GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: mariadb-operator, github-mcp-server, victoriametrics, flux, grafana-operator, grafana-rollout-operator, malcontent, dbmate, flux-helm-controller, pluto, flux-image-reflector-controller, aws-network-policy-agent, local-path-provisioner, dkron, stakater-reloader,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, pulumi-language-dotnet, crossplane-provider-azure-sql, nfpm, tfsec, grafana-alloy, crossplane-provider-aws-dynamodb, crossplane-provider-azure-authorization, xeol, crossplane-provider-aws-route53, crossplane-provider-aws-s3, wal-g,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, pulumi-language-dotnet, crossplane-provider-azure-sql, nfpm, tfsec, grafana-alloy, crossplane-provider-aws-dynamodb, crossplane-provider-azure-authorization, xeol, crossplane-provider-aws-route53, crossplane-provider-aws-s3, wal-g,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kots, istio, harbor, cilium-cli, flux, pluto, flux-helm-controller, eksctl, kuma, cluster-api-helm-controller, helm-docs, k9s, helm-mapkubeapis, helm-push, chartmuseum, flux-source-controller, cerbos, trivy-operator, linkerd2, tw, trivy,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kots, istio, harbor, cilium-cli, flux, pluto, flux-helm-controller, eksctl, kuma, cluster-api-helm-controller, helm-docs, k9s, helm-mapkubeapis, helm-push, chartmuseum, flux-source-controller, cerbos, trivy-operator, linkerd2, trivy, cert-manager-cmctl...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kots, istio, harbor, cilium-cli, flux, pluto, flux-helm-controller, eksctl, kuma, cluster-api-helm-controller, helm-docs, k9s, helm-mapkubeapis, helm-push, chartmuseum, flux-source-controller, cerbos, trivy-operator, linkerd2, trivy, cert-manager-cmctl...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: kube-arangodb, kots, istio, harbor, cilium-cli, flux, pluto, flux-helm-controller, eksctl, kuma, cluster-api-helm-controller, helm-docs, k9s, helm-mapkubeapis, helm-push, chartmuseum, flux-source-controller, cerbos, trivy-operator, linkerd2, tw, trivy,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux, tw, cert-manager-cmctl-fips, helm-operator-fips, kuma, kots, flux-source-controller-fips, k8ssandra-client-fips, zot, kubescape, trivy-fips, helm-push, zarf, harbor-fips, cert-manager, harbor, teleport, flux-fips, chartmuseum-fips, chart-testing-fips, consul-k8...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux, tw, cert-manager-cmctl-fips, helm-operator-fips, kuma, kots, flux-source-controller-fips, k8ssandra-client-fips, zot, kubescape, trivy-fips, helm-push, zarf, harbor-fips, cert-manager, harbor, teleport, flux-fips, chartmuseum-fips, chart-testing-fips, consul-k8...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: kots, skaffold, buildkitd, zot, cilium-cli, syft, gatekeeper, flux-helm-controller, nerdctl, fuse-overlayfs-snapshotter, cluster-api-helm-controller, ctop, helm-push, chartmuseum, teleport, melange, flux-source-controller, dagger, linkerd2, xeol, docker-cli-buildx,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: k8sgpt, helm-operator, trivy, cert-manager, k9s, cert-manager-fips, kots, cilium-cli, flux-helm-controller, kubevela, zot, flux-source-controller, eksctl, kubescape, zarf, helm-push, chartmuseum, up...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-operator, kots, zarf, up, cilium-cli, k9s, trivy, kubescape, flux-helm-controller, helm-push, chartmuseum, k8sgpt, eksctl, kubevela, zot, flux-source-controller...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: k8sgpt, helm-operator, trivy, cert-manager, k9s, cert-manager-fips, kots, cilium-cli, flux-helm-controller, kubevela, zot, flux-source-controller, eksctl, kubescape, zarf, helm-push, chartmuseum, up...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: cri-tools, k3s, flux, helm-operator-fips, kots, cosign, dagger, falco, goreleaser, newrelic-infrastructure-agent, gitsign, kubevela, zot, k8sgpt, kubescape, docker-machine-driver-harvester, docker-credential-gcr, argo-workflows, kpt, kubeflow-katib, cert-manager,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cri-tools, k3s, flux, helm-operator-fips, kots, cosign, dagger, falco, goreleaser, newrelic-infrastructure-agent, gitsign, kubevela, zot, k8sgpt, kubescape, docker-machine-driver-harvester, docker-credential-gcr, argo-workflows, kpt, kubeflow-katib, cert-manager,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: ipfs, falco, buildkitd, prometheus-blackbox-exporter, spark-operator, src, up, terraform-provider-sendgrid, kubeflow, kubescape, aactl, scorecard, kubevela, cortex, k3d, slsa-verifier, dgraph...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, ipfs, dgraph, kubevela, timestamp-authority-fips, src, kubescape, cortex, prometheus-adapter-fips, spark-operator, prometheus-blackbox-exporter, kubeflow, aactl, falcoctl-fips, kubeflow-fips, metrics-server-fips, vault-csi-provider, k3d,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nginx-mainline, pulumi-language-dotnet, terraform-provider-sendgrid, hugo, cortex, cosign, oauth2-proxy, kubewatch, weaviate, git-lfs, dgraph, conftest, kpt, kind, kubevela, ip-masq-agent, coredns, cue, nghttp2, prometheus-blackbox-exporter, prometheus-adapter,...

CVE-2023-2253 vulnerabilities

Vulnerabilities for packages: aactl, bom, kubernetes-dashboard, argocd-image-updater-fips, argocd-image-updater, kpt...

GHSA-HQXW-F8MX-CPMW vulnerabilities

Vulnerabilities for packages: aactl, bom, kubernetes-dashboard, argocd-image-updater-fips, argocd-image-updater, kpt...