GO-2026-6686 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, packer-fips, k8s-image-swapper, datadog-agent, kubevirt-cdi-importer-fips, zarf, k3d, ctop-fips, datadog-agent-fips, rancher-agent, cloudbeat, envoy-gateway, k9s-fips, neuvector-fips, cloudbeat-fips, dagger,...

GO-2026-6686 vulnerabilities

Vulnerabilities for packages: zarf, newrelic-infrastructure-agent, runc, vcluster, scorecard, dagger, docker, ctop, containerd, k3s, gosu, k3d, neuvector-scanner, act, datadog-agent, undock, xeol...

CVE-2026-61801 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, packer-fips, k8s-image-swapper, datadog-agent, kubevirt-cdi-importer-fips, zarf, k3d, ctop-fips, datadog-agent-fips, rancher-agent, cloudbeat, envoy-gateway, k9s-fips, neuvector-fips, cloudbeat-fips, dagger,...

GHSA-MJCV-P78Q-W5FW vulnerabilities

Vulnerabilities for packages: zarf, newrelic-infrastructure-agent, runc, vcluster, scorecard, dagger, docker, ctop, containerd, k3s, gosu, k3d, neuvector-scanner, act, datadog-agent, undock, xeol...

CVE-2026-61801 vulnerabilities

Vulnerabilities for packages: zarf, newrelic-infrastructure-agent, runc, vcluster, scorecard, dagger, docker, ctop, containerd, k3s, gosu, k3d, neuvector-scanner, act, datadog-agent, undock, xeol...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: steampipe, zarf, docker-cli-buildx, neuvector-scanner, k8sgpt, kube-arangodb, spegel, rancher, kubescape-operator, helm-operator, trivy-operator, kaniko, kargo, docker-compose, kubevela, fuse-overlayfs-snapshotter, falco-no-driver, helm-set-status, rancher-helm, zot,...

kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)

kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: OSV:PYSEC-2026-3855...

Malicious code in dagger-core (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8.9 npm as malicious. It is considered malicious because: -...

kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)

kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: OSV:GHSA-MV8M-V9V6-5F94...

kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)

kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: MEND:CVE-2026-54548...

GO-2024-2920 vulnerabilities

Vulnerabilities for packages: guac, melange, dagger, zot...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: cri-tools, helm-push, policy-controller-fips, docker-compose, buf, kaniko, k3d, grype, harbor-scanner-trivy, melange, wolfictl, dagger, harbor-scanner-trivy-fips, neuvector-scanner, syft, policy-controller...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, packer-fips, gitea-fips, trivy, flux-image-automation-controller, amazon-ssm-agent, kargo, bom, zarf, kubevela, go-licenses, dagger, guac, pulumi, apko, nemo, pulumi-language-java, src-fingerprint, gptscript, snyk-cli, argocd-image-updater,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, chartmuseum-fips, falco-no-driver, helm-push, grype, google-osconfig-agent, chartmuseum, manifest-tool, kubescape, gitlab-operator, headlamp-fips, helm-diff, skaffold, containerd, k3s, chainctl, docker-compose, kargo, eksctl, cilium-cli,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, chartmuseum-fips, falco-no-driver, helm-push, grype, google-osconfig-agent, chartmuseum, manifest-tool, kubescape, gitlab-operator, headlamp-fips, helm-diff, skaffold, containerd, k3s, chainctl, docker-compose, kargo, eksctl, cilium-cli,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: neuvector-fips, zarf-fips, chartmuseum-fips, falco-no-driver, helm-push, grype, google-osconfig-agent, chartmuseum, manifest-tool, kubescape, kubescape-server, headlamp-fips, skaffold, k3s, scorecard, chainctl, tigera-operator, docker-compose, kargo, eksctl, kubevela...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: filebrowser, falcoctl, kube-bench, cluster-api, spark-operator-fips, guac, ko, amazon-cloudwatch-agent-operator-fips, policy-controller-fips, falcoctl-fips, grype, tflint, istio, aws-iam-authenticator-fips, atlantis-fips, hcloud, chart-testing-fips,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, amazon-ssm-agent, guac, gitlab-runner-fips, zarf-fips, apko, gomplate-fips, terragrunt-fips, grype, google-osconfig-agent, kubescape, argo-cd-fips, redpanda-console, kubescape-server, argo-events-fips, skaffold, scorecard, chainctl, grafana, nfpm,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, amazon-ssm-agent, guac, zarf-fips, apko, falco-no-driver, gitlab-workhorse-ce-fips, gomplate-fips, kubernetes-dashboard, terragrunt-fips, knative-serving-fips, grype, cert-manager, istio, kubescape, prometheus-podman-exporter, argo-cd-fips,...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: prometheus, rclone, cri-tools, grafana, opentelemetry-collector-contrib, terragrunt, tempo, weaviate, k8sgpt, vcluster, ollama, malcontent, kubevela, loki, maru, grafana-alloy, goreleaser, mcp-grafana, witness, minio, opentelemetry-collector, lazygit, dgraph, telepor...