GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux, frankenphp-8.2, trivy-operator-fips, flux-source-controller-fips, kyverno-fips, harbor, vitess, knative-serving, argocd-image-updater, spire-server, minio-fips, fscrypt, chisel-fips, mattermost-fips, cert-manager, cilium, knative-kafka-broker, containerd,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: flux, frankenphp-8.2, trivy-operator-fips, chainctl-fips, flux-source-controller-fips, kyverno-fips, amazon-ssm-agent-fips, grype-fips, harbor, vitess, knative-serving, argocd-image-updater, spire-server, splunk-otel-collector-fips, minio-fips, scorecard, fscrypt,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux, frankenphp-8.2, trivy-operator-fips, flux-source-controller-fips, kyverno-fips, harbor, vitess, knative-serving, argocd-image-updater, spire-server, minio-fips, fscrypt, chisel-fips, mattermost-fips, cert-manager, cilium, knative-kafka-broker, containerd,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux, frankenphp-8.2, gitlab-runner-fips, trivy-operator-fips, vault-fips, chainctl-fips, datadog-agent-fips, flux-source-controller-fips, crossplane-provider-azure-resources, step-issuer, kyverno-fips, amazon-ssm-agent-fips, caddy-fips, crossplane-aws-provider,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: flux, frankenphp-8.2, gitlab-runner-fips, trivy-operator-fips, chainctl-fips, datadog-agent-fips, flux-source-controller-fips, kyverno-fips, amazon-ssm-agent-fips, grype-fips, harbor, vitess, knative-serving, argocd-image-updater, spire-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: steampipe, guac, sops, loki, ko, containerd, wal-g, gptscript, chisel, eksctl, opentelemetry-collector, step, policy-controller, argo-events, caddy, syft, fscrypt, witness, crossplane-provider-azure-managedidentity, pulumi-language-dotnet, kyverno, rancher, terragrun...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane, steampipe, guac, apko, scorecard, gitlab-runner, nfpm, melange, osv-scanner, pulumi-language-java, pulumi-kubernetes-operator, skaffold, grafana-alloy, gptscript, bom, goreleaser, zarf, k9s, trufflehog, gitsign, external-secrets-operator, act,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: flux, gitlab-runner-fips, cerbos, trivy-operator-fips, chainctl-fips, kyverno-fips, amazon-ssm-agent-fips, grype-fips, src-fingerprint-fips, argocd-image-updater, tfsec, crossplane-fips, scorecard, pulumi-language-java, terragrunt-fips, osv-scanner, redpanda-console,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: crossplane, guac, gitlab-runner, ko, skaffold, zarf, goreleaser, bom, aactl, tkn, gitsign, spire-server, policy-controller, docker-cli-buildx, docker, ratify, gh, kubescape, rekor, tekton-chains, slsa-verifier, kyverno, tflint, buildkitd, neuvector-sigstore-interface...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, trivy-operator-fips, chainctl-fips, flux-source-controller-fips, kyverno-fips, spire-server-fips, tkn, spire-server, cosign-fips, image-factory, crossplane-fips, buildkitd-fips, kubescape-server, trivy-operator, kyverno, flux-source-controller,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: crossplane, ko, skaffold, zarf, goreleaser, aactl, tkn, gitsign, spire-server, policy-controller, docker-cli-buildx, docker, gh, kubescape, witness, tekton-chains, kyverno, tflint, buildkitd, neuvector-sigstore-interface, flux-source-controller, falcoctl,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: crossplane, ko, skaffold, zarf, goreleaser, aactl, tkn, gitsign, spire-server, policy-controller, docker-cli-buildx, docker, gh, kubescape, witness, tekton-chains, kyverno, tflint, buildkitd, neuvector-sigstore-interface, flux-source-controller, falcoctl,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, newrelic-k8s-metadata-injection, apko, osv-scanner, aws-network-policy-agent, nodetaint, smokescreen, flux-helm-controller, temporal, goreleaser, dkron, clickhouse-operator, dataplaneapi, ingress-nginx-controller, metacontroller,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, redpanda, bank-vaults, kubernetes-csi-driver-nfs, ko, opentelemetry-operator, wal-g, temporal, bom, dkron, dex, mcp-grafana, eksctl, flannel, grafana-mimir, kubernetes-csi-node-driver-registrar, step, cri-tools,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: flux, ingress-nginx-controller, datadog-agent-fips, newrelic-fluent-bit-output-fips, commercial-chainloop-cli, aws-flb-kinesis-fips, beats-fips, kyverno-fips, harbor, karpenter, knative-serving, azure-aad-pod-identity-mic, kube-arangodb, rke2-runtime-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux, dkron, ingress-nginx-controller, nfs-subdir-external-provisioner, kube-logging-logging-operator, flux-source-controller-fips, commercial-chainloop-cli, karpenter, victoriametrics-cluster, spire-server, polaris, dataplaneapi, clickhouse-operator,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: flux, dkron, ingress-nginx-controller, nfs-subdir-external-provisioner, kube-logging-logging-operator, flux-source-controller-fips, commercial-chainloop-cli, karpenter, victoriametrics-cluster, spire-server, polaris, dataplaneapi, clickhouse-operator,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: tofu-controller, harbor, docker-cli, azure-aad-pod-identity-mic, splunk-otel-collector-fips, gatekeeper, atlantis-fips, fscrypt, mattermost-fips, prometheus-podman-exporter, cert-manager, kbld-fips, kubescape-server, newrelic-fluent-bit-output, rancher-fleet, kyverno...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: tofu-controller, harbor, docker-cli, azure-aad-pod-identity-mic, splunk-otel-collector-fips, gatekeeper, atlantis-fips, fscrypt, mattermost-fips, prometheus-podman-exporter, cert-manager, kbld-fips, kubescape-server, newrelic-fluent-bit-output, rancher-fleet, kyverno...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cloudnative-pg-fips, k8s-device-plugin-fips, nfs-subdir-external-provisioner, kubelet-csr-approver-fips, tofu-controller, docker-machine-driver-linode, crossplane-provider-sql, harbor, nrdot-collector-k8s, nri-haproxy-fips, vertical-pod-autoscaler, chronyexporter-fip...