GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kubeflow-pipelines, gomplate, crossplane-provider-aws-ec2, kubo, kargo, sealed-secrets, aactl, policy-controller, crossplane-provider-aws-sns, loki-3.6, nsc, docker-compose, crossplane-provider-aws-cloudwatchlogs, authservice, minio-operator,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, kubeflow-pipelines, gomplate, crossplane-provider-aws-ec2, kubo, kargo, sealed-secrets, aactl, policy-controller, crossplane-provider-aws-sns, loki-3.6, nsc, docker-compose, crossplane-provider-aws-cloudwatchlogs, authservice, minio-operator,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: rook, kubernetes-dns-node-cache, apko, promxy-fips, k8sgpt, rancher-webhook-fips, kbld-fips, step-ca, grafana-operator-fips, etcd, azurefile-csi, sftpgo-plugin-eventstore, kube-state-metrics, postgres-operator, harbor-fips, tofu-controller, vault, mattermost,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cert-manager-cmctl, chart-testing, pluto, k9s, trivy, helm-operator, cluster-api-helm-controller, kots, kubescape, tw, chartmuseum, helm-docs, cilium-cli, zarf, rancher-helm, eksctl, k8ssandra-client, helm-push, consul-k8s, flux-helm-controlle...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: flux-source-controller, cert-manager-cmctl, chart-testing, pluto, k9s, trivy, helm-operator, cluster-api-helm-controller, kots, kubescape, tw, chartmuseum, helm-docs, cilium-cli, zarf, rancher-helm, eksctl, k8ssandra-client, helm-push, consul-k8s, flux-helm-controlle...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cert-manager-cmctl, chart-testing, pluto, k9s, trivy, helm-operator, cluster-api-helm-controller, kots, kubescape, tw, chartmuseum, helm-docs, cilium-cli, zarf, rancher-helm, eksctl, k8ssandra-client, helm-push, consul-k8s, flux-helm-controlle...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cert-manager-cmctl, chart-testing, pluto, k9s, trivy, helm-operator, cluster-api-helm-controller, kots, kubescape, tw, chartmuseum, helm-docs, cilium-cli, zarf, rancher-helm, eksctl, k8ssandra-client, helm-push, consul-k8s, flux-helm-controlle...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: flux-source-controller, docker, cert-manager-cmctl, trivy, spegel, helm-operator, cluster-api-helm-controller, kargo, docker-cli-buildx, kots, grype, kubescape, k3s, k8sgpt, skaffold, opa-envoy, osv-scanner, linkerd2, xeol, chartmuseum, kubevela, kaniko,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: buildkitd-fips, zot, docker-cli-buildx, grype, kaniko-fips, opa-fips, cilium-cli, k8sgpt, syft-fips, k8ssandra-client, cert-manager-cmctl-fips, linkerd2, xeol, kubevela, kots, helm-operator-fips, docker-compose, dagger, wolfictl, opa-fips-envoy, docker-fips, eksctl,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: buildkitd-fips, zot, docker-cli-buildx, grype, kaniko-fips, opa-fips, cilium-cli, k8sgpt, syft-fips, k8ssandra-client, cert-manager-cmctl-fips, linkerd2, xeol, kubevela, kots, helm-operator-fips, docker-compose, dagger, wolfictl, opa-fips-envoy, docker-fips, eksctl,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: restic, flux-source-controller, flux-kustomize-controller, tekton-chains, chezmoi, harbor-registry, grafana-mimir, thanos, timestamp-authority, trivy, druid, spire-server, grafana-agent-operator, sigstore-scaffolding, airflow, sops, falcoctl, velero, fulcio, kubescap...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-operator, zot, zarf, k9s, up, flux-source-controller, cilium-cli, k8sgpt, flux-helm-controller, trivy, kubevela, kots, kubescape, helm-push...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-push, flux-source-controller, kots, kubescape, up, flux-helm-controller, k8sgpt, cilium-cli, k9s, zot, trivy, zarf, eksctl, chartmuseum, helm-operator, kubevela...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: eksctl, chartmuseum, helm-operator, zot, zarf, k9s, up, flux-source-controller, cilium-cli, k8sgpt, flux-helm-controller, trivy, kubevela, kots, kubescape, helm-push...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: slsa-verifier, spire-server, spire-server-fips, ko, apko, policy-controller, tekton-chains, flux-source-controller, skaffold, tkn, melange, kubescape, cosign, falcoctl-fips, aactl...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: slsa-verifier, spire-server, spire-server-fips, ko, apko, policy-controller, tekton-chains, flux-source-controller, skaffold, tkn, melange, kubescape, cosign, falcoctl-fips, aactl...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: slsa-verifier, chartmuseum, k3s, spire-server-fips, paranoia, bom, ctop, k3d, scorecard, tekton-chains, skaffold, up, kpt, rancher-agent, kubescape, falcoctl-fips, aactl...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubeflow, slsa-verifier, conftest-fips, kubernetes-csi-livenessprobe-fips, plutono-fips, prometheus-adapter-fips, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, kubevela, src, prometheus-blackbox-exporter, buildkitd, dgraph,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubevela, dgraph, cortex, kubeflow, kubescape, src, up, terraform-provider-sendgrid, scorecard, aactl, prometheus-blackbox-exporter, buildkitd, slsa-verifier, spark-operator, k3d...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kubewatch, gomplate, kots, kubernetes-csi-livenessprobe, terraform-provider-azurerm, nats, mc, aactl, skaffold, secrets-store-csi-driver, newrelic-infrastructure-agent, ollama, stakater-reloader, prometheus-blackbox-exporter, rqlite, minio,...