156 matches found
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: rancher, cloud-provider-aws, emissary, kubernetes-csi-external-health-monitor, gitlab-kas, tekton-pipelines, yunikorn-k8shim, descheduler, kube-metrics-adapter, helm-operator, cluster-autoscaler, gatekeeper, kots, telegraf, k8ssandra-client, kubescape-operator,...
GHSA-RJWR-M7QX-3FJR vulnerabilities
Vulnerabilities for packages: crossplane, crossplane-fips...
CVE-2026-49834 vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface-fips, kubescape, tkn-fips, kyverno-notation-aws-fips, tkn, trivy-operator, kyverno-notation-aws, trivy-operator-fips, trivy-fips, cloudbeat-fips, cloudbeat, falcoctl-fips, kubescape-server, image-factory-fips, ratify, teleport, kyverno,...
GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface-fips, kubescape, tkn-fips, kyverno-notation-aws-fips, tkn, trivy-operator, kyverno-notation-aws, trivy-operator-fips, trivy-fips, cloudbeat-fips, cloudbeat, falcoctl-fips, kubescape-server, image-factory-fips, ratify, teleport, kyverno,...
CVE-2026-49834 vulnerabilities
Vulnerabilities for packages: kubescape, zarf, tflint, kyverno-notation-aws, gitsign, tekton-chains, aactl, teleport, ratify, tkn, neuvector-sigstore-interface, trivy, falcoctl, kyverno, crossplane, trivy-operator, policy-controller...
GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities
Vulnerabilities for packages: kubescape, zarf, tflint, kyverno-notation-aws, gitsign, tekton-chains, aactl, teleport, ratify, tkn, neuvector-sigstore-interface, trivy, falcoctl, kyverno, crossplane, trivy-operator, policy-controller...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-pubsub, nrdot-collector-fips, caddy, stakater-reloader, chainloop-control-plane-fips, kyverno-policy-reporter-fips, ingress-nginx-controller-fips, crossplane-provider-aws-lakeformation-fips, jupyterhub-k8s-image-awaiter-fips, db-operator-fips,...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: rancher, cluster-api-azure-controller, nuclei, knative-serving, kyverno-policy-reporter-kyverno-plugin, vault-env, containerd, crossplane-provider-aws-firehose, skopeo, custom-pod-autoscaler-operator, dask-gateway, local-path-provisioner, nri-kubernetes, dataplaneapi...
CVE-2026-42505 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-pubsub, nrdot-collector-fips, caddy, stakater-reloader, chainloop-control-plane-fips, kyverno-policy-reporter-fips, ingress-nginx-controller-fips, crossplane-provider-aws-lakeformation-fips, jupyterhub-k8s-image-awaiter-fips, db-operator-fips,...
CVE-2026-49835 vulnerabilities
Vulnerabilities for packages: tflint, goreleaser, aactl, neuvector-sigstore-interface, spire-server, gitsign, ratify, tkn, falcoctl, crossplane, policy-controller, kyverno-notation-aws, kyverno, trivy-operator, kubescape, zarf, teleport, trivy, tekton-chains...
GHSA-9C54-X2G4-V92J vulnerabilities
Vulnerabilities for packages: tflint, goreleaser, aactl, neuvector-sigstore-interface, spire-server, gitsign, ratify, tkn, falcoctl, crossplane, policy-controller, kyverno-notation-aws, kyverno, trivy-operator, kubescape, zarf, teleport, trivy, tekton-chains...
GHSA-9C54-X2G4-V92J vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface-fips, kubescape, tkn-fips, chainctl, chainctl-fips, kyverno-notation-aws-fips, tkn, trivy-operator, kyverno-notation-aws, trivy-operator-fips, trivy-fips, goreleaser, falcoctl-fips, kubescape-server, image-factory-fips, ratify,...
CVE-2026-49835 vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface-fips, kubescape, tkn-fips, chainctl, chainctl-fips, kyverno-notation-aws-fips, tkn, trivy-operator, kyverno-notation-aws, trivy-operator-fips, trivy-fips, goreleaser, falcoctl-fips, kubescape-server, image-factory-fips, ratify,...
GHSA-MPWR-8VM7-H73F vulnerabilities
Vulnerabilities for packages: splunk-otel-collector-fips, crossplane-provider-azure-signalrservice, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, crossplane-provider-azure-netapp, crossplane-provider-azure-resources, crossplane-provider-azure-alertsmanagement,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface-fips, tekton-pipelines, crossplane-provider-azure-managedidentity, chezmoi, crossplane-provider-azure-sql, chainctl-fips, flux-source-controller, amazon-ssm-agent, kyverno-notation-aws-fips, minio, fscrypt, step, tkn,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, crossplane-provider-azure-sql, chainctl-fips, amazon-ssm-agent, minio, crossplane-provider-aws-lexmodels, caddy, chainloop-control-plane-fips, omnictl-multiarch, crossplane-provider-aws-athena-fips, flux-notification-controller, chainloop-cli,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface-fips, tekton-pipelines, crossplane-provider-azure-managedidentity, chezmoi, crossplane-provider-azure-sql, chainctl-fips, flux-source-controller, amazon-ssm-agent, kyverno-notation-aws-fips, minio, fscrypt, step, tkn,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: tekton-pipelines, crossplane-provider-azure-sql, chainctl-fips, amazon-ssm-agent, minio, crossplane-provider-aws-lexmodels, caddy, chainloop-control-plane-fips, omnictl-multiarch, crossplane-provider-aws-athena-fips, flux-notification-controller, chainloop-cli,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: rancher, cluster-api-azure-controller, gatus, sops, aactl, nuclei, melange, glab, knative-serving, containerd, spire-server, external-secrets-operator, terraform-provider-azurerm, hcloud, vault-benchmark, crossplane-provider-azure-sql, flux-kustomize-controller,...
GO-2026-5709 Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane
Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane...