GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kpt, headlamp, dynamic-localpv-provisioner, kots, k8ssandra-client, emissary, kwok, teleport, kargo, jitsucom-bulker, consul-k8s, zarf, trivy-operator, cilium, kubeflow-pipelines, envoy-gateway, istio, linkerd2, skaffold, datadog-agent, trivy,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, kpt, headlamp, dynamic-localpv-provisioner, kots, k8ssandra-client, emissary, kwok, teleport, kargo, jitsucom-bulker, consul-k8s, zarf, trivy-operator, cilium, kubeflow-pipelines, envoy-gateway, istio, linkerd2, skaffold, datadog-agent, trivy,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, sigstore-scaffolding, kyverno, spire-server, kyverno-notation-aws, zarf, trivy-operator, trivy, witness, zot, skaffold, kubescape, tflint, gitsign, aactl, buildkitd, crossplane, falcoctl, neuvector-sigstore-interface, tkn, goreleaser,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, sigstore-scaffolding, kyverno, spire-server, kyverno-notation-aws, zarf, trivy-operator, trivy, witness, zot, skaffold, kubescape, tflint, gitsign, aactl, buildkitd, crossplane, falcoctl, neuvector-sigstore-interface, tkn, goreleaser,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: helm, secrets-store-csi-driver, filebrowser, emissary, lvm-driver, wave, bento, tetragon, kyverno, spire-server, aws-flb-firehose, kubernetes-csi-driver-nfs, cluster-api-provider-vsphere, envoy-gateway, istio, trivy-operator, datadog-agent, vault-benchmark,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: fulcio-fips, trivy, spire-server-fips, opentelemetry-collector, prometheus, up, falcoctl, druid, cluster-autoscaler, restic-fips, boring-registry, terragrunt, hugo, step-ca, restic, sigstore-scaffolding, trivy-fips, k8sgpt, thanos, bank-vaults, policy-controller-fips...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flyte, fulcio, sigstore-scaffolding, secrets-store-csi-driver-provider-azure, py3-cassandra-medusa, rekor, py3-azure-identity, spire-server, tempo, terragrunt, trivy, airflow, zarf, zot, datadog-agent, ksops, kubescape, wal-g, fluent-bit-plugin-loki,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: melange, falco, wolfictl, spire-server, zot, zarf, skaffold, apko, kubescape, gitsign, aactl, slsa-verifier, falcoctl, neuvector-sigstore-interface, tkn, goreleaser, policy-controller, ko, flux-source-controller, tekton-chains, vexctl...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: spire-server-fips, vexctl, chainctl, falcoctl, aactl, spire-server, policy-controller, falco, zot, slsa-verifier, tekton-chains, ko-fips, ko, neuvector-sigstore-interface, kubescape, tkn-fips, wolfictl, policy-controller-fips, gitsign, falcoctl-fips, tkn, goreleaser,...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: melange, falco, wolfictl, spire-server, zot, zarf, skaffold, apko, kubescape, gitsign, aactl, slsa-verifier, falcoctl, neuvector-sigstore-interface, tkn, goreleaser, policy-controller, ko, flux-source-controller, tekton-chains, vexctl...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: melange, falco, wolfictl, spire-server, zot, zarf, skaffold, apko, kubescape, gitsign, aactl, slsa-verifier, falcoctl, neuvector-sigstore-interface, tkn, goreleaser, policy-controller, ko, flux-source-controller, tekton-chains, vexctl...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: spire-server-fips, vexctl, chainctl, falcoctl, aactl, spire-server, policy-controller, falco, zot, slsa-verifier, tekton-chains, ko-fips, ko, neuvector-sigstore-interface, kubescape, tkn-fips, wolfictl, policy-controller-fips, gitsign, falcoctl-fips, tkn, goreleaser,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: melange, falco, wolfictl, spire-server, zot, zarf, skaffold, apko, kubescape, gitsign, aactl, slsa-verifier, falcoctl, neuvector-sigstore-interface, tkn, goreleaser, policy-controller, ko, flux-source-controller, tekton-chains, vexctl...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: spire-server-fips, vexctl, chainctl, falcoctl, aactl, spire-server, policy-controller, falco, zot, slsa-verifier, tekton-chains, ko-fips, ko, neuvector-sigstore-interface, kubescape, tkn-fips, wolfictl, policy-controller-fips, gitsign, falcoctl-fips, tkn, goreleaser,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: spire-server-fips, external-secrets-fips, boring-registry-fips, spire-server, boring-registry, mc, minio, minio-fips, falco, falcoctl, mc-fips, falcoctl-fips...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: spire-server-fips, external-secrets-fips, boring-registry-fips, spire-server, boring-registry, mc, minio, minio-fips, falco, falcoctl, mc-fips, falcoctl-fips...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: fulcio-fips, php-fpmexporter, newrelic-infrastructure-agent, kubernetes-dashboard-metrics-scraper, up, kubernetes, cilium-fips, crossplane-provider-azure-authorization, prometheus-alertmanager-fips, cfssl, scorecard, crossplane-provider-azure-managedidentity, litefs,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, trivy, crane, argo-workflows, cri-tools, kpt, ctop, pulumi, skopeo, helm-fips, newrelic-infrastructure-agent, flux-image-reflector-controller, vexctl, helm-operator-fips, argo-workflows-fips, up, falcoctl, guac, aactl, k9s, kubevela,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, trivy, crane, argo-workflows, cri-tools, kpt, ctop, pulumi, skopeo, helm-fips, newrelic-infrastructure-agent, flux-image-reflector-controller, vexctl, helm-operator-fips, argo-workflows-fips, up, falcoctl, guac, aactl, k9s, kubevela,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: kubescape, falco, falcoctl, minio, mc, tekton-chains, gitsign, spire-server, vexctl, boring-registry...