CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: aactl, flux-source-controller, tekton-chains, ratify, falcoctl, kubescape, witness, gitsign, kyverno-notation-aws, undock, kots, kyverno, podman, zarf, buildah, skopeo...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: aactl, flux-source-controller, tekton-chains, ratify, falcoctl, kubescape, witness, gitsign, kyverno-notation-aws, undock, kots, kyverno, podman, zarf, buildah, skopeo...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: podman-fips, kubescape, ratify-fips, skopeo, falcoctl, undock, flux-source-controller, chainctl-fips, tekton-chains-fips, gitsign, chainctl, witness, aactl, portieris-fips, skopeo-fips, zarf-fips, kyverno-notation-aws-fips, kubescape-server-fips, kyverno, podman,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: podman-fips, kubescape, ratify-fips, skopeo, falcoctl, undock, flux-source-controller, chainctl-fips, tekton-chains-fips, gitsign, chainctl, witness, aactl, portieris-fips, skopeo-fips, zarf-fips, kyverno-notation-aws-fips, kubescape-server-fips, kyverno, podman,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: rancher-agent, chisel-fips, helm, argo-cd, skaffold-fips, frankenphp-8.2, harbor, flux-image-automation-controller, kubevela-fips, rancher, coder-fips, argocd-image-updater-fips, fscrypt, drone-fips, aactl, kine, prometheus-fips, istio, opentofu-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: rancher-agent, helm, argo-cd, skaffold-fips, frankenphp-8.2, harbor, dagger, flux-image-automation-controller, kubevela-fips, scorecard, argocd-image-updater-fips, fscrypt, chainctl, aactl, kine, prometheus-fips, istio, opentofu-fips, kube-arangodb-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: rancher-agent, chisel-fips, helm, argo-cd, skaffold-fips, docker-machine-driver-harvester, frankenphp-8.2, harbor, flux-image-automation-controller, kubevela-fips, rancher, coder-fips, argocd-image-updater-fips, fscrypt, drone-fips, aactl, kine, prometheus-fips, isti...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: sops-fips, gatus-fips, kyverno-policy-reporter-plugins-kyverno, rancher-agent, chisel-fips, helm, tekton-pipelines-fips, argo-cd, skaffold-fips, docker-machine-driver-harvester, frankenphp-8.2, harbor, dagger, docker, flux-image-automation-controller, kubevela-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: gatus-fips, rancher-agent, chisel-fips, helm, argo-cd, skaffold-fips, docker-machine-driver-harvester, frankenphp-8.2, harbor, dagger, docker, flux-image-automation-controller, kubevela-fips, scorecard, rancher, coder-fips, argocd-image-updater-fips, rootlesskit,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: openbao, aactl, terraform-provider-tls, neuvector-sigstore-interface, pulumi-language-dotnet, caddy, kaf, wal-g, wolfictl, gh, argo-events, flux-source-controller, crossplane-provider-azure-storage, telegraf, chezmoi, gitlab-kas, cosign, opentelemetry-collector,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gomplate, gitlab-runner, cerbos, witness, scorecard, crossplane, gptscript, grafana, flux, zot, k9s, syft, pulumi-language-dotnet, trufflehog, pulumi-kubernetes-operator, src-fingerprint, kargo, wolfictl, snyk-cli, teleport, bom, kaniko, pulumi-language-yaml, melange...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, tfsec, argo-cd, skaffold-fips, dagger, flux-image-automation-controller, kubevela-fips, scorecard, coder-fips, argocd-image-updater-fips, gitsign, chainctl, crossplane-fips, kaniko, kubescape-server-fips, kyverno, argo-events, teleport, cerbos,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: aactl, gitlab-runner, docker-compose, crossplane, kyverno-notation-aws, tkn, zot, docker-cli-buildx, neuvector-sigstore-interface, policy-controller, teleport, bom, ko, gh, skaffold, slsa-verifier, flux-source-controller, ratify, falcoctl, trivy-operator, gitsign,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno, image-factory-fips, spire-server-fips, skaffold-fips, dagger, docker, gitsign, chainctl, aactl, chainloop-control-plane, buildkitd, crossplane-fips, kubescape-server-fips, neuvector-sigstore-interface, kyverno, teleport,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: aactl, witness, crossplane, kyverno-notation-aws, tkn, sigstore-scaffolding, zot, docker-cli-buildx, neuvector-sigstore-interface, policy-controller, teleport, ko, gh, skaffold, slsa-verifier, flux-source-controller, ratify, falcoctl, trivy-operator, gitsign, tflint,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: aactl, witness, crossplane, kyverno-notation-aws, tkn, sigstore-scaffolding, zot, docker-cli-buildx, neuvector-sigstore-interface, policy-controller, teleport, ko, gh, skaffold, slsa-verifier, flux-source-controller, ratify, falcoctl, trivy-operator, gitsign, tflint,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: smokescreen, polaris, clickhouse-operator, flux, newrelic-infra-operator, malcontent, aws-load-balancer-controller, stakater-reloader, aws-network-policy-agent, dkron, hubble, flux-operator, local-path-provisioner, victoriametrics-cluster, gh, omnibump, pluto,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: openbao, aactl, grafana-agent-operator, terraform-provider-sendgrid, certificate-transparency, helm-set-status, kube-arangodb, docker-cli, helm-mapkubeapis, argo-rollouts, kyverno-notation-aws, terraform-provider-tls, step-ca, bento, filebrowser, caddy, kaf,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, certificate-transparency, tigera-operator, helm-mapkubeapis, terraform-provider-tls, hydra, pulumi-language-dotnet, kaf, juicefs, sealed-secrets, gh, restic, helm-push, thanos, prometheus-blackbox-exporter, chezmoi, crossplane-provider-aws-rds,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, certificate-transparency, tigera-operator, helm-mapkubeapis, hydra, pulumi-language-dotnet, kube-metrics-adapter, kaf, juicefs, sealed-secrets, restic, helm-push, prometheus-blackbox-exporter, chezmoi, crossplane-provider-aws-rds, nats-top,...