67 matches found
GHSA-33VJ-92QQ-66HC vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, teleport, chartmuseum, neuvector-scanner-fips, kubevela, envoy-gateway, helm-exporter-fips, helm-mapkubeapis, docker-cli-buildx-fips, fuse-overlayfs-snapshotter, kaniko-fips, helm-push, eksctl, trivy-operator, ctop, dagger, docker-compose-fips,...
CVE-2026-50195 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, teleport, chartmuseum, neuvector-scanner-fips, kubevela, envoy-gateway, helm-exporter-fips, helm-mapkubeapis, docker-cli-buildx-fips, fuse-overlayfs-snapshotter, kaniko-fips, helm-push, eksctl, trivy-operator, ctop, dagger, docker-compose-fips,...
kas-dagger-utils (=1.0.0) potentially affected by CVE-2026-47192 via kas (=4.8.2)
kas PYPI version =4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils =1.0.0 Source cves: CVE-2026-47192 Source advisory: OSV:GHSA-4VQC-WPWG-VH7J...
kas-dagger-utils (=1.0.0) potentially affected by CVE-2026-47191 via kas (=4.8.2)
kas PYPI version =4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on kas and may be impacted: - kas-dagger-utils =1.0.0 Source cves: CVE-2026-47191 Source advisory: OSV:GHSA-QJWP-HRQ6-R26R...
CVE-2026-32285 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, goreleaser, rclone, witness, prometheus, nfpm, lazygit, loki, eksctl, ollama, gitlab-runner, malcontent, minio, k3s, grafana, redpanda, terraform-mcp-server, nuclei, dagger, mcp-grafana, tempo, kubevela, weaviate, dgraph, terragrunt,...
GHSA-6G7G-W4F8-9C9X vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, goreleaser, rclone, witness, prometheus, nfpm, lazygit, loki, eksctl, ollama, gitlab-runner, malcontent, minio, k3s, grafana, redpanda, terraform-mcp-server, nuclei, dagger, mcp-grafana, tempo, kubevela, weaviate, dgraph, terragrunt,...
GHSA-6G7G-W4F8-9C9X vulnerabilities
Vulnerabilities for packages: nfpm, teleport, goreleaser, influxd, loki-fips, cri-tools, terragrunt-fips, kubevela, grafana-alloy, chainloop-cli, mcp-grafana-fips, ollama-fips, grafana-alloy-fips, elastic-agent, jfrog-cli, kubevela-fips, tempo, tempo-fips, eksctl, commercial-grafana, witness,...
EUVD-2008-6597
Malware in sbrugna...
MAL-2025-6920 Malicious code in dagger-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....
Malicious code in dagger-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: vgpu-util, gitlab-cng, flux-source-controller-fips, aws-privateca-issuer-fips, rke2-runtime, trillian, promxy-fips, velero-fips, kubernetes-dashboard-api, wave-fips, fuse-overlayfs-snapshotter, ytt, kubo-fips, crossplane-provider-azure-sql, cilium-fips, nri-mysql,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: opa, docker, osv-scanner, wolfictl, zarf, neuvector-scanner, linkerd2, cilium-cli, melange, envoy-gateway, kubescape, eksctl, zot, spegel, ctop, k3s, k8ssandra-client, newrelic-infrastructure-agent, dagger, opa-envoy, fuse-overlayfs-snapshotter, docker-compose,...
CVE-2024-40635 vulnerabilities
Vulnerabilities for packages: kaniko, flux-source-controller, zarf, k8ssandra-client-fips, grype-fips, flux-source-controller-fips, chartmuseum, helm, neuvector-scanner-fips, kubevela, consul-k8s-fips, skaffold, cluster-api-helm-controller-fips, xeol-fips, cilium-cli, envoy-gateway, helm-fips,...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: kaniko, flux-source-controller, zarf, k8ssandra-client-fips, grype-fips, flux-source-controller-fips, chartmuseum, helm, neuvector-scanner-fips, kubevela, consul-k8s-fips, skaffold, cluster-api-helm-controller-fips, xeol-fips, cilium-cli, envoy-gateway, helm-fips,...
GHSA-2HMF-46V7-V6FX vulnerabilities
Vulnerabilities for packages: zot, melange, guac, dagger...
CVE-2023-49559 vulnerabilities
Vulnerabilities for packages: zot, melange, guac, dagger...
CVE-2024-32473 vulnerabilities
Vulnerabilities for packages: kaniko, docker, grype, harbor-scanner-trivy, buf, wolfictl, helm-push, policy-controller, policy-controller-fips, cri-tools, harbor-scanner-trivy-fips, melange, k3d, neuvector-scanner, docker-compose, syft, dagger...
CVE-2024-32473 vulnerabilities
Vulnerabilities for packages: k3d, docker, dagger, wolfictl, docker-compose, harbor-scanner-trivy, neuvector-scanner, kaniko, grype, melange, buf, cri-tools, syft, helm-push, policy-controller...
GHSA-X84C-P2G9-RQV9 vulnerabilities
Vulnerabilities for packages: kaniko, docker, grype, harbor-scanner-trivy, buf, wolfictl, helm-push, policy-controller, policy-controller-fips, cri-tools, harbor-scanner-trivy-fips, melange, k3d, neuvector-scanner, docker-compose, syft, dagger...