GO-2024-2659 vulnerabilities

Vulnerabilities for packages: melange, up, wolfictl, trivy, conftest, ko, spire-server, buildkitd, cilium-cli, buf, docker-compose, kubescape, crossplane, syft, zot, tkn, kaniko, kargo, cadvisor, grype, aactl, ctop, dagger...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: trivy, gitea, ko, fulcio, external-secrets-operator, hcloud, vault-benchmark, crossplane-provider-family-azure, falco-no-driver, go-discover, opentofu, crossplane-provider-keycloak, crossplane-provider-aws-cloudfront, buildah, datadog-agent, kubernetes-dashboard,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: trivy, gitea, ko, fulcio, external-secrets-operator, hcloud, vault-benchmark, crossplane-provider-family-azure, falco-no-driver, go-discover, opentofu, buildah, datadog-agent, kubernetes-dashboard, neuvector-sigstore-interface, pulumi-language-yaml,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: trivy, gitea, external-secrets-operator, falco-no-driver, go-discover, opentofu, buildah, kubernetes-dashboard, pulumi-language-yaml, guac, caddy, podman, trivy-operator, step-issuer, act, step, melange, external-dns, step-kms-plugin, argocd-image-updater, nfpm, zarf...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: containerd, helm-exporter-fips, cloudbeat, rancher-helm, newrelic-infrastructure-agent-fips, amazon-ecs-agent, kube-arangodb-fips, falco-no-driver, eksctl, xeol-fips, grype, dagger, xeol, upwind-agent, manifest-tool, k8ssandra-client, kubescape-server, packer,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: containerd, helm-exporter-fips, cloudbeat, rancher-helm, newrelic-infrastructure-agent-fips, amazon-ecs-agent, kube-arangodb-fips, falco-no-driver, eksctl, xeol-fips, grype, dagger, xeol, manifest-tool, k8ssandra-client, kubescape-server, packer, chainctl, skaffold,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: k8sgpt, goreleaser, lazygit, cri-tools, grafana, nfpm, loki, witness, mcp-grafana, weaviate, minio, eksctl, grafana-alloy, datadog-agent, kubevela, ollama, vcluster, maru, malcontent, rclone, terragrunt, tempo, nuclei, terraform-mcp-server, redpanda, prometheus,...

GHSA-6G7G-W4F8-9C9X vulnerabilities

Vulnerabilities for packages: k8sgpt, goreleaser, lazygit, cri-tools, grafana, nfpm, loki, witness, mcp-grafana, weaviate, minio, eksctl, grafana-alloy, datadog-agent, kubevela, ollama, vcluster, maru, malcontent, rclone, terragrunt, tempo, nuclei, terraform-mcp-server, redpanda, prometheus,...

GHSA-6G7G-W4F8-9C9X vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, elastic-agent-fips, prometheus, chainloop-control-plane, maru, prometheus-fips, chainloop-control-plane-fips, cri-tools, opentelemetry-collector-contrib-fips, loki-fips, ollama, elastic-agent, grafana-beyla, jfrog-cli, malcontent, rclone,...

EUVD-2008-6597

Malware in sbrugna...

Malicious code in dagger-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....

MAL-2025-6920 Malicious code in dagger-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, redka, kubernetes-csi-livenessprobe-fips, hugo-extended, nfs-subdir-external-provisioner, prometheus-operator, terragrunt, git-credential-oauth, flux-image-reflector-controller-fips, amass, eksctl, sftpgo-plugin-kms, spicedb,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: k8sgpt, opa, melange, wolfictl, spegel, trivy, chartmuseum, zarf, xeol, neuvector-scanner, buildkitd, cilium-cli, helm-operator, docker-compose, flux-helm-controller, skaffold, helm-push, eksctl, k8ssandra-client, kubescape, docker-cli-buildx, kubevela, syft, zot,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, zot, neuvector-fips, rancher-fleet-fips, neuvector, kubescape, neuvector-scanner, helm-operator-fips, fuse-overlayfs-snapshotter, cilium-cli, zarf, beats-fips, kubevela, linkerd2, trivy-fips, syft-fips, rancher, nerdctl, cluster-api-helm-controlle...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, zot, neuvector-fips, rancher-fleet-fips, neuvector, kubescape, neuvector-scanner, helm-operator-fips, fuse-overlayfs-snapshotter, cilium-cli, zarf, beats-fips, kubevela, linkerd2, trivy-fips, syft-fips, rancher, nerdctl, cluster-api-helm-controlle...

GHSA-2HMF-46V7-V6FX vulnerabilities

Vulnerabilities for packages: melange, dagger, zot, guac...

CVE-2023-49559 vulnerabilities

Vulnerabilities for packages: melange, dagger, zot, guac...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: buf, docker-compose, melange, kaniko, helm-push, policy-controller, wolfictl, syft, k3d, dagger, cri-tools, grype, neuvector-scanner, harbor-scanner-trivy...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: melange, docker-compose, kaniko, policy-controller, wolfictl, syft, cri-tools, k3d, policy-controller-fips, grype, neuvector-scanner, dagger, helm-push, harbor-scanner-trivy-fips, buf, harbor-scanner-trivy...