GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zarf-fips, commercial-expanso-edge, argocd-image-updater, flux-source-controller-fips, omnictl-multiarch, trivy, knative-kafka-broker, docker-machine-driver-harvester, trivy-fips, osv-scanner, omnictl-multiarch-fips, nemo, coder-fips, drone, knative-serving,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: gatus-fips, longhorn-manager-fips, chainctl, flux-source-controller-fips, rancher-machine, crossplane-provider-azure-orbital, trivy, crossplane-provider-aws-cognitoidp, packer-fips, crossplane-provider-aws-iam, crossplane-provider-aws-route53recoverycontrolconfig,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, dagger, prometheus, vault-benchmark, zarf, cilium, flux-source-controller, docker-cli-buildx, go-discover, rootlesskit, k3s, istio, melange, kine, kubernetes, gomplate, containerd,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: gatus-fips, eks-distro, aws-fsx-csi-driver-fips, volsync-fips, longhorn-manager-fips, spegel, blob-csi-fips, chainctl, rancher-machine, crossplane-provider-azure-orbital, openbao-fips, trivy, thanos-receive-controller-fips, crossplane-provider-aws-cognitoidp,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: gatus-fips, eks-distro, aws-fsx-csi-driver-fips, volsync-fips, longhorn-manager-fips, spegel, blob-csi-fips, chainctl, rancher-machine, crossplane-provider-azure-orbital, openbao-fips, trivy, thanos-receive-controller-fips, crossplane-provider-aws-cognitoidp,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, coder-fips, cg, src-fingerprint,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, pluto, kubewatch, hubble, dataplaneapi, karpenter, newrelic-infra-operator, stakater-reloader, grafana-operator, smokescreen, flux-source-controller, supercronic, dkron, external-secrets-operator, github-mcp-server,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, neuvector-scanner, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, gitlab-pages, nri-mysql, vault-benchmark, tigera-operator, stakater-reloader, k8sgpt-operator, timoni, cilium, smokescreen, flux-source-controller,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, neuvector-scanner, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, flannel-cni-plugin, timoni, flux-source-controller, tempo, crossplane, gobump, gomplate, kaniko, minio-operator, gitleaks, rclone, guac,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, neuvector-scanner, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, flannel-cni-plugin, timoni, flux-source-controller, tempo, crossplane, gobump, gomplate, kaniko, minio-operator, gitleaks, rclone, guac,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: neuvector-scanner, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, flannel-cni-plugin, vault-benchmark, timoni, stakater-reloader, flux-source-controller, nsc, aws-efs-csi-driver, tempo, gobump, kaniko, k8s-device-plugin, mods, lazydocker, aactl, gosu,...