84 matches found
GO-2026-6686 vulnerabilities
Vulnerabilities for packages: kubevirt-cdi-importer-fips, xeol-fips, xeol, newrelic-infrastructure-agent-fips, cloudbeat-fips, ctop, neuvector-fips, neuvector-scanner-fips, undock, envoy-gateway-fips, runc-fips, docker-fips, newrelic-infrastructure-agent, docker, google-osconfig-agent, neuvector,...
GO-2026-6686 vulnerabilities
Vulnerabilities for packages: zarf, neuvector-scanner, xeol, runc, k3d, scorecard, dagger, containerd, k3s, undock, vcluster, docker, datadog-agent, gosu, act, ctop, newrelic-infrastructure-agent...
CVE-2026-61801 vulnerabilities
Vulnerabilities for packages: kubevirt-cdi-importer-fips, xeol-fips, xeol, newrelic-infrastructure-agent-fips, cloudbeat-fips, ctop, neuvector-fips, neuvector-scanner-fips, undock, envoy-gateway-fips, runc-fips, docker-fips, newrelic-infrastructure-agent, docker, google-osconfig-agent, neuvector,...
CVE-2026-61801 vulnerabilities
Vulnerabilities for packages: zarf, neuvector-scanner, xeol, runc, k3d, scorecard, dagger, containerd, k3s, undock, vcluster, docker, datadog-agent, gosu, act, ctop, newrelic-infrastructure-agent...
GHSA-MJCV-P78Q-W5FW vulnerabilities
Vulnerabilities for packages: zarf, neuvector-scanner, xeol, runc, k3d, scorecard, dagger, containerd, k3s, undock, vcluster, docker, datadog-agent, gosu, act, ctop, newrelic-infrastructure-agent...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, headlamp, syft, kubevela, trivy-operator, k9s, docker-cli-buildx, trivy, wolfictl, chartmuseum, k8sgpt, helm-push, rancher, scorecard, grype, rancher-agent, spegel, dagger, newrelic-infrastructure-agent, kargo, manifest-tool, buildkitd,...
kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)
kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: OSV:PYSEC-2026-3855...
Malicious code in dagger-core (npm)
The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8.9 npm as malicious. It is considered malicious because: -...
kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)
kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: OSV:GHSA-MV8M-V9V6-5F94...
kas-dagger-utils (1.0.0) potentially affected by CVE-2026-54548 via kas (4.8.2)
kas PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils 1.0.0 Source cves: CVE-2026-54548 Source advisory: MEND:CVE-2026-54548...
GO-2024-2920 vulnerabilities
Vulnerabilities for packages: guac, dagger, zot, melange...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: kaniko, k3d, harbor-scanner-trivy-fips, syft, neuvector-scanner, harbor-scanner-trivy, helm-push, policy-controller-fips, docker-compose, policy-controller, grype, melange, wolfictl, cri-tools, dagger, buf...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: syft, task, gitea, grafana-alloy-fips, timoni, argo-workflows-fips, kargo, kubescape, nemo, dagger, chezmoi, goreleaser, k9s, kaniko, gitea-fips, flux-kustomize-controller-fips, pulumi, k8sgpt, chainctl, guac, flux-image-automation-controller,...
GO-2025-4108 vulnerabilities
Vulnerabilities for packages: xeol, flux-helm-controller, helm-operator-fips, k8ssandra-client-fips, helm-operator, kargo, kube-arangodb, containerd, beats-fips, opa-envoy, k8sgpt, eksctl, headlamp-fips, cloudbeat, gitlab-rails-ce-fips, flux-source-controller, cluster-api-helm-controller-fips,...
GO-2025-4100 vulnerabilities
Vulnerabilities for packages: xeol, flux-helm-controller, helm-operator-fips, k8ssandra-client-fips, helm-operator, kargo, kube-arangodb, containerd, beats-fips, opa-envoy, k8sgpt, eksctl, headlamp-fips, cloudbeat, gitlab-rails-ce-fips, flux-source-controller, cluster-api-helm-controller-fips,...
GO-2026-5758 vulnerabilities
Vulnerabilities for packages: xeol, helm-operator-fips, neuvector-fips, helm-exporter-fips, helm-operator, jfrog-cli, kargo, kube-arangodb, k8sgpt, chaos-mesh, eksctl, headlamp-fips, cloudbeat, gitlab-rails-ce-fips, cluster-api-helm-controller-fips, gatekeeper, spegel-fips, crossplane-fips,...
GO-2025-3787 vulnerabilities
Vulnerabilities for packages: istio-fips, conftest-fips, pgtimetable, grafana-alloy-fips, filebrowser, agentbeat, thanos-fips, goreleaser, opa-envoy, kyverno-notation-aws-fips, aws-otel-collector-fips, cosign-fips, neuvector-sigstore-interface-fips, timestamp-authority, spark-operator,...
GO-2026-5336 vulnerabilities
Vulnerabilities for packages: gitaly, xeol, grafana-alloy-fips, chainloop-cli, gitlab-runner, jfrog-cli, kargo, goreleaser, cloudbeat, gitlab-rails-ce-fips, pulumi-language-java, crossplane-fips, trivy-operator-fips, pulumi-kubernetes-operator, argo-workflows, skaffold, argo-events, steampipe,...
GO-2026-5015 vulnerabilities
Vulnerabilities for packages: frankenphp-8.3, cloud-provider-aws, chainloop-cli, knative-eventing-fips, jfrog-cli, containerd, aactl, prometheus-podman-exporter, frankenphp-8.2, vault-fips, teleport-operator-fips, harbor, cloudbeat, gitlab-rails-ce-fips, flux-source-controller, kube-state-metrics...