GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, fscrypt, helm-docs, oauth2-proxy, podman, kubernetes-dashboard, flannel, nats-server, terraform, filebrowser, docker-machine-driver-harvester, kubevela, kube-vip-cloud-provider, kafka-proxy, zarf, amass, oras, vault-benchmark, kubeflow-pipelines,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, fscrypt, helm-docs, oauth2-proxy, podman, kubernetes-dashboard, flannel, nats-server, terraform, filebrowser, docker-machine-driver-harvester, kubevela, kube-vip-cloud-provider, kafka-proxy, zarf, amass, oras, vault-benchmark, kubeflow-pipelines,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, fscrypt, helm-docs, rancher-webhook, oauth2-proxy, podman, kubernetes-dashboard, flannel, nats-server, terraform, filebrowser, docker-machine-driver-harvester, kubevela, kube-vip-cloud-provider, kafka-proxy, zarf, amass, oras, kubeflow-pipelines,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-kms, fscrypt, helm-docs, rancher-webhook, oauth2-proxy, podman, kubernetes-dashboard, flannel, nats-server, terraform, filebrowser, docker-machine-driver-harvester, kubevela, kube-vip-cloud-provider, kafka-proxy, zarf, amass, oras, kubeflow-pipelines,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: rke2-runtime, kapp-controller, node-feature-discovery-fips, x509-certificate-exporter-fips, cloud-provider-azure-fips, neuvector, timescaledb-parallel-copy, prometheus-mongodb-exporter, telegraf, conjur-cli, kyverno-policy-reporter, paranoia, request-1279-14,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: rancher-helm, zot, flux-source-controller, helm-docs, tw, eksctl, k8ssandra-client, kubescape, flux-helm-controller, chart-testing, chartmuseum, cilium-cli, kots, trivy, k9s, cluster-api-helm-controller, flux, cert-manager-cmctl, helm-push, zarf, pluto, helm-operator...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: rancher-helm, zot, flux-source-controller, helm-docs, tw, eksctl, k8ssandra-client, kubescape, flux-helm-controller, chart-testing, chartmuseum, cilium-cli, kots, trivy, k9s, cluster-api-helm-controller, flux, cert-manager-cmctl, helm-push, zarf, pluto, helm-operator...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: rancher-helm, zot, flux-source-controller, helm-docs, tw, eksctl, k8ssandra-client, kubescape, flux-helm-controller, chart-testing, chartmuseum, cilium-cli, kots, trivy, k9s, cluster-api-helm-controller, flux, cert-manager-cmctl, helm-push, zarf, pluto, helm-operator...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: rancher-helm, zot, flux-source-controller, helm-docs, tw, eksctl, k8ssandra-client, kubescape, flux-helm-controller, chart-testing, chartmuseum, cilium-cli, kots, trivy, k9s, cluster-api-helm-controller, flux, cert-manager-cmctl, helm-push, zarf, pluto, helm-operator...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zot, opa-envoy, docker-compose, flux-source-controller, nerdctl, kargo, grype, newrelic-infrastructure-agent, opa, eksctl, k8ssandra-client, spegel, fuse-overlayfs-snapshotter, docker-cli-buildx, kubescape, linkerd2, k3s, flux-helm-controller, skaffold, ctop,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zarf, flux-source-controller-fips, osv-scanner, kubevela, xeol-fips, rancher-agent, eksctl, beats-fips, neuvector, neuvector-fips, kaniko-fips, k8sgpt, dagger, neuvector-scanner, chartmuseum, docker-cli-buildx, kaniko, newrelic-infrastructure-agent, wolfictl,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: zarf, flux-source-controller-fips, osv-scanner, kubevela, xeol-fips, rancher-agent, eksctl, beats-fips, neuvector, neuvector-fips, kaniko-fips, k8sgpt, dagger, neuvector-scanner, chartmuseum, docker-cli-buildx, kaniko, newrelic-infrastructure-agent, wolfictl,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: cosign, falcoctl, sops, zot, flux-source-controller, rook, fluent-bit-plugin-loki, timestamp-authority, step, airflow, policy-controller, pulumi, step-ca, harbor-registry, kubescape, spire-server, chezmoi, flux-kustomize-controller, thanos, rekor,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, kubevela, helm-push, k9s, kots, trivy, up, cilium-cli, eksctl, zot, kubescape, flux-source-controller, k8sgpt, helm-operator, chartmuseum...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: kubescape, helm-operator, kots, k8sgpt, k9s, trivy, up, zot, zarf, flux-helm-controller, kubevela, flux-source-controller, chartmuseum, eksctl, cilium-cli, helm-push...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: zarf, flux-helm-controller, kubevela, helm-push, k9s, kots, trivy, up, cilium-cli, eksctl, zot, kubescape, flux-source-controller, k8sgpt, helm-operator, chartmuseum...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: aactl, ko, spire-server-fips, kubescape, tkn, apko, slsa-verifier, skaffold, spire-server, tekton-chains, melange, cosign, falcoctl-fips, policy-controller, flux-source-controller...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: aactl, ko, spire-server-fips, kubescape, tkn, apko, slsa-verifier, skaffold, spire-server, tekton-chains, melange, cosign, falcoctl-fips, policy-controller, flux-source-controller...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: aactl, spire-server-fips, kubescape, paranoia, slsa-verifier, k3s, skaffold, k3d, up, ctop, tekton-chains, falcoctl-fips, scorecard, bom, kpt, chartmuseum...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, kubevela, up, kubernetes-csi-livenessprobe, scorecard, kubeflow, volume-modifier-for-k8s-fips, prometheus-adapter-fips, plutono-fips, prometheus-stackdriver-exporter, metrics-server-fips, aws-efs-csi-driver-fips, terraform-provider-sendgrid-fips,...