CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: buildah, flux-source-controller, kyverno-notation-aws, podman, zarf, witness, kyverno, kubescape, tekton-chains, skopeo, undock, aactl, gitsign...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: buildah, flux-source-controller, kyverno-notation-aws, podman, zarf, witness, kyverno, kubescape, tekton-chains, skopeo, undock, aactl, gitsign...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: buildah, aactl, prometheus-podman-exporter-fips, kubescape, kyverno-fips, portieris-fips, kubescape-server-fips, falcoctl-fips, kyverno-notation-aws, podman, ratify-fips, zarf-fips, skopeo, flux-source-controller-fips, kyverno, gitsign, witness, chainctl,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: buildah, aactl, prometheus-podman-exporter-fips, kubescape, kyverno-fips, portieris-fips, kubescape-server-fips, falcoctl-fips, kyverno-notation-aws, podman, ratify-fips, zarf-fips, skopeo, flux-source-controller-fips, kyverno, gitsign, witness, chainctl,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, trivy-operator-fips, coder, flux-image-automation-controller, kubernetes, tekton-pipelines, coder-fips, omnictl-multiarch-fips, zitadel, rancher-agent, backup-restore-operator, flux-source-controller-fips, trivy-operator, upwind-agent, telegraf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, trivy-operator-fips, crossplane-fips, crossplane-provider-azure-purview, coder, caddy-fips, cosign, flux-image-automation-controller, teleport-operator-fips, kubernetes, pulumi-language-java, crossplane-provider-azure-portal,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, trivy-operator-fips, coder, teleport-operator-fips, flux-image-automation-controller, kubernetes, pulumi-language-java, tekton-pipelines, rootlesskit-fips, jfrog-cli, peerdb-flow, coder-fips, omnictl-multiarch-fips, zitadel,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, trivy-operator-fips, coder, flux-image-automation-controller, kubernetes, tekton-pipelines, coder-fips, omnictl-multiarch-fips, zitadel, rancher-agent, backup-restore-operator, flux-source-controller-fips, trivy-operator, upwind-agent, telegraf,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, trivy-operator-fips, teleport-operator-fips, flux-image-automation-controller, kubernetes, pulumi-language-java, tekton-pipelines, jfrog-cli, omnictl-multiarch-fips, zitadel, rancher-agent, backup-restore-operator, flux-source-controller-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tkn, argo-events, external-secrets-operator, apko, pulumi-language-java, k3s, argocd-image-updater, rancher, terraform-provider-tls, cilium, pulumi-kubernetes-operator, teleport, falcoctl, flux-source-controller, fulcio, kaf, step-issuer, pulumi, knative-serving,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: argo-workflows, grafana-alloy, crossplane, pulumi-language-dotnet, kyverno, wolfictl, kubescape, xeol, argo-events, external-secrets-operator, apko, pulumi-language-java, trivy-operator, syft, argocd-image-updater, gitlab-runner, grype, kots, goreleaser, act,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, cerbos, trivy-operator-fips, crossplane-fips, coder, flux-image-automation-controller, pulumi-language-java, gitaly-fips, jfrog-cli, coder-fips, grafana-alloy, trivy-operator, upwind-agent, gitlab-runner-fips, kyverno,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: tkn, docker-compose, kyverno-notation-aws, crossplane, kyverno, kubescape, trivy-operator, slsa-verifier, gitlab-runner, goreleaser, rekor, cosign, vexctl, zot, teleport, falcoctl, gitsign, guac, skaffold, flux-source-controller, gh, spire-server, ko,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: gitlab-runner, trivy-operator-fips, crossplane-fips, rekor, cosign, docker-compose, jfrog-cli, cosign-fips, policy-controller, tkn-fips, flux-source-controller-fips, buildkitd, trivy-operator, gitlab-runner-fips, spire-server-fips, neuvector-sigstore-interface-fips,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tkn, kyverno-notation-aws, crossplane, kyverno, kubescape, trivy-operator, slsa-verifier, sigstore-scaffolding, goreleaser, cosign, witness, vexctl, zot, teleport, falcoctl, gitsign, skaffold, flux-source-controller, gh, spire-server, ko, docker-cli-buildx, ratify,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tkn, kyverno-notation-aws, crossplane, kyverno, kubescape, trivy-operator, slsa-verifier, sigstore-scaffolding, goreleaser, cosign, witness, vexctl, zot, teleport, falcoctl, gitsign, skaffold, flux-source-controller, gh, spire-server, ko, docker-cli-buildx, ratify,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, fluxcd-kustomize-mutating-webhook, kubewatch, flux-helm-controller, actions-runner-controller, ingress-nginx-controller, clickhouse-operator, external-secrets-operator, flux-image-reflector-controller, apko, dataplaneapi, dkron,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: tkn, argo-events, external-secrets-operator, apko, dataplaneapi, gcsfuse, k3s, argocd-image-updater, otel-cli, pulumi-language-java, rancher, yunikorn-k8shim, k8s-device-plugin, swagger, goreleaser, terraform-provider-tls, certificate-transparency, helm-set-status,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: jaeger, argo-events, external-secrets-operator, gcsfuse, kafka-proxy, crossplane-provider-aws-lambda, gitleaks, conftest, flux-source-controller, chartmuseum, fulcio, crossplane-provider-aws, dagdotdev, tflint, cert-manager-istio-csr, mongo-tools,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: jaeger, argo-events, external-secrets-operator, gcsfuse, kafka-proxy, crossplane-provider-aws-lambda, gitleaks, flux-source-controller, chartmuseum, fulcio, crossplane-provider-aws, dagdotdev, tflint, cert-manager-istio-csr, mongo-tools, kube-vip-cloud-provider,...