GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: gh, flux-source-controller, nova, mountpoint-s3-csi-driver, omnibump, smokescreen, stakater-reloader, mariadb-operator, rabbitmq-messaging-topology-operator, go, apko, metacontroller, external-secrets-operator, local-path-provisioner, dataplaneapi, goreleaser,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: gh, sftpgo-plugin-pubsub, terraform-provider-aws, golangci-lint, prometheus-adapter, rclone, external-secrets-operator, kube-fluentd-operator, k8ssandra-operator, falcoctl, envoy-ratelimit, vexctl, terraform-provider-azapi, cluster-autoscaler, pulumi-language-java,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: gitleaks, kube-bench, sops, gh, chezmoi, k8sgateway, vale, sftpgo-plugin-pubsub, azure-workload-identity-webhook, nri-kafka, pulumi-kubernetes-operator, ferretdb, ipfs-cluster, prometheus-adapter, crossplane-provider-aws-firehose, dynamic-localpv-provisioner,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: gitleaks, chezmoi, k8sgateway, vale, sftpgo-plugin-pubsub, azure-workload-identity-webhook, nri-kafka, pulumi-kubernetes-operator, ferretdb, ipfs-cluster, crossplane-provider-aws-firehose, dynamic-localpv-provisioner, kube-fluentd-operator, vitess, vexctl, falcoctl,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: gitleaks, kube-bench, sops, gh, chezmoi, k8sgateway, vale, sftpgo-plugin-pubsub, azure-workload-identity-webhook, nri-kafka, pulumi-kubernetes-operator, ferretdb, ipfs-cluster, prometheus-adapter, crossplane-provider-aws-firehose, dynamic-localpv-provisioner,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: gitleaks, chezmoi, k8sgateway, vale, sftpgo-plugin-pubsub, azure-workload-identity-webhook, nri-kafka, pulumi-kubernetes-operator, ferretdb, ipfs-cluster, crossplane-provider-aws-firehose, dynamic-localpv-provisioner, kube-fluentd-operator, vitess, vexctl, falcoctl,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kapp-controller, rke2-cloud-provider-fips, aws-load-balancer-controller-fips, trufflehog-fips, kubernetes-csi-external-snapshotter-fips, cortex, kubernetes-csi-driver-nfs, kube-oidc-proxy, ratify, polaris-fips, splunk-otel-collector-fips, aws-network-policy-agent,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubescape, cilium-cli, cluster-api-helm-controller, chart-testing, tw, pluto, k9s, helm-push, flux-helm-controller, rancher-helm, cert-manager-cmctl, zarf, zot, kots, helm-docs, chartmuseum, flux, trivy, k8ssandra-client, helm-operator, eksctl...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubescape, cilium-cli, cluster-api-helm-controller, chart-testing, tw, pluto, k9s, helm-push, flux-helm-controller, rancher-helm, cert-manager-cmctl, zarf, zot, kots, helm-docs, chartmuseum, flux, trivy, k8ssandra-client, helm-operator, eksctl...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubescape, cilium-cli, cluster-api-helm-controller, chart-testing, tw, pluto, k9s, helm-push, flux-helm-controller, rancher-helm, cert-manager-cmctl, zarf, zot, kots, helm-docs, chartmuseum, flux, trivy, k8ssandra-client, helm-operator, eksctl...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubescape, cilium-cli, cluster-api-helm-controller, chart-testing, tw, pluto, k9s, helm-push, flux-helm-controller, rancher-helm, cert-manager-cmctl, zarf, zot, kots, helm-docs, chartmuseum, flux, trivy, k8ssandra-client, helm-operator, eksctl...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: linkerd2, flux-source-controller, kubescape, cilium-cli, skaffold, fuse-overlayfs-snapshotter, cluster-api-helm-controller, opa, docker, syft, kubevela, opa-envoy, buildkitd, helm-push, newrelic-infrastructure-agent, flux-helm-controller, neuvector-scanner, helm,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: syft-fips, helm-push, neuvector-fips, ctop, opa-fips, cluster-api-helm-controller, fuse-overlayfs-snapshotter, xeol, kubescape, rancher-agent, trivy-fips, envoy-gateway-fips, chartmuseum, helm, flux-source-controller, helm-operator, docker, flux-helm-controller-fips,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: syft-fips, helm-push, neuvector-fips, ctop, opa-fips, cluster-api-helm-controller, fuse-overlayfs-snapshotter, xeol, kubescape, rancher-agent, trivy-fips, envoy-gateway-fips, chartmuseum, helm, flux-source-controller, helm-operator, docker, flux-helm-controller-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: harbor-registry, sops, chezmoi, flux-source-controller, kubescape, fluent-bit-plugin-loki, hugo, restic, trino, argo-workflows, up, secrets-store-csi-driver-provider-azure, rclone, goreleaser, cortex, falcoctl, grafana-agent-operator, hugo-extended, velero, buildkitd...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-operator, helm-push, k8sgpt, trivy, up, zarf, k9s, zot, kubevela, kots, eksctl, flux-helm-controller, kubescape, cilium-cli, chartmuseum...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: kubevela, zarf, flux-source-controller, kubescape, cilium-cli, helm-push, k9s, trivy, zot, flux-helm-controller, helm-operator, kots, k8sgpt, chartmuseum, eksctl, up...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-operator, helm-push, k8sgpt, trivy, up, zarf, k9s, zot, kubevela, kots, eksctl, flux-helm-controller, kubescape, cilium-cli, chartmuseum...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: flux-source-controller, falcoctl-fips, melange, skaffold, spire-server, cosign, policy-controller, apko, aactl, tekton-chains, ko, kubescape, slsa-verifier, spire-server-fips, tkn...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: flux-source-controller, falcoctl-fips, melange, skaffold, spire-server, cosign, policy-controller, apko, aactl, tekton-chains, ko, kubescape, slsa-verifier, spire-server-fips, tkn...