernetes-dashboard, cilium, rancher, docker-cli-buildx, kaf, k3s, fscrypt, istio, kine, kubernetes, helm, podman, loki, cert-manager, cilium-cli, buildah, containerd, prometheus-operator, nerdctl, flux, kyverno,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: envoy-gateway, hubble, kubevela, rancher-agent, zarf, aws-node-termination-handler, k8sgpt, tigera-operator, k8sgpt-operator, k9s, cilium, eksctl, kpt, cri-tools, docker-cli-buildx, argo-rollouts, rancher, kargo, postgres-operator, k3s, velero, k8ssandra-client,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: envoy-gateway, hubble, kubevela, rancher-agent, zarf, aws-node-termination-handler, k8sgpt, tigera-operator, k8sgpt-operator, k9s, cilium, eksctl, kpt, cri-tools, docker-cli-buildx, argo-rollouts, rancher, kargo, postgres-operator, k3s, velero, k8ssandra-client,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: zot, redka, snyk-cli, aws-flb-cloudwatch, aws-flb-kinesis, gitlab-pages, hubble, prometheus, karpenter, mattermost, kubernetes-dashboard, cilium, kaf, kubernetes-csi-node-driver-registrar, external-secrets-operator, k3s, fscrypt, runc, cilium-envoy,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, neuvector-scanner, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, gitlab-pages, nri-mysql, vault-benchmark, tigera-operator, stakater-reloader, k8sgpt-operator, timoni, cilium, smokescreen, flux-source-controller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, neuvector-scanner, pulumi-language-yaml, pulumi-language-java, aws-flb-cloudwatch, gitlab-pages, kube-vip, hubble, lvm-driver, prometheus, authservice, rancher-agent, crossplane-provider-keycloak, timoni, vault-benchmark,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, tfsec, dagger, kubevela, zarf, crossplane-provider-keycloak, flux-source-controller, docker-cli-buildx, crossplane-provider-aws-s3, cert-manager-cmctl, melange, crossplane,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, tfsec, dagger, kubevela, zarf, crossplane-provider-keycloak, flux-source-controller, docker-cli-buildx, crossplane-provider-aws-s3, cert-manager-cmctl, melange, crossplane,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-rollouts-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-kms, argocd-image-updater, chainctl, flux-helm-controller, flux-source-controller-fips, cerbos, goreleaser, omnictl-multiarch, openbao-fips, trivy, openbao, grafana-alloy, amazon-ssm-agent-fips,...

EUVD-2023-0902

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: eks-distro, spegel, yace, blob-csi-fips, k8s-device-plugin, chainctl, flux-source-controller-fips, nri-rabbitmq, openbao-fips, trivy, packer-fips, esbuild, temporal-ui-server-fips, vt-cli, podinfo, aws-sigv4-proxy, newrelic-fluent-bit-output,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: pluto, zot, envoy-gateway, zarf, k8sgpt, k9s, eksctl, flux-source-controller, rancher-helm, helm-operator, kargo, cert-manager-cmctl, k8ssandra-client, istio, linkerd2, cerbos, cluster-api-helm-controller, cilium-cli, chartmuseum, trivy, rancher-fleet, helm-docs,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: pluto, zot, envoy-gateway, zarf, k8sgpt, k9s, eksctl, flux-source-controller, rancher-helm, helm-operator, kargo, cert-manager-cmctl, k8ssandra-client, istio, linkerd2, cerbos, cluster-api-helm-controller, cilium-cli, chartmuseum, trivy, rancher-fleet, helm-docs,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: helm-operator, tw, kots, cert-manager-cmctl-fips, helm-push, istio, k8ssandra-client-fips, consul-k8s-fips, flux-helm-controller, flux-source-controller-fips, cerbos, helm-operator-fips, teleport, eksctl, kuma, trivy, trivy-operator-fips, chartmuseum-fips, helm-docs,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: helm-operator, tw, kots, cert-manager-cmctl-fips, helm-push, istio, k8ssandra-client-fips, consul-k8s-fips, flux-helm-controller, flux-source-controller-fips, cerbos, helm-operator-fips, teleport, eksctl, kuma, trivy, trivy-operator-fips, chartmuseum-fips, helm-docs,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: neuvector-scanner, buildkitd, newrelic-infrastructure-agent, zot, dagger, envoy-gateway, kubevela, zarf, k8sgpt, opa, eksctl, flux-source-controller, syft, helm-operator, docker-cli-buildx, grype, kargo, k3s, docker, cert-manager-cmctl, k8ssandra-client, melange,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: neuvector-fips, neuvector-scanner, helm-operator, kubevela, kots, kubescape, spegel, docker-compose, grype-db, cert-manager-cmctl-fips, helm-push, rancher-agent, chainctl, cluster-api-helm-controller-fips, k8ssandra-client-fips, consul-k8s-fips, flux-helm-controller,...