GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: vitess, flux-image-automation-controller-fips, kots, omnictl-multiarch, calico-fips, harbor-fips, flux-image-automation-controller, kubernetes, chisel, trivy, prometheus-mongodb-exporter, seaweedfs-rocksdb, rancher-agent, commercial-expanso-edge, drone-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: kots, omnictl-multiarch, crossplane-provider-aws-kafka-fips, harbor-fips, flux-image-automation-controller, crossplane-provider-aws-eks-fips, podman, crossplane-provider-aws-cloudwatchevents-fips, glab, crossplane, rootlesskit, crossplane-provider-aws-cognitoidp,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: steampipe, pulumi-language-java, telegraf, fscrypt, gh, minio, crossplane-provider-azure-authorization, argo-cd, neuvector-sigstore-interface, grype, cluster-api-azure-controller, vitess, istio, gitlab-kas, zot, argo-events, atlantis, containerd, aactl, buildah, gatu...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: art, litestream, kots, kubernetes-csi-external-snapshotter-fips, harbor-fips, flux-image-automation-controller, ory-kratos, kubeflow-pipelines-fips, eks-distro, neuvector, podman, cadvisor, crossplane-provider-aws-cloudwatchevents-fips, kube-rbac-proxy-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: art, litestream, kots, kubernetes-csi-external-snapshotter-fips, harbor-fips, flux-image-automation-controller, ory-kratos, kubeflow-pipelines-fips, eks-distro, neuvector, podman, cadvisor, crossplane-provider-aws-cloudwatchevents-fips, kube-rbac-proxy-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller-fips, kots, flux-image-automation-controller, jfrog-cli, syft, external-secrets-operator, trivy, kargo, crossplane-fips, crossplane, grafana-alloy, snyk-cli, gitlab-rails-ce, zarf-fips, pulumi-language-yaml, dagger, trufflehog-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller-fips, kots, flux-image-automation-controller, jfrog-cli, syft, external-secrets-operator, trivy, kargo, crossplane-fips, crossplane, grafana-alloy, snyk-cli, gitlab-rails-ce, zarf-fips, pulumi-language-yaml, dagger, trufflehog-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller-fips, kots, flux-image-automation-controller, jfrog-cli, syft, external-secrets-operator, trivy, kargo, crossplane-fips, crossplane, grafana-alloy, snyk-cli, gitlab-rails-ce, zarf-fips, pulumi-language-yaml, dagger, trufflehog-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: mountpoint-s3-csi-driver, dkron, nodetaint, dbmate, flux-image-automation-controller, flux-operator, gh, github-mcp-server, nova, dataplaneapi, aws-load-balancer-controller, polaris, apko, dgraph, metacontroller, newrelic-infra-operator, hubble,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kafka-proxy, opentelemetry-operator, kubernetes-csi-driver-nfs, pguser, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, secrets-store-csi-driver-provider-aws, nri-discovery-kubernetes, temporal, cadvisor,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: kube-logging-logging-operator, vitess, omnictl-multiarch, flux-image-automation-controller, thanos-operator-fips, ferretdb, syncthing, argo-rollouts-fips, external-secrets-operator, redis-operator-fips, consul, prometheus-mongodb-exporter, mc, rancher-agent,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, harbor-fips, dive, kustomize-fips, podman, redis-operator-fips, fluxcd-kustomize-mutating-webhook-fips, nrdot-collector-k8s, jupyterhub-k8s-image-awaiter-fips, glab, kube-rbac-proxy-fips, rootlesskit,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: kots, kubernetes-csi-external-snapshotter-fips, stakater-reloader, harbor-fips, dive, kustomize-fips, podman, redis-operator-fips, fluxcd-kustomize-mutating-webhook-fips, nrdot-collector-k8s, jupyterhub-k8s-image-awaiter-fips, glab, kube-rbac-proxy-fips, rootlesskit,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kafka-proxy, opentelemetry-operator, kubernetes-csi-driver-nfs, pguser, ratify, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, secrets-store-csi-driver-provider-aws, nri-discovery-kubernetes, temporal,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kots, kubernetes-csi-external-snapshotter-fips, harbor-fips, flux-image-automation-controller, dive, eks-distro, neuvector, podman, karpenter-fips, swagger, glab, nvidia-container-toolkit, step-fips, aws-iam-authenticator,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, opentelemetry-operator, kubernetes-csi-driver-nfs, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, wazero, wireguard-go, secrets-store-csi-driver-provider-aws, temporal, cadvisor, local-static-provisioner, gostatsd,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, opentelemetry-operator, kubernetes-csi-driver-nfs, dgraph, kubernetes-dashboard-auth, sriov-network-device-plugin, wazero, wireguard-go, secrets-store-csi-driver-provider-aws, temporal, cadvisor, local-static-provisioner, gostatsd,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, litestream, kubernetes-csi-external-snapshotter-fips, stakater-reloader, harbor-fips, flux-image-automation-controller, redis-operator-fips, karpenter-fips, cadvisor, swagger, glab, kube-rbac-proxy-fips, crossplane, rootlesskit,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kafka-proxy, kubernetes-dashboard-auth, wazero, wireguard-go, secrets-store-csi-driver-provider-aws, nri-discovery-kubernetes, temporal, cadvisor, local-static-provisioner, gostatsd, flux-helm-controller, kubernetes-event-exporter, argo-workflows, checksec, wgcf,...

GHSA-29WX-VH33-7X7R vulnerabilities

Vulnerabilities for packages: buildkitd, terraform-provider-azurerm, chartmuseum, wal-g, git-sync, gitsign, crossplane-provider-azure-managedidentity, coredns, falcoctl, crossplane, kots, octo-sts, scorecard, minio, loki, crossplane-provider-azure-storage, crossplane-provider-family-azure,...