GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: tkn, spiffe-helper, falco-no-driver, newrelic-fluent-bit-output, redpanda, kserve-modelmesh-serving, eksctl, etcd, tailscale, kubernetes-csi-external-health-monitor, tofu-controller, snyk-cli, argo-cd, descheduler, dkron, docker-cli-buildx, redka, bom,...

EUVD-2026-9077

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: gostatsd, hello-world-golang, smokescreen, neuvector-dbgen, sonobuoy, aws-flb-firehose, kubeflow, newrelic-nri-statsd, kpt, docker-credential-gcr, kube-fluentd-operator, terraform-provider-google, src-fingerprint, aws-flb-cloudwatch, go-discover, aws-flb-kinesis,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: gostatsd, hello-world-golang, smokescreen, neuvector-dbgen, sonobuoy, aws-flb-firehose, kubeflow, newrelic-nri-statsd, kpt, docker-credential-gcr, kube-fluentd-operator, terraform-provider-google, src-fingerprint, aws-flb-cloudwatch, go-discover, aws-flb-kinesis,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, protoc-gen-go-grpc, kserve-modelmesh-serving, actions-runner-controller, etcd, neuvector-sigstore-interface, kubernetes-dashboard, minio-operator, nri-rabbitmq, tekton-pipelines, knative-serving, terraform-docs, gobump, ratify,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, protoc-gen-go-grpc, kserve-modelmesh-serving, actions-runner-controller, etcd, neuvector-sigstore-interface, kubernetes-dashboard, minio-operator, nri-rabbitmq, tekton-pipelines, knative-serving, terraform-docs, gobump, ratify,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller, dagdotdev,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller, dagdotdev,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: protoc-gen-go-grpc, etcd, dagdotdev, neuvector-sigstore-interface, docker-credential-ecr-login, tekton-pipelines, terraform-docs, flux-operator, git-credential-oauth, gobump, checksec, kube-vip-cloud-provider, hydra, extism, cortex, kubecolor,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, gke-gcloud-auth-plugin, mockery, octo-sts, prometheus-alertmanager, elvish, whereabouts, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: chisel, controller-gen, spiffe-helper, falco-no-driver, mockery, octo-sts, prometheus-alertmanager, whereabouts, elvish, protoc-gen-go-grpc, pgpool2exporter, etcd, harbor-registry, kubernetes-csi-external-health-monitor, tofu-controller, dagdotdev,...