GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, crossplane-provider-aws-acm-fips, crossplane-provider-aws-ec2, crossplane-provider-aws-sns, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-elbv2, crossplane-provider-aws-cloudformation, grafana-alloy-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, sealed-secrets, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, cluster-api, external-secrets-operator,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: docker, pulumi-language-java, grafana-alloy, pulumi, terraform-provider-pagerduty, rclone, crossplane-provider-aws-lambda, sops, flux-notification-controller, aactl, terraform-provider-azuread, src-fingerprint, crossplane-provider-aws-kms, cerbos,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: docker, pulumi-language-java, grafana-alloy, pulumi, terraform-provider-pagerduty, rclone, crossplane-provider-aws-lambda, sops, flux-notification-controller, aactl, terraform-provider-azuread, src-fingerprint, crossplane-provider-aws-kms, cerbos,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitness, kubevela-fips, policy-controller, atlantis, flux-helm-controller, crossplane-provider-aws-ec2, argo-cd-fips, crossplane-provider-aws-sns, pulumi-language-yaml, pulumi-language-dotnet, cluster-api, trivy-operator, trivy, external-secrets-operator,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitness, kubevela-fips, policy-controller, atlantis, flux-helm-controller, crossplane-provider-aws-ec2, argo-cd-fips, crossplane-provider-aws-sns, pulumi-language-yaml, pulumi-language-dotnet, cluster-api, trivy-operator, trivy, external-secrets-operator,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: step-issuer, timestamp-authority, temporal, kine, kyverno-policy-reporter, dex, flux-kustomize-controller, age, grafana-alloy, minio, openfga, sftpgo-plugin-eventstore, step, kubeflow-pipelines, step-ca, envoy-gateway, nri-mysql, jitsucom-bulker, wolfictl, gitea, sop...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, incert, nerdctl, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, sops, dagdotdev, aws-otel-collector, aws-efs-csi-driver, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbos,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, incert, nerdctl, mockgen, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, sops, dagdotdev, aws-otel-collector, aws-efs-csi-driver, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbo...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: polaris-fips, descheduler-fips, secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, sealed-secrets, dkron-fips, prometheus-redis-exporter, keda-fips, render-template-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: polaris-fips, descheduler-fips, secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, sealed-secrets, dkron-fips, prometheus-redis-exporter, keda-fips, render-template-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: polaris-fips, descheduler-fips, secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, sealed-secrets, dkron-fips, prometheus-redis-exporter, keda-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: kubescape-operator, descheduler, grafana-operator, nerdctl, sbom-convert, kine, amazon-cloudwatch-agent-operator, postgres-operator, sealed-secrets, terraform-provider-pagerduty, kor, headlamp, kubeflow-pipelines, nats-top, spqr, src, litestream,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: nerdctl, mockgen, kor, spqr, litestream, sops, flux-notification-controller, aws-sigv4-proxy, nri-nagios, chisel, doppler-kubernetes-operator, gogatekeeper, crossplane-provider-family-aws, aws-flb-cloudwatch, nri-haproxy, go-licenses, rancher-system-upgrade-controlle...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: nerdctl, mockgen, kor, spqr, litestream, sops, flux-notification-controller, aws-sigv4-proxy, nri-nagios, chisel, doppler-kubernetes-operator, gogatekeeper, crossplane-provider-family-aws, aws-flb-cloudwatch, nri-haproxy, go-licenses, rancher-system-upgrade-controlle...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kubescape-operator, descheduler, grafana-operator, nerdctl, kine, amazon-cloudwatch-agent-operator, postgres-operator, sealed-secrets, terraform-provider-pagerduty, kor, headlamp, kubeflow-pipelines, nats-top, spqr, src, litestream, nri-couchbase,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nerdctl, mockgen, kor, spqr, litestream, sops, flux-notification-controller, aws-sigv4-proxy, nri-nagios, chisel, doppler-kubernetes-operator, gogatekeeper, crossplane-provider-family-aws, aws-flb-cloudwatch, nri-haproxy, go-licenses, rancher-system-upgrade-controlle...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: kubescape-operator, descheduler, grafana-operator, nerdctl, sbom-convert, kine, amazon-cloudwatch-agent-operator, postgres-operator, sealed-secrets, terraform-provider-pagerduty, kor, headlamp, kubeflow-pipelines, nats-top, spqr, src, litestream,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: mattermost-fips, grafana, jitsucom-bulker, kyverno, docker-compose-fips, bank-vaults, zitadel, tkn-fips, pluto-fips, boring-registry-fips, gitlab-cng, kyverno-fips, ratify-fips, k9s-fips, gitlab-cng-fips, kyverno-notation-aws-fips, beats, rancher-security-scan,...