GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, render-template, docker-cli, aws-otel-collector, flux, spark-operator, undock, timescaledb-tune, eksctl, cerbos, rancher-system-agent, k8sgpt, kubernetes-dashboard-web, dive, gcsfuse, rabbitmq-messaging-topology-operator, aactl, fulci...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, commercial-expanso-edge, prometheus-mongodb-exporter, opentelemetry-collector-k8s, ocm-kubernetes-controller-fips, podman-fips, flux, harbor-fips, dataplaneapi, apm-server, kubernetes-dashboard, cerbos, grafana-alloy-fips, harbor, keda,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, commercial-expanso-edge, prometheus-mongodb-exporter, coder-fips, flux, harbor-fips, kubernetes-dashboard, harbor, osv-scanner, mattermost, knative-serving-fips, kyverno, drone-fips, telegraf, opentofu-fips, frankenphp-8.4, istio, traefik,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: chisel, flux-image-automation-controller, knative-serving, nerdctl, external-secrets-operator, k3s, kubescape, snyk-cli, trivy, flux, flux-source-controller, containerd, istio, cloud-provider-aws, prometheus, opentelemetry-collector, osv-scanner, zarf, rancher, kine,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: knative-serving, nerdctl, external-secrets-operator, k3s, snyk-cli, flux, containerd, istio, cloud-provider-aws, prometheus, opentelemetry-collector, buildah, rancher, kine, fscrypt, kyverno, aactl, minio, podman, cert-manager, telegraf, mattermost, gitlab-kas, zot,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, headlamp, jitsucom-bulker, kubeflow-pipelines, tigera-operator, kubevela, rancher-agent, k3s, kubescape, juicefs-csi-driver, linkerd2, trivy, verticadb-operator, teleport, istio, eksctl, emissary, terraform-provider-kubernetes,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, headlamp, jitsucom-bulker, kubeflow-pipelines, tigera-operator, kubevela, rancher-agent, k3s, kubescape, juicefs-csi-driver, linkerd2, trivy, verticadb-operator, teleport, istio, eksctl, emissary, terraform-provider-kubernetes,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, kube-fluentd-operator, nerdctl, external-secrets-operator, k3s, kubescape, snyk-cli, ingress-nginx-controller, falco-no-driver, k8s-device-plugin, aws-flb-cloudwatch, karpenter, flux, istio, newrelic-fluent-bit-output,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: extism, dfc, docker-machine-driver-harvester, nri-elasticsearch, snyk-cli, nri-kafka, trillian, cortex, speedtest-go, harbor, cadvisor, kubernetes-replicator, redpanda, vault-env, grafana-mimir, kube-logging-operator-custom-runner, aws-nuke, nri-nginx, mattermost, ac...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: goreleaser, descheduler, docker-machine-driver-harvester, kube-fluentd-operator, net-kourier, snyk-cli, crossplane-provider-azure-authorization, sftpgo, docker-cli, crossplane, kyverno-policy-reporter-ui, aws-flb-cloudwatch, verticadb-operator, flux, policy-controlle...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: extism, goreleaser, dagger, snyk-cli, crossplane-provider-azure-authorization, crossplane, flux, policy-controller, pulumi-kubernetes-operator, cerbos, wolfictl, crossplane-provider-aws-sns, rancher-fleet, crossplane-provider-aws-rds, crossplane-provider-aws-kms,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: extism, goreleaser, dagger, snyk-cli, crossplane-provider-azure-authorization, crossplane, flux, policy-controller, pulumi-kubernetes-operator, cerbos, wolfictl, crossplane-provider-aws-sns, rancher-fleet, crossplane-provider-aws-rds, crossplane-provider-aws-kms,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: rclone, wal-g, packer-fips, crossplane-provider-azure-managedidentity, ratify, flux, cerbos, crossplane-provider-aws-cloudformation-fips, grafana-alloy-fips, crossplane-provider-aws-cognitoidentity-fips, osv-scanner, flux-helm-controller-fips, witness,...

EUVD-2023-0902

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, op-geth, ratify, azure-service-operator-fips, flux, jitsucom-bulker, apm-server, helm-docs, azuredisk-csi-fips, gcp-compute-persistent-disk-csi-driver-fips, nvidia-nsight-compute-13.0, xeol, kube-metrics-adapter-fips,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: pluto, tw, linkerd2, trivy, helm-docs, flux-source-controller, istio, eksctl, cerbos, helm-push, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, karg...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: pluto, tw, linkerd2, trivy, helm-docs, flux-source-controller, istio, eksctl, cerbos, helm-push, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, karg...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, zot, trivy-fips, rancher-fleet, kargo, flux, harbor-fips, flux-fips, chartmuseum, cerbos-fips, cerbos, chart-testing, harbor, chart-testing-fips, chartmuseum-fips, helm-docs, teleport, flux-helm-controller-fips, helm-operator-fips, linkerd2,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, zot, trivy-fips, rancher-fleet, kargo, flux, harbor-fips, flux-fips, chartmuseum, cerbos-fips, cerbos, chart-testing, harbor, chart-testing-fips, chartmuseum-fips, helm-docs, teleport, flux-helm-controller-fips, helm-operator-fips, linkerd2,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: dagger, buildkitd, kubevela, nerdctl, opa, k3s, kubescape, linkerd2, trivy, flux-source-controller, docker, eksctl, docker-compose, helm-push, neuvector-scanner, wolfictl, osv-scanner, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, kaniko, k8ssandra-client...