GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: buildah, containerd, traefik, prometheus-operator-fips, knative-serving-fips, atlantis-fips, cerbos-fips, cert-manager-fips, azuredisk-csi, gatekeeper, nerdctl, kube-arangodb-fips, docker-fips, k3s, calico-fips, grafana-alloy, ocm-cli-fips, helmfile, src,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitea, containerd, k9s, traefik, kubescape-server, minio, knative-serving-fips, argocd-image-updater, argo-cd, gatekeeper, kyverno-fips, nerdctl, kube-arangodb-fips, k3s, calico-fips, trivy-fips, minio-fips, argocd-image-updater-fips, cloud-provider-aws,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, trivy, k3s, external-dns, flux, minio, cert-manager, zarf, chisel, kubescape, mattermost, knative-serving, flux-source-controller, loki, opentelemetry-collector, kine, gitea, kots, aactl, osv-scanner, prometheus-operator, cilium,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: k3s, external-dns, flux, minio, cert-manager, mattermost, knative-serving, loki, opentelemetry-collector, buildah, kine, cloud-provider-aws, kots, aactl, prometheus-operator, cilium, prometheus, istio, helm, kubernetes-dashboard, podman, spire-server, telegraf,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: argo-workflows, teleport, trivy, k3s, gitlab-runner, tigera-operator, argo-rollouts, hubble, rancher-agent, linkerd2, kiali, terraform-provider-kubernetes, kube-arangodb, kubeflow-pipelines, datadog-agent, verticadb-operator, kubescape, zarf,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: argo-workflows, teleport, trivy, k3s, gitlab-runner, tigera-operator, argo-rollouts, hubble, rancher-agent, linkerd2, kiali, terraform-provider-kubernetes, kube-arangodb, kubeflow-pipelines, datadog-agent, verticadb-operator, kubescape, zarf,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, k3s, flux, external-dns, karpenter, libnvidia-container, chezmoi, hubble, cert-manager, kube-arangodb, external-secrets-operator, datadog-agent, kubescape, mattermost, dask-gateway, aws-flb-kinesis, kine, falco-no-driver, aactl, kots,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: pulumi, nsc, kine, cluster-autoscaler, osv-scanner, yunikorn-k8shim, openbao, controller-gen, clickhouse-operator, redka, s5cmd, xeol, helm, govulncheck, actions-runner-controller, aws-sigv4-proxy, harbor-scanner-trivy, k8ssandra-client, k8s-device-plugin,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, scorecard, memcached-exporter, kubernetes-csi-external-resizer, bom, step-ca, step-issuer, step, external-dns, docker-machine-driver-linode, flux, nginx-prometheus-exporter, newrelic-infrastructure-agent, slsa-verifier,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: scorecard, flux-kustomize-controller, lazygit, flux, guac, crossplane-provider-family-azure, pulumi, crossplane, melange, gitea, crossplane-provider-aws-sqs, osv-scanner, openbao, goreleaser, cluster-api, crossplane-provider-azure-storage, flux-helm-controller,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: scorecard, flux-kustomize-controller, lazygit, flux, guac, crossplane-provider-family-azure, pulumi, crossplane, melange, gitea, crossplane-provider-aws-sqs, osv-scanner, openbao, goreleaser, cluster-api, crossplane-provider-azure-storage, flux-helm-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: omni, gitea, k9s, kyverno-notation-aws, crossplane-provider-aws-sns, src-fingerprint, kubescape-server, terragrunt, crossplane-provider-aws-firehose, crossplane-provider-aws-rds, atlantis-fips, cerbos-fips, rancher-fleet-fips, argocd-image-updater, argo-cd,...

EUVD-2023-0902

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: containerd, gitlab-cng, minio, kubernetes-csi-external-provisioner, cluster-api-helm-controller, thanos-fips, argocd-image-updater, argo-cd, git-credential-oauth, node-feature-discovery-fips, aws-load-balancer-controller-fips, gops, cloudnative-pg, podinfo,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: trivy, pluto, linkerd2, zarf, rancher-helm, helm-push, flux-source-controller, chartmuseum, helm-operator, kots, k8sgpt, flux-helm-controller, cert-manager-cmctl, istio, k9s, chart-testing, cluster-api-helm-controller, consul-k8s, helm-docs, kargo, rancher-fleet,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: trivy, pluto, linkerd2, zarf, rancher-helm, helm-push, flux-source-controller, chartmuseum, helm-operator, kots, k8sgpt, flux-helm-controller, cert-manager-cmctl, istio, k9s, chart-testing, cluster-api-helm-controller, consul-k8s, helm-docs, kargo, rancher-fleet,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: harbor, k9s, pluto, consul-k8s-fips, flux-source-controller-fips, cluster-api-helm-controller, k8ssandra-client-fips, eksctl, envoy-gateway-fips, cerbos-fips, chartmuseum, flux, envoy-gateway, harbor-fips, rancher-fleet-fips, rancher-helm, teleport, k8ssandra-client,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: harbor, k9s, pluto, consul-k8s-fips, flux-source-controller-fips, cluster-api-helm-controller, k8ssandra-client-fips, eksctl, envoy-gateway-fips, cerbos-fips, chartmuseum, flux, envoy-gateway, harbor-fips, rancher-fleet-fips, rancher-helm, teleport, k8ssandra-client,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, spegel, buildkitd, trivy, k3s, newrelic-infrastructure-agent, linkerd2, grype, zarf, kubescape, helm-push, flux-source-controller, melange, chartmuseum, helm-operator, dagger, k8sgpt, kots, osv-scanner, flux-helm-controller,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, opa, spegel, fuse-overlayfs-snapshotter, grype-fips, docker-compose-fips, docker-cli-buildx-fips, helm, consul-k8s-fips, flux-source-controller-fips, cluster-api-helm-controller, buildkitd-fips, k8ssandra-client-fips, neuvector-fips,...