GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface-fips, tekton-pipelines, crossplane-provider-azure-managedidentity, chezmoi, crossplane-provider-azure-sql, chainctl-fips, flux-source-controller, amazon-ssm-agent, kyverno-notation-aws-fips, minio, fscrypt, step, tkn,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: rancher, cluster-api-azure-controller, gatus, sops, aactl, nuclei, melange, glab, knative-serving, containerd, spire-server, external-secrets-operator, terraform-provider-azurerm, hcloud, vault-benchmark, crossplane-provider-azure-sql, flux-kustomize-controller,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, trillian, chainctl-fips, amazon-ssm-agent, minio, caddy, chainloop-control-plane-fips, sigstore-scaffolding, conftest, kyverno-policy-reporter-fips, goreleaser, image-factory-fips, rabbitmq-messaging-topology-operator, chainloop-cli,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface-fips, contour, azure-service-operator, tekton-pipelines, rancher-support-bundle-kit, kube-rbac-proxy-fips, chezmoi, amazon-ssm-agent, rke2-runtime-fips, grafana-mimir-fips, caddy, gotenberg, contour-fips, trivy-operator-fips,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface-fips, contour, azure-service-operator, tekton-pipelines, rancher-support-bundle-kit, kube-rbac-proxy-fips, chezmoi, amazon-ssm-agent, rke2-runtime-fips, grafana-mimir-fips, caddy, gotenberg, contour-fips, trivy-operator-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, grafana-alloy, sops, goreleaser, aactl, nuclei, melange, crossplane-provider-aws-firehose, external-secrets-operator, terraform-provider-azurerm, crossplane-provider-azure-sql, flux-kustomize-controller, cilium-cli, k9s, cluster-api,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, grafana-alloy, sops, goreleaser, aactl, nuclei, melange, crossplane-provider-aws-firehose, external-secrets-operator, terraform-provider-azurerm, crossplane-provider-azure-sql, flux-kustomize-controller, cilium-cli, k9s, cluster-api,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, flux-source-controller, q, amazon-ssm-agent, kyverno-notation-aws-fips, witness, opentofu-fips, skaffold, src-fingerprint, crossplane-provider-azure-storage, k9s-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: chezmoi, trillian, minio, step, tkn, witness, caddy, kyverno-policy-reporter-fips, terragrunt, agentbeat, elastic-agent, certificate-transparency-fips, rke2-runtime, crossplane-provider-sql, nri-mysql-fips, timestamp-authority, step-ca, beats, argo-workflows-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, contour, azure-service-operator, kubernetes-dashboard-api-fips, tekton-pipelines, crossplane-provider-azure-sql, trillian, amazon-ssm-agent, minio, caddy, kapp-controller, kube-fluentd-operator, sigstore-scaffolding, cortex-fips, conftes...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: ksops, age-fips, grafana-fips, chezmoi, litestream, flux-kustomize-controller-fips, age, sops-fips, grafana, sops, flux-kustomize-controller...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: sops, flux-source-controller, goreleaser, terragrunt, guac, nuclei, grafana-agent-operator, airflow, spire-server, flyte, hugo, tempo, sqlpad, velero, fulcio, buildkitd, py3-cassandra-medusa, boring-registry, grafana-mimir, opentelemetry-collector, druid,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, trillian, minio, caddy, kube-fluentd-operator, stakater-reloader, sigstore-scaffolding, conftest, goreleaser, kiam, rabbitmq-messaging-topology-operator, flux-notification-controller, k3d, external-secrets-fips, helm-operator, mc,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubescape, kubevela, kubernetes-csi-livenessprobe, timestamp-authority-fips, kubeflow, bank-vaults-fips, spark-operator, cortex, kubeflow-fips, smarter-device-manager-fips, buildkitd, terraform-provider-sendgrid, metrics-server-fips, slsa-verifier,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nginx-mainline, k3d, terraform-provider-aws, aactl, metacontroller, aws-efs-csi-driver, weaviate, secrets-store-csi-driver, sigstore-scaffolding, conftest, terraform-provider-azurerm, flux-kustomize-controller, gobuster, helm, pulumi-language-java,...