37 matches found
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: kube-state-metrics, backup-restore-operator-fips, spicedb-operator, tekton-chains, cert-manager-istio-csr, cluster-api-azure-controller-fips, cluster-api, image-factory, helm-operator-fips, gitlab-operator-fips, helm-operator, zot, gitlab-operator, eck-operator-fips,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: pulumi-language-java, melange, buildah, argo-cd, external-dns, ksops, opentofu, flux-kustomize-controller, containerd, falcoctl, crossplane-provider-aws-rds, crossplane-provider-keycloak, kaf, flux, crossplane-provider-azure-authorization, knative-serving,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: pulumi-language-java, melange, buildah, argo-cd, external-dns, ksops, opentofu, falcoctl, containerd, flux-kustomize-controller, kaf, flux, crossplane-provider-azure-authorization, knative-serving, vault-benchmark, cilium, nerdctl, cilium-cli, pulumi, sops, nfpm,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, melange, buildah, argo-cd, external-dns, ksops, opentofu, flux-kustomize-controller, containerd, falcoctl, crossplane-provider-aws-rds, crossplane-provider-keycloak, kaf, flux, crossplane-provider-azure-authorization, knative-serving,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: malcontent, fluxcd-kustomize-mutating-webhook, supercronic, tailscale, sftpgo-plugin-eventsearch, aws-load-balancer-controller, stakater-reloader, nfs-subdir-external-provisioner, dkron, github-mcp-server, flux-notification-controller, smokescreen,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: k8ssandra-operator, pulumi-language-java, litestream, rancher-agent, promxy, buildah, spqr, verticadb-operator, xeol, aws-node-termination-handler, argo-cd, kwok, net-kourier, wave, terraform-provider-azuread, azure-service-operator, external-dns, falco-no-driver,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: k8ssandra-operator, pulumi-language-java, litestream, rancher-agent, promxy, buildah, spqr, verticadb-operator, xeol, aws-node-termination-handler, argo-cd, kwok, net-kourier, wave, terraform-provider-azuread, azure-service-operator, external-dns, falco-no-driver,...
CVE-2026-33252 vulnerabilities
Vulnerabilities for packages: ferretdb, opencost, glab, datadog-agent, osv-scanner, jaeger...
GHSA-89XV-2J6F-QHC8 vulnerabilities
Vulnerabilities for packages: ferretdb, opencost, glab, datadog-agent, osv-scanner, jaeger...
GHSA-Q382-VC8Q-7JHJ vulnerabilities
Vulnerabilities for packages: ferretdb, opencost, glab, datadog-agent, osv-scanner, jaeger...
GHSA-89XV-2J6F-QHC8 vulnerabilities
Vulnerabilities for packages: opencost, gitlab-workhorse-ce-fips, flux-operator-fips, osv-scanner, opencost-fips, jaeger-fips, datadog-agent, glab, ferretdb, jaeger, livekit-cli, datadog-agent-fips, gitlab-workhorse-ce, flux-operator...
CVE-2026-33252 vulnerabilities
Vulnerabilities for packages: opencost, gitlab-workhorse-ce-fips, flux-operator-fips, osv-scanner, opencost-fips, jaeger-fips, datadog-agent, glab, ferretdb, jaeger, livekit-cli, datadog-agent-fips, gitlab-workhorse-ce, flux-operator...
GHSA-Q382-VC8Q-7JHJ vulnerabilities
Vulnerabilities for packages: opencost, gitlab-workhorse-ce-fips, flux-operator-fips, osv-scanner, opencost-fips, jaeger-fips, datadog-agent, glab, ferretdb, jaeger, livekit-cli, datadog-agent-fips, gitlab-workhorse-ce, flux-operator...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: opencost, gitlab-workhorse-ce-fips, flux-operator-fips, osv-scanner, opencost-fips, jaeger-fips, datadog-agent, ferretdb, jaeger, gitlab-workhorse-ce, gptscript, datadog-agent-fips, github-mcp-server, flux-operator...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: opencost, gitlab-workhorse-ce-fips, flux-operator-fips, osv-scanner, opencost-fips, jaeger-fips, datadog-agent, ferretdb, jaeger, gitlab-workhorse-ce, gptscript, datadog-agent-fips, github-mcp-server, flux-operator...
SUSE CVE-2026-23990
The Flux Operator is a Kubernetes CRD controller that manages the lifecycle of CNCF Flux CD and the ControlPlane enterprise distribution. Starting in version 0.36.0 and prior to version 0.40.0, a privilege escalation vulnerability exists in the Flux Operator Web UI authentication code that allows...
GO-2026-4351 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator
Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims in github.com/controlplaneio-fluxcd/flux-operator...
GHSA-4XH5-JCJ2-CH8Q vulnerabilities
Vulnerabilities for packages: flux-operator...