CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, podman, slsa-verifier, undock, zarf, gitsign, ratify, buildah, witness, kyverno, tekton-chains, aactl, skopeo, kots, kyverno-notation-aws, falcoctl, kubescape...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, podman, slsa-verifier, undock, zarf, gitsign, ratify, buildah, witness, kyverno, tekton-chains, aactl, skopeo, kots, kyverno-notation-aws, falcoctl, kubescape...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kubescape, slsa-verifier, undock, prometheus-podman-exporter-fips, falcoctl-fips, aactl, buildah, flux-source-controller-fips, prometheus-podman-exporter, ratify, tekton-chains-fips, zarf, podman, falcoctl, kyverno-notation-aws-fips, skopeo-fips, podman-fips,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kubescape, slsa-verifier, undock, prometheus-podman-exporter-fips, falcoctl-fips, aactl, buildah, flux-source-controller-fips, prometheus-podman-exporter, ratify, tekton-chains-fips, zarf, podman, falcoctl, kyverno-notation-aws-fips, skopeo-fips, podman-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, knative-serving-fips, prometheus-operator, external-dns, traefik, zot, zarf, nemo, cilium-cli, frankenphp-8.4, cilium, reports-server, flux-fips, drone, knative-kafka-broker, minio,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, knative-serving-fips, prometheus-operator, external-dns, traefik, zot, zarf, nemo, cilium-cli, frankenphp-8.4, cilium, reports-server, flux-fips, drone, knative-kafka-broker, minio,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, flux-operator-fips, kuma, mods, prometheus-podman-exporter-fips, pulumi-language-java, flux-kustomize-controller, knative-serving-fips, external-dns, prometheus-operator, dagger, step,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, prometheus-podman-exporter-fips, pulumi-language-java, knative-serving-fips, prometheus-operator, external-dns, traefik, dagger, gptscript, zot, argo-events, external-secrets-operator...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, prometheus-podman-exporter-fips, pulumi-language-java, knative-serving-fips, longhorn-manager, external-dns, prometheus-operator, dagger, traefik, gptscript, zot, argo-events,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, ko, knative-serving, dagger, cert-manager, loki, caddy, apko, scorecard, rancher-agent, kubernetes-dashboard, policy-controller, witness, gh, terragrunt, k8sgpt, opentelemetry-collector, syft, docker, flux-image-automation-controller, containerd,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: flux-source-controller, zot, argo-cd, flux, k9s, act, dagger, gitsign, osv-scanner, pulumi, argocd-image-updater, grafana-alloy, pulumi-kubernetes-operator, kaniko, trivy-operator, pulumi-language-dotnet, nfpm, gitaly, rancher-fleet, apko, scorecard, cerbos,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela-fips, cloudbeat-fips, pulumi-language-java, google-osconfig-agent, dagger, gptscript, zot, argo-events, external-secrets-operator, grafana, kubevela, zarf, nemo, gomplate-fips, chainloop-cli-fips, flux-fips, melange, bom, argo-workflows-fips, act,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: flux-source-controller, zot, ko, dagger, gitsign, trivy-operator, guac, goreleaser, slsa-verifier, gitlab-runner, ratify, policy-controller, gh, kyverno, tekton-chains, tflint, docker-compose, neuvector-sigstore-interface, docker-cli-buildx, vexctl, bom, docker, triv...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: skaffold, cloudbeat-fips, chainloop-control-plane-fips, dagger, zot, zarf, tkn, rekor-fips, kyverno-notation-aws, chainloop-cli-fips, buildkitd-fips, neuvector-sigstore-interface, reports-server, bom, buildkitd, kubescape-server-fips, zarf-fips, spire-server,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, zot, ko, gitsign, trivy-operator, goreleaser, slsa-verifier, ratify, policy-controller, witness, gh, kyverno, tekton-chains, tflint, neuvector-sigstore-interface, docker-cli-buildx, vexctl, sigstore-scaffolding, docker, trivy, aactl, skaffold,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: flux-source-controller, zot, ko, gitsign, trivy-operator, goreleaser, slsa-verifier, ratify, policy-controller, witness, gh, kyverno, tekton-chains, tflint, neuvector-sigstore-interface, docker-cli-buildx, vexctl, sigstore-scaffolding, docker, trivy, aactl, skaffold,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-controller, clickhouse-operator, stakater-reloader, aws-privateca-issuer, flux, flux-helm-controller, grafana-operator, victoriametrics-cluster, osv-scanner, envoy-ratelimit, grafana-rollout-operator, volume-modifier-for-k8s,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: ko, cloud-provider-vsphere, knative-serving, gitsign, spqr, cert-manager, net-kourier, cluster-api-provider-vsphere, kubernetes-csi-node-driver-registrar, boring-registry, caddy, secrets-store-csi-driver-provider-azure, redka, kubernetes-csi-driver-nfs,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, metacontroller, github-mcp-server, omni-fips, dataplaneapi-fips, pluto-fips, external-secrets-operator, secrets-store-csi-driver-provider-aws, kubernetes-dashboard-metrics-scraper-fips, nemo, karpenter, clickhouse-operator,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-operator-fips, metacontroller, github-mcp-server, omni-fips, dataplaneapi-fips, pluto-fips, external-secrets-operator, secrets-store-csi-driver-provider-aws, kubernetes-dashboard-metrics-scraper-fips, nemo, karpenter, clickhouse-operator,...