GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kargo, nerdctl, docker, kine, pulumi-language-java, age, pulumi, rootlesskit, sops, flux-notification-controller, aactl, terraform-provider-azurerm, zarf, dagger, slsa-verifier, chisel, docker-machine-driver-harvester, trivy, cosign, pulumi-language-yaml, buildah,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: dkron-fips, keda-fips, temporal, external-secrets-operator, gotrue-fips, gitlab-kas, crossplane, dagger, cosign-fips, livekit-server-fips, seaweedfs-rocksdb-fips, slsa-verifier, grpc-health-probe, commercial-chainloop-backend, ko-fips, packer-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: docker, pulumi-language-java, grafana-alloy, pulumi, terraform-provider-pagerduty, rclone, crossplane-provider-aws-lambda, sops, flux-notification-controller, aactl, terraform-provider-azuread, src-fingerprint, crossplane-provider-aws-kms, cerbos,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: docker, pulumi-language-java, grafana-alloy, pulumi, terraform-provider-pagerduty, rclone, crossplane-provider-aws-lambda, sops, flux-notification-controller, aactl, terraform-provider-azuread, src-fingerprint, crossplane-provider-aws-kms, cerbos,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitness, kubevela-fips, policy-controller, atlantis, flux-helm-controller, crossplane-provider-aws-ec2, argo-cd-fips, crossplane-provider-aws-sns, pulumi-language-yaml, pulumi-language-dotnet, cluster-api, trivy-operator, trivy, external-secrets-operator,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: polaris-fips, descheduler-fips, metrics-agent-fips, prometheus-redis-exporter, fq, temporal, hugo-fips, gitea, node-feature-discovery-fips, dagger, go-md2man, crossplane-provider-azure, opa, terraform, kube-vip-fips, slsa-verifier, cass-operator-fips-no-pvc-delete,...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: sops, grafana, ksops, age, litestream, sops-fips, flux-kustomize-controller, age-fips, flux-kustomize-controller-fips, chezmoi, grafana-fips...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, hugo-extended, timestamp-authority, rook, sigstore-scaffolding, guac, flux-image-reflector-controller, flux-kustomize-controller, step-ca, step, pulumi, up, tekton-chains, secrets-store-csi-driver-provider-azure, buildkitd, rclone, policy-controller,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, prometheus-nats-exporter, prometheus-redis-exporter, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, temporal, crossplane, crossplane-provider-aws-cloudfront, dagger, cosign-fips, crossplane-provider-azure, terraform,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falcoctl-fips, src, kubevela, prometheus-blackbox-exporter, bank-vaults-fips, up, kubernetes-csi-livenessprobe-fips, kiam, vault-csi-provider, buildkitd, kubeflow, timestamp-authority-fips, scorecard, prometheus-adapter-fips, metrics-server-fips, dgraph, kubescape,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, pulumi-language-java, newrelic-infrastructure-agent, pulumi, kind, cue, src, kubeflow, aws-efs-csi-driver, flux-notification-controller, aactl, terraform-provider-aws, gobuster, haproxy-ingress, nats, terraform-provider-azurerm,...