GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kpt, gitlab-kas, kiali, emissary, infinispan-operator, kube-arangodb, vcluster, eksctl, kubeflow-pipelines, redis-operator, consul-k8s, cilium, kubescape, k8sgpt-operator, linkerd2, percona-server-mongodb-operator, hubble, teleport, k9s, rancher-agent, argo-cd,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: kpt, gitlab-kas, kiali, emissary, infinispan-operator, kube-arangodb, vcluster, eksctl, kubeflow-pipelines, redis-operator, consul-k8s, cilium, kubescape, k8sgpt-operator, linkerd2, percona-server-mongodb-operator, hubble, teleport, k9s, rancher-agent, argo-cd,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: cilium-envoy, gitlab-kas, knative-serving, kube-arangodb, telegraf, kine, cert-manager, prometheus-operator, runc, redka, external-secrets-operator, prometheus, falco-no-driver, cilium, kubescape, dask-gateway, hubble, kyverno, argo-cd, coredns,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: tofu-controller, secrets-store-csi-driver-provider-aws, volume-modifier-for-k8s, dgraph, kube-arangodb, telegraf, spicedb-operator, eksctl, mc, rabbitmq-messaging-topology-operator, dbmate, boring-registry, kserve-modelmesh-serving, kserve-rest-proxy, rancher-agent,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, kubernetes-csi-external-snapshotter, infinispan-operator, kubernetes-dashboard-metrics-scraper, eksctl, mc, flux-operator, kserve-modelmesh-serving, newrelic-nri-statsd, gatekeeper, kubeflow-katib, sftpgo,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gptscript, vcluster, wolfictl, pulumi-language-dotnet, boring-registry, docker, pulumi-kubernetes-operator, rclone, opentofu, argo-rollouts, datadog-agent, flux-kustomize-controller, cerbos, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-elasticache...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gptscript, vcluster, wolfictl, pulumi-language-dotnet, boring-registry, docker, pulumi-kubernetes-operator, rclone, opentofu, argo-rollouts, datadog-agent, flux-kustomize-controller, cerbos, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-elasticache...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trivy, reports-server, datadog-agent, nuclei, cert-manager-cmctl, crossplane-provider-azure-managedidentity, terragrunt, livekit-cli, atlantis, gitlab-runner, crossplane-provider-aws-cloudwatchlogs-fips, scorecard, crossplane-provider-aws-route53-fips,...

EUVD-2023-0902

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: trivy, datadog-agent, influxd, caddy, crossplane-provider-azure-managedidentity, fulcio, http-echo, kube-bench, custom-pod-autoscaler-fips, ingress-nginx-controller, opa, postgres-operator-fips, docker-machine-driver-harvester, loki-3.6,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: helm-docs, chart-testing, eksctl, consul-k8s, linkerd2, teleport, pluto, k9s, envoy-gateway, rancher-fleet, trivy, tw, flux-helm-controller, k8ssandra-client, cerbos, cilium-cli, flux-source-controller, chartmuseum, kots, kargo, kuma, rancher-helm,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: helm-docs, chart-testing, eksctl, consul-k8s, linkerd2, teleport, pluto, k9s, envoy-gateway, rancher-fleet, trivy, tw, flux-helm-controller, k8ssandra-client, cerbos, cilium-cli, flux-source-controller, chartmuseum, kots, kargo, kuma, rancher-helm,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy, eksctl, linkerd2, cert-manager-cmctl, chart-testing, helm-push, zot, cerbos, flux-helm-controller-fips, cerbos-fips, flux-source-controller-fips, tw, cluster-api-helm-controller, kuma, zarf, envoy-gateway, istio-fips, flux-fips,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: trivy-fips, trivy, eksctl, linkerd2, cert-manager-cmctl, chart-testing, helm-push, zot, cerbos, flux-helm-controller-fips, cerbos-fips, flux-source-controller-fips, tw, cluster-api-helm-controller, kuma, zarf, envoy-gateway, istio-fips, flux-fips,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, eksctl, kubescape, spegel, linkerd2, wolfictl, neuvector-scanner, docker, opa, envoy-gateway, helm, kaniko, rancher-fleet, datadog-agent, trivy, skaffold, flux-helm-controller, k8ssandra-client, k3s, docker-compose, kubevela,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: trivy, datadog-agent, cert-manager-cmctl, newrelic-infrastructure-agent, neuvector-scanner, opa, docker-compose, kaniko-fips, opa-fips-envoy, docker-cli-buildx, kubescape, envoy-gateway-fips, buildkitd, k8ssandra-client-fips, grype, cloudbeat-fips,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: trivy, datadog-agent, cert-manager-cmctl, newrelic-infrastructure-agent, neuvector-scanner, opa, docker-compose, kaniko-fips, opa-fips-envoy, docker-cli-buildx, kubescape, envoy-gateway-fips, buildkitd, k8ssandra-client-fips, grype, cloudbeat-fips,...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, gptscript, kubernetes-dashboard-metrics-scraper, vcluster, eksctl, pulumi-language-dotnet, kserve-modelmesh-serving, gatekeeper, kubeflow-katib, metrics-server, sftpgo, kubernetes-dashboard-web, argocd-image-updater,...

GO-2023-1653 `cilium-cli` disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli

cilium-cli disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli...

GHSA-VWF8-Q6FW-4WCM vulnerabilities

Vulnerabilities for packages: cilium-cli, hubble-ui, hubble, cilium-fips, cilium, hubble-ui-backend-fips, hubble-fips...