CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, undock, tekton-chains, gitsign, kyverno, skopeo, flux-source-controller, witness, zarf, slsa-verifier, ratify, aactl, buildah, podman, kubescape, kots, falcoctl...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, undock, tekton-chains, gitsign, kyverno, skopeo, flux-source-controller, witness, zarf, slsa-verifier, ratify, aactl, buildah, podman, kubescape, kots, falcoctl...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, buildah, kubescape-server-fips, kots, aactl, kubescape-server, podman, chainctl, zarf, chainctl-fips, portieris-fips, tekton-chains, skopeo-fips, kyverno, ratify-fips, prometheus-podman-exporter, falcoctl, ratify, slsa-verifier,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, buildah, kubescape-server-fips, kots, aactl, kubescape-server, podman, chainctl, zarf, chainctl-fips, portieris-fips, tekton-chains, skopeo-fips, kyverno, ratify-fips, prometheus-podman-exporter, falcoctl, ratify, slsa-verifier,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gatekeeper, cloudbeat, rancher, vitess, telegraf, external-dns, gitlab-rails-ce-fips, cert-manager, minio-fips, kubernetes-dashboard, prometheus, seaweedfs-rocksdb-fips, argo-cd-fips, argo-cd, external-secrets-operator, osv-scanner, snyk-cli,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gatekeeper, cloudbeat, rancher, vitess, telegraf, external-dns, gitlab-rails-ce-fips, cert-manager, minio-fips, kubernetes-dashboard, prometheus, seaweedfs-rocksdb-fips, argo-cd-fips, argo-cd, external-secrets-operator, osv-scanner, snyk-cli,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-events-fips, grype-db, gatekeeper, cloudbeat, rancher, etcd, telegraf, crossplane-aws-provider-fips, external-dns, vitess, gitlab-rails-ce-fips, cert-manager, crossplane, fulcio-fips, amazon-ssm-agent, podman, wal-g, age-fips, minio-fips, kubernetes-dashboard,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: argo-events-fips, grype-db, gatekeeper, cloudbeat, vitess, telegraf, external-dns, gitlab-rails-ce-fips, cert-manager, amazon-ssm-agent, podman, minio-fips, kubernetes-dashboard, chainctl-fips, prometheus, argo-cd-fips, argo-cd, external-secrets-operator, osv-scanner...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: argo-events-fips, grype-db, gatekeeper, cloudbeat, rancher, vitess, telegraf, external-dns, gitlab-rails-ce-fips, cert-manager, wal-g, amazon-ssm-agent, podman, minio-fips, kubernetes-dashboard, chainctl-fips, peerdb-flow, prometheus, seaweedfs-rocksdb-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cosign, act, rancher-machine, nuclei, flux-image-automation-controller, vault-benchmark, kargo, crossplane-provider-azure-managedidentity, mattermost, docker-machine-driver-harvester, crossplane-provider-azure-storage, go-discover, prometheus-operator,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, goreleaser, act, argo-cd, dagger, flux-image-automation-controller, nuclei, k9s, pulumi-language-yaml, steampipe, src-fingerprint, gomplate, tfsec, kubevela, skaffold, grafana-alloy, kaniko, terragrunt, bom, flux-source-controller, melang...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: argo-events-fips, grype-db, cloudbeat, gitlab-rails-ce-fips, crossplane, amazon-ssm-agent, chainctl-fips, cerbos-fips, argo-cd-fips, argo-cd, external-secrets-operator, osv-scanner, amazon-ssm-agent-fips, snyk-cli, kubevela, bom, syft, terragrunt, tfsec,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: docker, cosign, goreleaser, rekor, vexctl, dagger, trivy, spire-server, policy-controller, skaffold, bom, flux-source-controller, teleport, kubescape, zarf, zot, kyverno-notation-aws, gitlab-runner, docker-compose, tkn, trivy-operator, kyverno, ko, tflint, buildkitd,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: cloudbeat, crossplane, chainctl-fips, bom, reports-server, trivy-operator, buildkitd-fips, gh, docker, gitsign, neuvector-sigstore-interface-fips, trivy, chainloop-cli, flux-source-controller, crossplane-fips, chainloop-control-plane, ko, kubescape-server-fips, aactl...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: docker, cosign, goreleaser, vexctl, trivy, spire-server, policy-controller, skaffold, flux-source-controller, teleport, kubescape, zarf, zot, kyverno-notation-aws, witness, tkn, trivy-operator, kyverno, ko, tflint, buildkitd, sigstore-scaffolding, docker-cli-buildx,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: docker, cosign, goreleaser, vexctl, trivy, spire-server, policy-controller, skaffold, flux-source-controller, teleport, kubescape, zarf, zot, kyverno-notation-aws, witness, tkn, trivy-operator, kyverno, ko, tflint, buildkitd, sigstore-scaffolding, docker-cli-buildx,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: hubble, tailscale, fluxcd-kustomize-mutating-webhook, goreleaser, nfs-subdir-external-provisioner, pluto, grafana-operator, flux-helm-controller, karpenter, flux-image-automation-controller, aws-load-balancer-controller, supercronic, nodetaint, spire-server, go,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: verticadb-operator, coredns, grafana-pyroscope, cosign, rancher-machine, boring-registry, flux-helm-controller, grpcurl, flux-image-automation-controller, karpenter, nuclei, db-operator, knative-client, vault-benchmark, grafana-agent-operator,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, coredns, cosign, crossplane-provider-aws, flux-image-automation-controller, vault-benchmark, secrets-store-csi-driver-provider-azure, task, crossplane-provider-azure-managedidentity, hugo, helm-set-status, vale, gogatekeeper,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, coredns, cosign, crossplane-provider-aws, flux-image-automation-controller, vault-benchmark, secrets-store-csi-driver-provider-azure, task, crossplane-provider-azure-managedidentity, hugo, helm-set-status, vale, gogatekeeper,...