CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kubescape, podman, falcoctl, kots, zarf, buildah, tekton-chains, slsa-verifier, aactl, undock, kyverno, flux-source-controller, kyverno-notation-aws, ratify, gitsign, witness, skopeo...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kubescape, podman, falcoctl, kots, zarf, buildah, tekton-chains, slsa-verifier, aactl, undock, kyverno, flux-source-controller, kyverno-notation-aws, ratify, gitsign, witness, skopeo...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: buildah-fips, tekton-chains, zarf, buildah, ratify, undock, kots, flux-source-controller-fips, kyverno-notation-aws-fips, aactl, chainctl-fips, podman, podman-fips, falcoctl, kubescape-server, prometheus-podman-exporter-fips, ratify-fips, skopeo-fips, chainctl,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: buildah-fips, tekton-chains, zarf, buildah, ratify, undock, kots, flux-source-controller-fips, kyverno-notation-aws-fips, aactl, chainctl-fips, podman, podman-fips, falcoctl, kubescape-server, prometheus-podman-exporter-fips, ratify-fips, skopeo-fips, chainctl,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, traefik, gitlab-workhorse-ce-fips, nerdctl, harbor, knative-kafka-broker, minio, containerd, elastic-agent-fips, coder-fips, seaweedfs-rocksdb, keda-fips, loki, skaffold-fips, kots, cert-manager, prometheus-elasticsearch-exporter,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, step, fulcio-fips, dagger, sops-fips, crossplane-provider-azure-network, traefik, gitlab-workhorse-ce-fips, helmfile, flux-notification-controller-fips, glab, nerdctl, harbor, crossplane-provider-azure-servicefabric,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, dagger, traefik, gitlab-workhorse-ce-fips, nerdctl, harbor, knative-kafka-broker, gitlab-runner-fips, minio, containerd, elastic-agent-fips, coder-fips, seaweedfs-rocksdb, keda-fips, loki, redpanda-console, skaffold-fips, kots, cert-manager,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, dagger, traefik, gitlab-workhorse-ce-fips, nerdctl, harbor, knative-kafka-broker, minio, containerd, elastic-agent-fips, keda-fips, loki, redpanda-console, skaffold-fips, kots, cert-manager, apko-fips, prometheus-elasticsearch-exporter,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, traefik, gitlab-workhorse-ce-fips, nerdctl, harbor, knative-kafka-broker, minio, containerd, elastic-agent-fips, coder-fips, seaweedfs-rocksdb, keda-fips, loki, skaffold-fips, kots, cert-manager, docker-machine-driver-harvester,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildkitd, buildah, docker-machine-driver-harvester, cert-manager, flux, argo-events, knative-serving, chezmoi, argocd-image-updater, age, grype, rootlesskit, gitlab-kas, loki, terraform-provider-tls, flux-source-controller, trivy-operator, falcoctl, opentofu, minio,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kargo, crossplane, src-fingerprint, gitaly, kots, pulumi-language-dotnet, scorecard, trivy, zarf, k9s, kubevela, external-secrets-operator, goreleaser, bom, pulumi-kubernetes-operator, nfpm, snyk-cli, flux, trufflehog,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: dagger, gitlab-runner-fips, coder-fips, redpanda-console, skaffold-fips, kots, rancher-fleet, apko-fips, cerbos-fips, pulumi, argo-events-fips, syft, kaniko, upwind-agent, xeol, kyverno, kubevela-fips, apko, osv-scanner, gitaly-fips, chainloop-cli-fips, terragrunt,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: buildkitd, ko, docker, rekor, crossplane, spire-server, zarf, trivy, goreleaser, bom, ratify, aactl, kyverno, docker-cli-buildx, gitsign, skaffold, tkn, gh, policy-controller, vexctl, tekton-chains, guac, cosign, docker-compose, flux-source-controller, trivy-operator...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: dagger, ratify, gitlab-runner-fips, skaffold-fips, ko, ratify-fips, kyverno, chainloop-cli-fips, guac, kyverno-fips, jfrog-cli, cg, goreleaser, flux-source-controller-fips, rekor-fips, cosign, image-factory-fips, neuvector-sigstore-interface-fips, cloudbeat-fips,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: buildkitd, ko, docker, crossplane, spire-server, zarf, trivy, goreleaser, ratify, aactl, kyverno, docker-cli-buildx, sigstore-scaffolding, gitsign, skaffold, witness, tkn, gh, policy-controller, vexctl, tekton-chains, cosign, flux-source-controller, trivy-operator,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: buildkitd, ko, docker, crossplane, spire-server, zarf, trivy, goreleaser, ratify, aactl, kyverno, docker-cli-buildx, sigstore-scaffolding, gitsign, skaffold, witness, tkn, gh, policy-controller, vexctl, tekton-chains, cosign, flux-source-controller, trivy-operator,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, flux-image-automation-controller, spire-server, hubble, tailscale, clickhouse-operator, envoy-ratelimit, grafana-operator, rabbitmq-messaging-topology-operator, victoriametrics, external-secrets-operator, goreleaser, flux-notification-controller...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, coredns, crossplane, docker-credential-gcr, grpc-health-probe, kafka-proxy, buildah, redpanda, rabbitmq-messaging-topology-operator, tetragon, docker-machine-driver-harvester, cert-manager, kubernetes-csi-external-attacher, flux,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: buildkitd, prometheus-pushgateway, argo-events, cert-manager-istio-csr, crossplane-provider-aws-sns, grype, kube-vip-cloud-provider, rancher-helm, terraform-provider-google, sealed-secrets, flux-source-controller, sftpgo, sftpgo-plugin-eventstore,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway, argo-events, cert-manager-istio-csr, crossplane-provider-aws-sns, grype, kube-vip-cloud-provider, rancher-helm, terraform-provider-google, sealed-secrets, flux-source-controller, sftpgo, sftpgo-plugin-eventstore, apisix-ingress-controller,...