GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: crossplane, kargo, pulumi-language-dotnet, pulumi-language-yaml, flux, nfpm, trivy-operator, flux-image-automation-controller, zarf, flux-source-controller, snyk-cli, trivy, act, grype, src-fingerprint, witness, pulumi, skaffold, kots, tfsec, argo-events, xeol, cerbo...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: packer-fips, apko-fips, wolfictl, gitsign, kaniko-fips, src-fingerprint-fips, witness, external-secrets-operator, nfpm, kyverno-fips, gitea, terragrunt-fips, kubescape, mapotf-fips, trivy-operator, grype-fips, gitlab-runner, grype-db, gitlab-runner-fips, nemo,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: crossplane, ko, buildkitd, trivy-operator, zarf, flux-source-controller, trivy, tekton-chains, skaffold, docker, tkn, slsa-verifier, policy-controller, cosign, bom, falcoctl, guac, kyverno, gh, teleport, tflint, kyverno-notation-aws, spire-server, goreleaser,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: policy-controller, buildkitd, rekor-fips, falcoctl-fips, gitsign, tflint-fips, kyverno-fips, spire-server-fips, kubescape, reports-server, trivy-operator, kyverno-notation-aws, gitlab-runner, vexctl, gitlab-runner-fips, goreleaser,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: crossplane, ko, buildkitd, trivy-operator, zarf, flux-source-controller, trivy, sigstore-scaffolding, tekton-chains, witness, skaffold, docker, tkn, policy-controller, cosign, falcoctl, kyverno, gh, tflint, kyverno-notation-aws, spire-server, goreleaser, aactl, zot,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: crossplane, ko, buildkitd, trivy-operator, zarf, flux-source-controller, trivy, sigstore-scaffolding, tekton-chains, witness, skaffold, docker, tkn, policy-controller, cosign, falcoctl, kyverno, gh, tflint, kyverno-notation-aws, spire-server, goreleaser, aactl, zot,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, sftpgo-plugin-eventsearch, aws-privateca-issuer, flux, volume-modifier-for-k8s, github-mcp-server, grafana-rollout-operator, flux-image-automation-controller, stakater-reloader, secrets-store-csi-driver-provider-aws,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane, kargo, ko, step-ca, rancher-agent, libnvidia-container, lazydocker, cloudnative-pg, wal-g, grafana-agent-operator, docker-credential-gcr, witness, splunk-otel-collector, cluster-autoscaler, kots, prometheus-adapter, promxy, crossplane-provider-sql, cerbos...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: cloudflared, step-ca, falcosidekick, cloud-provider-gcp-cloud-controller-manager, terragrunt, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-memorydb, kots, xeol, k8sgateway, helm-mapkubeapis, terraform-provider-azuread,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: cloudflared, falcosidekick, cloud-provider-gcp-cloud-controller-manager, terragrunt, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-memorydb, kots, prometheus-adapter, xeol, k8sgateway, helm-mapkubeapis, terraform-provider-azuread, gh,...

CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: cloudflared, falcosidekick, cloud-provider-gcp-cloud-controller-manager, terragrunt, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-memorydb, kots, prometheus-adapter, xeol, k8sgateway, helm-mapkubeapis, terraform-provider-azuread, gh,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: cloudflared, step-ca, falcosidekick, cloud-provider-gcp-cloud-controller-manager, terragrunt, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-memorydb, kots, xeol, k8sgateway, helm-mapkubeapis, terraform-provider-azuread,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: sqlexporter, glow, openbao-fips, gpu-operator, docker-cli-fips, buildkitd, cass-operator, spark-operator-fips, vault-csi-provider, gosu, velero, external-secrets-operator, helm-fips, authservice, kubernetes-fips, docker-credential-gcr,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux, tw, cert-manager-cmctl, cluster-api-helm-controller, zarf, helm-operator, flux-source-controller, cilium-cli, trivy, rancher-helm, pluto, kots, chartmuseum, teleport, k8ssandra-client, chart-testing, helm-push, flux-helm-controller, k9s, zot, eksctl, helm-docs,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux, tw, cert-manager-cmctl, cluster-api-helm-controller, zarf, helm-operator, flux-source-controller, cilium-cli, trivy, rancher-helm, pluto, kots, chartmuseum, teleport, k8ssandra-client, chart-testing, helm-push, flux-helm-controller, k9s, zot, eksctl, helm-docs,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux, tw, cert-manager-cmctl, cluster-api-helm-controller, zarf, helm-operator, flux-source-controller, cilium-cli, trivy, rancher-helm, pluto, kots, chartmuseum, teleport, k8ssandra-client, chart-testing, helm-push, flux-helm-controller, k9s, zot, eksctl, helm-docs,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux, tw, cert-manager-cmctl, cluster-api-helm-controller, zarf, helm-operator, flux-source-controller, cilium-cli, trivy, rancher-helm, pluto, kots, chartmuseum, teleport, k8ssandra-client, chart-testing, helm-push, flux-helm-controller, k9s, zot, eksctl, helm-docs,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: kargo, buildkitd, nerdctl, cert-manager-cmctl, cluster-api-helm-controller, zarf, helm-operator, flux-source-controller, cilium-cli, neuvector-scanner, opa-envoy, trivy, grype, skaffold, docker, kots, xeol, osv-scanner, spegel, k8sgpt, fuse-overlayfs-snapshotter,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, nerdctl, buildkitd, wolfictl, ctop, kaniko-fips, helm-fips, kubescape, grype-fips, grype-db, helm, envoy-gateway, spegel, xeol, helm-operator-fips, beats, rancher-agent, newrelic-infrastructure-agent, dagger, cluster-api-helm-controller-fips,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, nerdctl, buildkitd, wolfictl, ctop, kaniko-fips, helm-fips, kubescape, grype-fips, grype-db, helm, envoy-gateway, spegel, xeol, helm-operator-fips, beats, rancher-agent, newrelic-infrastructure-agent, dagger, cluster-api-helm-controller-fips,...