GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: polaris, karpenter, clickhouse-operator, stakater-reloader, gh, flux-helm-controller, flux-image-automation-controller, external-secrets-operator, dbmate, omnibump, actions-runner-controller, rabbitmq-messaging-topology-operator, spire-server, supercronic,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: witness, xeol, crossplane-provider-aws-ec2, pulumi, trivy-operator, guac, snyk-cli, external-secrets-operator, sops, crossplane-provider-aws-firehose, tfsec, crossplane-provider-aws-route53, grafana, kubescape, buildkitd, gptscript, kyverno,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: witness, xeol, crossplane-provider-aws-ec2, pulumi, trivy-operator, guac, snyk-cli, external-secrets-operator, sops, crossplane-provider-aws-firehose, tfsec, crossplane-provider-aws-route53, grafana, kubescape, buildkitd, gptscript, kyverno,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: consul-k8s, k8ssandra-client, zarf, trivy-operator, flux-helm-controller, helm-push, zot, cilium-cli, cert-manager-cmctl, cluster-api-helm-controller, linkerd2, kots, helm-set-status, k9s, tw, nova, trivy, kubescape, chart-testing, chartmuseum, harbor, rancher-fleet,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: consul-k8s, k8ssandra-client, zarf, trivy-operator, flux-helm-controller, helm-push, zot, cilium-cli, cert-manager-cmctl, cluster-api-helm-controller, linkerd2, kots, helm-set-status, k9s, nova, trivy, kubescape, chart-testing, chartmuseum, harbor, rancher-fleet,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: consul-k8s, k8ssandra-client, zarf, trivy-operator, flux-helm-controller, helm-push, zot, cilium-cli, cert-manager-cmctl, cluster-api-helm-controller, linkerd2, kots, helm-set-status, k9s, nova, trivy, kubescape, chart-testing, chartmuseum, harbor, rancher-fleet,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: consul-k8s, k8ssandra-client, zarf, trivy-operator, flux-helm-controller, helm-push, zot, cilium-cli, cert-manager-cmctl, cluster-api-helm-controller, linkerd2, kots, helm-set-status, k9s, tw, nova, trivy, kubescape, chart-testing, chartmuseum, harbor, rancher-fleet,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, helm-push, cert-manager-cmctl-fips, flux-source-controller, helm-operator-fips, flux-helm-controller, rancher-helm, cilium-cli, zarf, chart-testing, consul-k8s-fips, tw, cert-manager, harbor, k8ssandra-client-fips, flux-source-controller-fips, plut...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, helm-push, cert-manager-cmctl-fips, flux-source-controller, helm-operator-fips, flux-helm-controller, rancher-helm, cilium-cli, zarf, chart-testing, consul-k8s-fips, tw, cert-manager, harbor, k8ssandra-client-fips, flux-source-controller-fips, plut...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: consul-k8s, xeol, k8ssandra-client, zarf, kaniko, flux-helm-controller, syft, helm-push, docker, opa-envoy, k8sgpt, cilium-cli, cert-manager-cmctl, cluster-api-helm-controller, zot, linkerd2, kots, fuse-overlayfs-snapshotter, gatekeeper, wolfictl, trivy, skaffold,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kubevela, cert-manager-fips, cert-manager, helm-push, k8sgpt, trivy, up, zarf, flux-source-controller, chartmuseum, k9s, flux-helm-controller, helm-operator, eksctl, cilium-cli, kubescape, zot, kots...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: chartmuseum, kots, k9s, kubevela, zarf, flux-source-controller, eksctl, flux-helm-controller, up, helm-push, trivy, kubescape, k8sgpt, cilium-cli, zot, helm-operator...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubevela, cert-manager-fips, cert-manager, helm-push, k8sgpt, trivy, up, zarf, flux-source-controller, chartmuseum, k9s, flux-helm-controller, helm-operator, eksctl, cilium-cli, kubescape, zot, kots...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: argo-workflows, cert-manager-fips, falco, aactl, gitsign, istio-pilot-agent, kubevela, buildkitd, up, helm-operator-fips, flux-helm-controller, scorecard, cadvisor-fips, tekton-chains, zarf, cosign, crane, argo-workflows-fips, slsa-verifier, vexctl,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: argo-workflows, cert-manager-fips, falco, aactl, gitsign, istio-pilot-agent, kubevela, buildkitd, up, helm-operator-fips, flux-helm-controller, scorecard, cadvisor-fips, tekton-chains, zarf, cosign, crane, argo-workflows-fips, slsa-verifier, vexctl,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, dgraph, spark-operator, src, kubevela, terraform-provider-sendgrid, kubeflow, ipfs, prometheus-blackbox-exporter, up, slsa-verifier, kubescape, aactl, falco, k3d, buildkitd, cortex...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, falco, aactl, up, buildkitd, prometheus-stackdriver-exporter, scorecard, volume-modifier-for-k8s-fips, kubeflow-fips, dynamic-localpv-provisioner-fips, slsa-verifier, bank-vaults-fips, src, dgraph, terraform-provider-sendgrid-fips, vault-csi-provider,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kind, stakater-reloader, pulumi, nginx-mainline, oauth2-proxy, certificate-transparency, kubeflow, node-problem-detector, haproxy-ingress, gke-gcloud-auth-plugin, kubescape, buildkitd, kaf, grype, slsa-verifier, coredns, wireguard-go, hugo, metacontroller,...

CVE-2023-2253 vulnerabilities

Vulnerabilities for packages: aactl, kpt, argocd-image-updater-fips, kubernetes-dashboard, argocd-image-updater, bom...

GHSA-HQXW-F8MX-CPMW vulnerabilities

Vulnerabilities for packages: aactl, kpt, argocd-image-updater-fips, kubernetes-dashboard, argocd-image-updater, bom...