GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-consul, argo-events, wire-go, aactl, amazon-cloudwatch-agent-operator, wgcf, kubernetes-dashboard-api, controller-gen, kubernetes-dashboard-auth, rclone, kapp, glow, rancher-system-upgrade-controller, swagger, flux, guac, delve, kyverno-notation-aws, zot,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, fleet-server, argo-workflows-fips, vault-fips, nerdctl-fips, opentelemetry-collector-k8s, kube-conformance, timestamp-authority-fips, podman-fips, src, kube-state-metrics, k3s, helmfile, argo-cd, buildkitd-fips, cloud-sql-proxy, calico-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, kube-state-metrics, k3s, docker-machine-driver-harvester, argo-cd, flux-image-automation-controller, calico-fips, gitea-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, kaf, istio, loki, aactl, rancher, skaffold, chisel, gitea, kubescape, cloud-provider-aws, cilium, flux, helm, external-dns, snyk-cli, zot, kubernetes-dashboard, kubernetes, nerdctl, falco-no-driver, osv-scanner, fscrypt, opentelemetry-collector,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: istio, loki, aactl, rancher, cloud-provider-aws, cilium, flux, helm, external-dns, snyk-cli, zot, kubernetes-dashboard, kubernetes, nerdctl, falco-no-driver, fscrypt, opentelemetry-collector, prometheus-operator, docker-cli-buildx, cert-manager, kine, buildah,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: trivy, cert-manager-istio-csr, cloudnative-pg, istio, kubeflow-pipelines, datadog-agent, jitsucom-bulker, percona-server-mongodb-operator, k8sgpt, rancher, eksctl, skaffold, kubernetes-dashboard-api, juicefs-csi-driver, verticadb-operator, dynamic-localpv-provisioner...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy, cert-manager-istio-csr, cloudnative-pg, istio, kubeflow-pipelines, datadog-agent, jitsucom-bulker, percona-server-mongodb-operator, k8sgpt, rancher, eksctl, skaffold, kubernetes-dashboard-api, juicefs-csi-driver, verticadb-operator, dynamic-localpv-provisioner...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kaf, istio, karpenter, aws-flb-firehose, aactl, k8s-device-plugin, fuse-overlayfs-snapshotter, kubescape, cloud-provider-aws, aws-flb-cloudwatch, cilium, dask-gateway, flux, ingress-nginx-controller, gitaly, helm, libnvidia-container, external-dns, snyk-cli, chezmoi,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: tigera-operator, dbmate, percona-server-mongodb-operator, aactl, kubernetes-csi-external-attacher, juicefs-csi-driver, cosign, kapp, rancher-system-upgrade-controller, secrets-store-csi-driver-provider-azure, lvm-driver, multus-cni, grpc-health-probe,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: argo-events, litestream, dbmate, istio, kube-vip, sftpgo-plugin-auth, aactl, descheduler, amazon-cloudwatch-agent-operator, terraform-provider-time, crossplane-provider-family-azure, apisix-ingress-controller, dataplaneapi, kubernetes-dashboard-api,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: hydra, argo-events, aactl, crossplane-provider-family-azure, nfpm, rclone, dagger, flux, guac, melange, snyk-cli, cert-manager-cmctl, kyverno-notation-aws, zot, rancher-fleet, pulumi-language-dotnet, gomplate, gptscript, docker, crossplane-provider-aws-firehose,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: hydra, argo-events, aactl, crossplane-provider-family-azure, nfpm, rclone, dagger, flux, guac, melange, snyk-cli, cert-manager-cmctl, kyverno-notation-aws, zot, rancher-fleet, pulumi-language-dotnet, gomplate, gptscript, docker, crossplane-provider-aws-firehose,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-keycloak, terragrunt-fips, argo-workflows, crossplane-provider-aws-kms-fips, argo-workflows-fips, crossplane-provider-aws-s3-fips, vault-fips, external-secrets-operator, crossplane-provider-aws-cognitoidentity-fips, kyverno-notation-aws,...

EUVD-2023-0902

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter-fips, cilium, argo-workflows, harbor-scanner-trivy, nerdctl-fips, kube-conformance, k6-fips, splunk-otel-collector, kubernetes-csi-external-snapshotter-fips, cri-tools, step, crossplane-provider-azure-storage, verticadb-operator-fips,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: trivy, istio, k8sgpt, eksctl, chart-testing, flux-helm-controller, rancher-helm, tw, cert-manager-cmctl, zot, helm-push, rancher-fleet, flux-source-controller, chartmuseum, k9s, cerbos, linkerd2, zarf, envoy-gateway, kargo, cluster-api-helm-controller,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: trivy, istio, k8sgpt, eksctl, chart-testing, flux-helm-controller, rancher-helm, tw, cert-manager-cmctl, zot, helm-push, rancher-fleet, flux-source-controller, chartmuseum, k9s, cerbos, linkerd2, zarf, envoy-gateway, kargo, cluster-api-helm-controller,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: flux, helm-operator-fips, helm-docs, trivy-fips, flux-helm-controller, eksctl, chartmuseum, linkerd2-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, zot, helm-operator, kots, flux-fips, trivy-operator-fips, envoy-gateway-fips, k8ssandra-client-fips,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: flux, helm-operator-fips, helm-docs, trivy-fips, flux-helm-controller, eksctl, chartmuseum, linkerd2-fips, cluster-api-helm-controller, cert-manager-cmctl-fips, zot, helm-operator, kots, flux-fips, trivy-operator-fips, envoy-gateway-fips, k8ssandra-client-fips,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: syft, trivy, docker-compose, neuvector-scanner, k8sgpt, opa, eksctl, skaffold, flux-helm-controller, fuse-overlayfs-snapshotter, kubescape, kaniko, grype, dagger, helm, ctop, melange, cert-manager-cmctl, zot, helm-push, rancher-fleet, nerdctl, osv-scanner, opa-envoy,...