CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: ldap2pg, kyverno, sftpgo-plugin-auth, versitygw, cert-manager-istio-csr, rancher-agent, terraform-fips, teleport, cloudbeat-fips, elastic-agent, dex-fips, external-secrets-operator, packer-fips, openbao-fips, syncthing, xeol, neuvector-fips, cert-manager-cmctl,...

CVE-2026-33817 vulnerabilities

Vulnerabilities for packages: rke2-runtime, commercial-grafana, zot, consul-fips, datadog-agent, rke2-runtime-fips, frankenphp-8.2, beats-fips, k3s, cloudbeat-fips, elastic-agent, consul, frankenphp-8.5, mattermost, containerd, grafana, vault, datadog-agent-fips, elastic-agent-fips, beats,...

GHSA-6JWV-W5XF-7J27 vulnerabilities

Vulnerabilities for packages: rke2-runtime, commercial-grafana, zot, consul-fips, datadog-agent, rke2-runtime-fips, frankenphp-8.2, beats-fips, k3s, cloudbeat-fips, elastic-agent, consul, frankenphp-8.5, mattermost, containerd, grafana, vault, datadog-agent-fips, elastic-agent-fips, beats,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-efs, crossplane-provider-family-aws-fips, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-eks, elastic-agent, crossplane-provider-aws-wafv2-fips, nrdot-collector-k8s-fips, crossplane-provider-aws-eks-fips,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-efs, crossplane-provider-family-aws-fips, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-eks, elastic-agent, crossplane-provider-aws-wafv2-fips, nrdot-collector-k8s-fips, crossplane-provider-aws-eks-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: supercronic, databricks-cli-fips, kubescape-operator-fips, gitlab-rails-ce, cerbos-fips, delve, sftpgo-plugin-auth, json-exporter-fips, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, eck-operator,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: databricks-cli-fips, kubescape-operator-fips, gitlab-rails-ce, cerbos-fips, sftpgo-plugin-auth, json-exporter-fips, karma-fips, memcached-exporter-fips, rancher-agent, crossplane-provider-aws-lambda-fips, eck-operator, newrelic-infrastructure-agent, elastic-agent,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: kyverno, datadog-agent, rancher-security-scan, jitsucom-bulker, beats-fips, gitlab-cng, gitlab-runner-fips, tkn-fips, kyverno-notation-aws-fips, grafana, boring-registry-fips, datadog-agent-fips, docker-compose-fips, zitadel, elastic-agent-fips, istio-fips,...

GHSA-2MJ3-6GRC-PX38 vulnerabilities

Vulnerabilities for packages: elastic-agent, apm-server-fips, beats-fips, cloudbeat, cloudbeat-fips, apm-server...

CVE-2025-68383 vulnerabilities

Vulnerabilities for packages: elastic-agent, apm-server-fips, beats-fips, cloudbeat, cloudbeat-fips, apm-server...

CVE-2025-68388 vulnerabilities

Vulnerabilities for packages: elastic-agent, apm-server-fips, cloudbeat, cloudbeat-fips, apm-server, elastic-agent-fips...

GHSA-FJ69-23M4-CCVV vulnerabilities

Vulnerabilities for packages: elastic-agent, apm-server-fips, cloudbeat, cloudbeat-fips, apm-server, elastic-agent-fips...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: supercronic, cloudflared-fips, gitlab-rails-ce, hugo, jitsucom-bulker, karma-fips, aws-nuke-fips, memcached-exporter-fips, rancher-agent, newrelic-infrastructure-agent, elastic-agent, kube-logging-operator-custom-runner-fips, tfsec, argo-cd-fips, traefik-fips,...

EUVD-2025-13061

Malicious code in bioql PyPI...

EUVD-2024-36558

Malicious code in bioql PyPI...

EUVD-2023-58908

Malicious code in bioql PyPI...

EUVD-2023-3224

Malicious code in bioql PyPI...

EUVD-2023-50860

Malicious code in bioql PyPI...

EUVD-2024-40289

Malicious code in bioql PyPI...

CVE-2024-37283

An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug. By default the log level is set to info, where no leak occurs...