GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cilium-envoy, terraform-provider-sendgrid, external-secrets-operator, ingress-nginx-controller, pulumi-language-java, grafana-rollout-operator, coredns, trivy, newrelic-fluent-bit-output, wal-g, vault-env, prometheus-pushgateway, k8ssandra-operator, openbao,...

EUVD-2026-9077

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: src-fingerprint, aws-flb-kinesis, kube-fluentd-operator, neuvector-dbgen, php-fpmexporter, terraform-provider-google, go-discover, gostatsd, kubeflow, newrelic-nri-statsd, smokescreen, kpt, sonobuoy, aws-flb-cloudwatch, docker-credential-gcr, aws-flb-firehose,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: src-fingerprint, aws-flb-kinesis, kube-fluentd-operator, neuvector-dbgen, php-fpmexporter, terraform-provider-google, go-discover, gostatsd, kubeflow, newrelic-nri-statsd, smokescreen, kpt, sonobuoy, aws-flb-cloudwatch, docker-credential-gcr, aws-flb-firehose,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, helm-mapkubeapis, helm-set-status, grafana-pyroscope, smarter-device-manager, karpenter, k8sgpt-operator, opensearch-k8s-operator, ip-masq-agent, gobump, nri-redis,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, helm-mapkubeapis, helm-set-status, grafana-pyroscope, smarter-device-manager, karpenter, k8sgpt-operator, opensearch-k8s-operator, ip-masq-agent, gobump, nri-redis,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, pguser, xcover, ghaudit, helm-mapkubeapis, helm-set-status, litefs, grafana-pyroscope, trivy-operator, smarter-device-manager, opensearch-k8s-operator, k8sgpt-operator, ip-masq-agent, gobump, cluster-api-provider-vsphere, falco-exporter,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, nri-prometheus, xcover, task,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: controller-gen, mongodb-kubernetes-operator, helm-push, terraform-provider-sendgrid, openbao-k8s, pguser, azure-workload-identity-webhook, cfssl, kubeflow, rancher-system-agent, guac, vault-env, prometheus-pushgateway, helm-docs, restic, gosu, nri-prometheus, xcover,...