GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, loki, mattermost, zot, mods, rootlesskit, falcoctl, apko, pulumi-language-java, fulcio, dagger, kubernetes-dashboard, telegraf, terragrunt, cilium, rancher-machine, openbao, age, crossplane-provider-family-azure, step-kms-plugin, chisel,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: grype-db, neuvector-fips, tigera-operator, helm, chainctl, kubescape-operator-fips, linkerd2, helm-operator, kubescape-server, fuse-overlayfs-snapshotter, rancher-helm, k9s-fips, kubescape-server-fips, consul-k8s, skaffold-fips, trivy-operator, helm-set-status,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kube-vip, cluster-api-provider-vsphere, cloud-provider-aws, terraform-provider-random, dataplaneapi, apache-exporter, helm-mapkubeapis, spiffe-helper, mattermost, argo-workflows, zot, flannel, apisix-ingress-controller, lazydocker, falcoctl, apko,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: ollama, minio, loki, tempo, weaviate, dgraph, goreleaser, datadog-agent, nfpm, mcp-grafana, dagger, rclone, vcluster, terragrunt, maru, gitlab-runner, nuclei, eksctl, opentelemetry-collector, opentelemetry-collector-contrib, malcontent, teleport, k3s, lazygit, grafan...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: bom, azurefile-csi-fips, tigera-operator, hydra, nerdctl, kube-oidc-proxy, kuberay-operator-fips, kbld-fips, sqlexporter, helm-operator, hugo-fips, kube-conformance, kubo, eks-distro-fips, fuse-overlayfs-snapshotter, hydra-fips, crossplane-provider-sql, emissary-fips...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, mongo-tools, loki, argo-workflows, zot, rook, traefik, falcoctl, timestamp-authority, grafana-agent-operator, fulcio, terraform, terraform-provider-azapi, fluent-bit-plugin-loki, grafana-mimir, promxy, flyte, telegraf, temporal-server,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: helm, trivy, wolfictl, opa, zot, neuvector-scanner, chartmuseum, newrelic-infrastructure-agent, xeol, cluster-api-helm-controller, syft, kots, flux-source-controller, ctop, datadog-agent, gatekeeper, helm-operator, helm-push, kargo, docker-cli-buildx, dagger, docker,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: grype-db, neuvector-fips, helm, chainctl, linkerd2, nerdctl, helm-operator, k3s, opa-fips, fuse-overlayfs-snapshotter, consul-k8s, beats, syft-fips, consul-k8s-fips, flux-helm-controller, kaniko-fips, flux-helm-controller-fips, kubescape, trivy, grype, kaniko, zarf,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: grype-db, neuvector-fips, helm, chainctl, linkerd2, nerdctl, helm-operator, k3s, opa-fips, fuse-overlayfs-snapshotter, consul-k8s, beats, syft-fips, consul-k8s-fips, flux-helm-controller, kaniko-fips, flux-helm-controller-fips, kubescape, trivy, grype, kaniko, zarf,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kots, chartmuseum, cert-manager, k9s, helm-push, k8sgpt, kubevela, cilium-cli, zarf, eksctl, zot, flux-helm-controller, kubescape, flux-source-controller, up, trivy, cert-manager-fips, helm-operator...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: flux-helm-controller, kots, flux-source-controller, helm-operator, trivy, helm-push, kubescape, k8sgpt, kubevela, zot, eksctl, chartmuseum, k9s, up, zarf, cilium-cli...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kots, chartmuseum, cert-manager, k9s, helm-push, k8sgpt, kubevela, cilium-cli, zarf, eksctl, zot, flux-helm-controller, kubescape, flux-source-controller, up, trivy, cert-manager-fips, helm-operator...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: gitsign, kots, rancher-machine, bom, ko-fips, aactl, k8sgpt, kargo, helm, nerdctl, dagger, helm-operator, buildkitd, k3s, chartmuseum, argo-workflows-fips, cadvisor, cosign, cert-manager, helm-operator-fips, loki, kubevela, skopeo, timoni, cosign-fips, falco,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: gitsign, kots, rancher-machine, bom, ko-fips, aactl, k8sgpt, kargo, helm, nerdctl, dagger, helm-operator, buildkitd, k3s, chartmuseum, argo-workflows-fips, cadvisor, cosign, cert-manager, helm-operator-fips, loki, kubevela, skopeo, timoni, cosign-fips, falco,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kots, melange, gitness, k8sgpt, helm, flux-source-controller, buildkitd, cert-manager, fuse-overlayfs-snapshotter, helm-push, kubevela, rancher-agent, eksctl, cert-manager-fips, newrelic-infrastructure-agent, zot, ctop, flux-helm-controller, kubescape, skaffold, triv...