CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: buildah, witness, flux-source-controller, kots, kyverno, falcoctl, skopeo, tekton-chains, undock, kubescape, gitsign, aactl, podman, zarf, ratify, slsa-verifier, kyverno-notation-aws...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: buildah, witness, flux-source-controller, kots, kyverno, falcoctl, skopeo, tekton-chains, undock, kubescape, gitsign, aactl, podman, zarf, ratify, slsa-verifier, kyverno-notation-aws...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: slsa-verifier, podman, kubescape-server, tekton-chains, podman-fips, skopeo-fips, kots, flux-source-controller, prometheus-podman-exporter-fips, kyverno-notation-aws-fips, falcoctl, buildah, aactl, chainctl, witness, flux-source-controller-fips, zarf, portieris-fips,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: slsa-verifier, podman, kubescape-server, tekton-chains, podman-fips, skopeo-fips, kots, flux-source-controller, prometheus-podman-exporter-fips, kyverno-notation-aws-fips, falcoctl, buildah, aactl, chainctl, witness, flux-source-controller-fips, zarf, portieris-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, drone, cert-manager, grafana, zitadel, etcd, knative-eventing-fips, snyk-cli, k3s, gatekeeper-fips, flux-source-controller, kuma, kube-state-metrics, harbor-fips, gitlab-rails-ce, aactl, knative-kafka-broker, mattermost,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gatus, omnictl-multiarch-fips, buildkitd-fips, neuvector-sigstore-interface, drone, slsa-verifier, step-issuer-fips, apko, cosign-fips, crossplane-provider-azure-storagesync, cert-manager, podman, grafana, zitadel, k8sgpt, go-discover-fips, etcd, age-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, drone, cert-manager, grafana, zitadel, etcd, knative-eventing-fips, snyk-cli, k3s, gatekeeper-fips, flux-source-controller, kuma, kube-state-metrics, harbor-fips, gitlab-rails-ce, aactl, knative-kafka-broker, mattermost,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch-fips, apko, podman, cert-manager, grafana, zitadel, etcd, knative-eventing-fips, snyk-cli, k3s, gatekeeper-fips, apko-fips, flux-source-controller, kuma, prometheus-podman-exporter-fips, kube-state-metrics, harbor-fips, gitlab-rails-ce, aactl,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: gatus, omnictl-multiarch-fips, drone, apko, podman, cert-manager, grafana, zitadel, etcd, knative-eventing-fips, snyk-cli, k3s, gatekeeper-fips, apko-fips, flux-source-controller, kuma, prometheus-podman-exporter-fips, kube-state-metrics, harbor-fips, gitlab-rails-ce...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, rancher, k9s, gomplate, knative-serving, kargo, docker-cli-buildx, kots, terraform-provider-azurerm, rancher-machine, apko, aactl, policy-controller, skaffold, osv-scanner, nuclei, kyverno, cilium-cli, eksctl, fscrypt, minio,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: gitea, bom, wolfictl, flux-source-controller, pulumi-kubernetes-operator, pulumi-language-java, src-fingerprint, k9s, gitsign, gomplate, trivy-operator, flux-image-automation-controller, trivy, trufflehog, nfpm, kargo, gptscript, gitaly, kots, syft, snyk-cli, grype,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: apko, grafana, xeol, snyk-cli, kargo, apko-fips, goreleaser, flux-source-controller, rancher-fleet, steampipe, gitlab-rails-ce, pulumi-language-yaml, argocd-image-updater-fips, witness, zarf, kubescape-server-fips, chainctl-fips, skaffold-fips, trufflehog-fips,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: bom, flux-source-controller, docker, tekton-chains, tflint, gitsign, trivy-operator, trivy, spire-server, ratify, docker-cli-buildx, falcoctl, kubescape, rekor, crossplane, aactl, policy-controller, skaffold, teleport, kyverno-notation-aws, gitlab-runner,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: buildkitd-fips, neuvector-sigstore-interface, slsa-verifier, cosign-fips, spire-server-fips, ko, neuvector-sigstore-interface-fips, image-factory-fips, goreleaser, flux-source-controller, aactl, docker-cli-buildx-fips, zarf, kubescape-server-fips, chainctl-fips,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: flux-source-controller, docker, tekton-chains, tflint, gitsign, trivy-operator, trivy, spire-server, ratify, sigstore-scaffolding, docker-cli-buildx, falcoctl, kubescape, crossplane, aactl, policy-controller, skaffold, teleport, kyverno-notation-aws, witness, kyverno...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, docker, tekton-chains, tflint, gitsign, trivy-operator, trivy, spire-server, ratify, sigstore-scaffolding, docker-cli-buildx, falcoctl, kubescape, crossplane, aactl, policy-controller, skaffold, teleport, kyverno-notation-aws, witness, kyverno...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubewatch, local-path-provisioner, aws-network-policy-agent, mariadb-operator, pluto, supercronic, clickhouse-operator, nova, oras, flux-image-automation-controller, spire-server, mountpoint-s3-csi-driver, malcontent, gh,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kube-fluentd-operator, kwok, flux-source-controller, spqr, runc, kubescape-operator, terraform-provider-time, spicedb-operator, k8ssandra-operator, cluster-api-provider-vsphere, grafana-mimir, rancher, knative-serving, cri-tools, kafka-proxy,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kubeflow-pipelines, gomplate, crossplane-provider-aws-ec2, kubo, kargo, sealed-secrets, aactl, policy-controller, crossplane-provider-aws-sns, loki-3.6, nsc, docker-compose, crossplane-provider-aws-cloudwatchlogs, authservice, minio-operator,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kubeflow-pipelines, gomplate, crossplane-provider-aws-ec2, kubo, kargo, sealed-secrets, aactl, policy-controller, crossplane-provider-aws-sns, loki-3.6, nsc, docker-compose, crossplane-provider-aws-cloudwatchlogs, authservice, minio-operator,...