GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, falcoctl, tekton-chains, undock, kyverno-notation-aws, skopeo, aactl, witness, kots, kubescape, flux-source-controller, podman, ratify, buildah, gitsign, zarf...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kyverno, slsa-verifier, falcoctl, tekton-chains, undock, kyverno-notation-aws, skopeo, aactl, witness, kots, kubescape, flux-source-controller, podman, ratify, buildah, gitsign, zarf...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: ratify, buildah, flux-source-controller, kyverno, chainctl, zarf-fips, kubescape-server, falcoctl, tekton-chains-fips, falcoctl-fips, podman-fips, podman, gitsign, chainctl-fips, flux-source-controller-fips, tekton-chains, portieris-fips, kyverno-notation-aws,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: ratify, buildah, flux-source-controller, kyverno, chainctl, zarf-fips, kubescape-server, falcoctl, tekton-chains-fips, falcoctl-fips, podman-fips, podman, gitsign, chainctl-fips, flux-source-controller-fips, tekton-chains, portieris-fips, kyverno-notation-aws,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: zitadel, kaf, gitlab-workhorse-ce-fips, flux-source-controller, loki, coder-fips, chisel-fips, zarf-fips, vitess, external-secrets-operator-fips, kubernetes-dashboard, gatekeeper-fips, gitea, cloud-provider-aws, seaweedfs-rocksdb, gitea-fips, gatekeeper,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicefabric, docker-cli-buildx-fips, splunk-otel-collector-fips, zitadel, kaf, gitlab-workhorse-ce-fips, step-ca-fips, crossplane-provider-azure-resources, flux-source-controller, gomplate, terraform-provider-tls-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, zitadel, kaf, gitlab-workhorse-ce-fips, flux-source-controller, gomplate, loki, zarf-fips, argo-events-fips, vitess, external-secrets-operator-fips, kubernetes-dashboard, gatekeeper-fips, gitea, cloud-provider-aws, gitea-fips, gatekeeper,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zitadel, kaf, gitlab-workhorse-ce-fips, flux-source-controller, loki, coder-fips, chisel-fips, zarf-fips, vitess, external-secrets-operator-fips, kubernetes-dashboard, gatekeeper-fips, gitea, cloud-provider-aws, seaweedfs-rocksdb, gitea-fips, gatekeeper,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, splunk-otel-collector-fips, zitadel, kaf, gitlab-workhorse-ce-fips, flux-source-controller, gomplate, loki, chisel-fips, coder-fips, argo-events-fips, zarf-fips, vitess, external-secrets-operator-fips, kubernetes-dashboard, gatekeeper-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: containerd, knative-serving, rancher-agent, atlantis, openbao, step, docker-cli-buildx, apko, gomplate, mods, vitess, loki, flux-image-automation-controller, kaf, cloud-provider-aws, pulumi, opentofu, snyk-cli, tflint, grype, osv-scanner, step-issuer, argo-events,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: act, src-fingerprint, argo-cd, pulumi-language-yaml, rancher-fleet, kargo, gitlab-runner, cerbos, dagger, steampipe, gomplate, apko, terragrunt, flux, argo-workflows, wolfictl, scorecard, skaffold, flux-image-automation-controller, goreleaser, kubevela,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cerbos, flux-source-controller, gomplate, coder-fips, kargo, argo-events-fips, zarf-fips, external-secrets-operator-fips, crossplane-fips, gitea, kubevela, kaniko, gitea-fips, gitlab-runner-fips, k9s-fips, k9s, goreleaser, external-secrets-operator, redpanda-console,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: slsa-verifier, falcoctl, kyverno-notation-aws, gitlab-runner, dagger, docker-cli-buildx, ko, skaffold, goreleaser, aactl, buildkitd, spire-server, guac, trivy-operator, gh, rekor, neuvector-sigstore-interface, zot, kyverno, tkn, tflint, cosign, flux-source-controller...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, ratify, flux-source-controller, zarf-fips, crossplane-fips, tflint-fips, gitlab-runner-fips, goreleaser, spire-server, skaffold, kubescape-server-fips, trivy-operator, zarf, trivy, cloudbeat, reports-server, slsa-verifier, tkn, cosign,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: slsa-verifier, falcoctl, kyverno-notation-aws, docker-cli-buildx, ko, sigstore-scaffolding, skaffold, goreleaser, aactl, witness, buildkitd, spire-server, trivy-operator, gh, zot, neuvector-sigstore-interface, kyverno, tkn, tflint, cosign, flux-source-controller,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: slsa-verifier, falcoctl, kyverno-notation-aws, docker-cli-buildx, ko, sigstore-scaffolding, skaffold, goreleaser, aactl, witness, buildkitd, spire-server, trivy-operator, gh, zot, neuvector-sigstore-interface, kyverno, tkn, tflint, cosign, flux-source-controller,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: smarter-device-manager, victoriametrics-cluster, flux-operator, polaris, smokescreen, grafana-operator, local-path-provisioner, kubewatch, apko, flux, malcontent, sftpgo-plugin-eventsearch, stakater-reloader, flux-image-automation-controller, goreleaser,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: knative-serving, kube-arangodb, prometheus-adapter, chartmuseum, atlantis, filebrowser, kubernetes-dashboard-api, openbao, polaris, newrelic-infrastructure-agent, rancher-agent, step, docker-cli-buildx, apko, crossplane-provider-keycloak, falco-exporter, promxy,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: node-problem-detector, chartmuseum, openbao, wireguard-go, crossplane-provider-keycloak, mods, vale, flux-image-reflector-controller, azcopy, dockerize, dapr, osv-scanner, kube-vip, litestream, kubeflow-katib, terraform-docs, falcoctl, flux-operator, cloudflared,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: node-problem-detector, chartmuseum, wireguard-go, crossplane-provider-keycloak, mods, vale, flux-image-reflector-controller, temporal-ui-server, azcopy, dockerize, dapr, kube-vip, kubeflow-katib, undock, terraform-docs, falcoctl, flux-operator, cloudflared, cfssl,...