CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: zarf, skopeo, gitsign, aactl, kyverno, tekton-chains, kyverno-notation-aws, slsa-verifier, undock, flux-source-controller, ratify, witness, kubescape, podman, falcoctl, buildah, kots...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: zarf, skopeo, gitsign, aactl, kyverno, tekton-chains, kyverno-notation-aws, slsa-verifier, undock, flux-source-controller, ratify, witness, kubescape, podman, falcoctl, buildah, kots...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, buildah, gitsign, undock, witness, kyverno-notation-aws-fips, ratify, podman-fips, portieris-fips, kubescape, falcoctl, prometheus-podman-exporter, skopeo, kyverno-notation-aws, flux-source-controller-fips, kyverno, chainctl,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, buildah, gitsign, undock, witness, kyverno-notation-aws-fips, ratify, podman-fips, portieris-fips, kubescape, falcoctl, prometheus-podman-exporter, skopeo, kyverno-notation-aws, flux-source-controller-fips, kyverno, chainctl,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: nerdctl, flux, k9s-fips, rancher-agent, skaffold-fips, trivy, etcd-fips, argocd-image-updater-fips, external-secrets-operator, frankenphp-8.5, argocd-image-updater, argo-cd, knative-serving-fips, containerd, frankenphp-8.3, prometheus-elasticsearch-exporter,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kargo, gh, openbao, crossplane-provider-azure-authorization, rootlesskit, apko-fips, flux, nerdctl, hcloud, crossplane-provider-azure-synapse, k9s-fips, rancher-agent, flux-kustomize-controller, argo-events, skaffold-fips, ko, etcd-fips, argocd-image-updater-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nerdctl, flux, k9s-fips, rancher-agent, skaffold-fips, trivy, etcd-fips, argocd-image-updater-fips, external-secrets-operator, frankenphp-8.5, argocd-image-updater, argo-cd, knative-serving-fips, containerd, frankenphp-8.3, prometheus-elasticsearch-exporter,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: apko-fips, flux, nerdctl, k9s-fips, rancher-agent, skaffold-fips, argo-events, trivy, etcd-fips, argocd-image-updater-fips, external-secrets-operator, frankenphp-8.5, argo-cd, knative-serving-fips, apko, splunk-otel-collector, pulumi-language-yaml, containerd,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: gh, rootlesskit, apko-fips, flux, nerdctl, k9s-fips, rancher-agent, skaffold-fips, argo-events, trivy, etcd-fips, argocd-image-updater-fips, external-secrets-operator, frankenphp-8.5, argo-cd, knative-serving-fips, apko, splunk-otel-collector, pulumi-language-yaml,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kyverno, cluster-api-azure-controller, fulcio, atlantis, osv-scanner, gptscript, pulumi-language-java, scorecard, step, gatus, caddy, vault-benchmark, crossplane-provider-azure-authorization, aactl, kubernetes-dashboard, argo-cd, opentofu, k8sgpt, k9s, apko, glab,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: steampipe, src-fingerprint, kyverno, pulumi, syft, kubevela, pulumi-language-dotnet, tfsec, zot, skaffold, osv-scanner, bom, wolfictl, gptscript, nuclei, crossplane, pulumi-language-java, zarf, trufflehog, argo-events, gitsign, nfpm, pulumi-language-yaml, scorecard,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: kargo, xeol-fips, apko-fips, flux, k9s-fips, skaffold-fips, argo-events, trivy, argocd-image-updater-fips, external-secrets-operator, argocd-image-updater, gitsign, argo-cd, src-fingerprint-fips, apko, pulumi-language-yaml, kubevela, gomplate-fips, zot, gptscript,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: kyverno, buildkitd, spire-server, docker-cli-buildx, zot, skaffold, docker, vexctl, bom, crossplane, zarf, gitsign, neuvector-sigstore-interface, teleport, flux-source-controller, ratify, docker-compose, tflint, trivy-operator, dagger, aactl, tekton-chains,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: gh, docker-compose-fips, skaffold-fips, ko, trivy, gitsign, chainloop-control-plane-fips, kyverno-policy-reporter-plugins-kyverno, tkn-fips, kyverno-notation-aws-fips, docker, neuvector-sigstore-interface, zot, kubescape, falcoctl, rekor,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kyverno, buildkitd, spire-server, docker-cli-buildx, zot, skaffold, docker, vexctl, crossplane, zarf, gitsign, neuvector-sigstore-interface, teleport, flux-source-controller, ratify, tflint, trivy-operator, aactl, tekton-chains, policy-controller, ko, trivy, witness,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kyverno, buildkitd, spire-server, docker-cli-buildx, zot, skaffold, docker, vexctl, crossplane, zarf, gitsign, neuvector-sigstore-interface, teleport, flux-source-controller, ratify, tflint, trivy-operator, aactl, tekton-chains, policy-controller, ko, trivy, witness,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: github-mcp-server, victoriametrics, spire-server, metacontroller, aws-privateca-issuer, envoy-ratelimit, sftpgo-plugin-eventsearch, nodetaint, grafana-operator, oras, osv-scanner, smarter-device-manager, newrelic-infra-operator, hubble, clickhouse-operator, dbmate,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: gcsfuse, neuvector-scanner, spqr, swagger, kyverno, k8ssandra-operator, opentelemetry-operator, trillian, harbor, atlantis, wave, etcd, osv-scanner, terraform-provider-time, knative-eventing, kubeflow-katib, pulumi-language-java, cue, kyverno-policy-reporter-ui,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: nerdctl, flux, aws-flb-cloudwatch, gitlab-pages, k9s-fips, azurefile-csi, rancher-agent, knative-operator-fips, aws-flb-firehose, etcd-fips, external-secrets-operator, argo-cd, cluster-autoscaler-fips, datadog-agent, knative-serving-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: gh, kubewatch, atlas, flux, dapr-fips, newrelic-infra-operator, oras, kubernetes-dashboard-web-fips, secrets-store-csi-driver-provider-aws, smarter-device-manager, external-secrets-operator, kyverno-policy-reporter-plugins-kyverno, k8s-metacollector, apko, atlas-fips...