CVE-2025-47914 vulnerabilities

Vulnerabilities for packages: helm-docs, goreleaser, gogatekeeper, gptscript, azure-ipam, terraform-provider-tls, crossplane-provider-family-aws, k6, spqr, aactl, crossplane-provider-aws-sqs, headlamp, kapp-controller, promxy, harbor-registry, mods, opa, crossplane-provider-aws-cloudformation,...

CVE-2025-58181 vulnerabilities

Vulnerabilities for packages: helm-docs, goreleaser, gogatekeeper, gptscript, azure-ipam, crossplane-provider-family-aws, k6, aactl, crossplane-provider-aws-sqs, headlamp, kapp-controller, promxy, harbor-registry, mods, opa, crossplane-provider-aws-cloudformation, kuma, argo-rollouts, caddy,...

GHSA-F6X5-JH6R-WRFV vulnerabilities

Vulnerabilities for packages: helm-docs, goreleaser, gogatekeeper, gptscript, azure-ipam, terraform-provider-tls, crossplane-provider-family-aws, k6, spqr, aactl, crossplane-provider-aws-sqs, headlamp, kapp-controller, promxy, harbor-registry, mods, opa, crossplane-provider-aws-cloudformation,...

GHSA-J5W8-Q4QC-RX2X vulnerabilities

Vulnerabilities for packages: helm-docs, goreleaser, gogatekeeper, gptscript, azure-ipam, crossplane-provider-family-aws, k6, aactl, crossplane-provider-aws-sqs, headlamp, kapp-controller, promxy, harbor-registry, mods, opa, crossplane-provider-aws-cloudformation, kuma, argo-rollouts, caddy,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, skopeo-fips, aws-sigv4-proxy-fips, argo-workflows, openbao-k8s, cerbos, kube-metrics-adapter, k3d, aws-load-balancer-controller, kubernetes-dashboard-web, ratify, cert-manager-csi-driver, vault-secrets-operator, newrelic-infra-operator...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux, pluto, tw, helm-docs, eksctl, cert-manager-cmctl, trivy, helm-push, k8ssandra-client, chartmuseum, k9s, kots, zot, flux-source-controller, zarf, helm-operator, kubescape, flux-helm-controller, chart-testing, cluster-api-helm-controller, cilium-cli...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: rancher-helm, flux, pluto, tw, helm-docs, eksctl, cert-manager-cmctl, trivy, helm-push, k8ssandra-client, chartmuseum, k9s, kots, zot, flux-source-controller, zarf, helm-operator, kubescape, flux-helm-controller, chart-testing, cluster-api-helm-controller, cilium-cli...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux, pluto, tw, helm-docs, eksctl, cert-manager-cmctl, trivy, helm-push, k8ssandra-client, chartmuseum, k9s, kots, zot, flux-source-controller, zarf, helm-operator, kubescape, flux-helm-controller, chart-testing, cluster-api-helm-controller, cilium-cli...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux, pluto, tw, helm-docs, eksctl, cert-manager-cmctl, trivy, helm-push, k8ssandra-client, chartmuseum, k9s, kots, zot, flux-source-controller, zarf, helm-operator, kubescape, flux-helm-controller, chart-testing, cluster-api-helm-controller, cilium-cli...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: xeol, ctop, eksctl, cert-manager-cmctl, nerdctl, fuse-overlayfs-snapshotter, helm-push, docker, grype, trivy, osv-scanner, k8ssandra-client, chartmuseum, syft, envoy-gateway, kots, docker-compose, neuvector-scanner, linkerd2, rancher-fleet, zot, flux-source-controlle...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: beats, buildkitd-fips, envoy-gateway, rancher-agent, docker-cli-buildx, neuvector, kaniko, linkerd2, opa-fips-envoy, opa-envoy, kaniko-fips, envoy-gateway-fips, rancher-fleet-fips, cluster-api-helm-controller-fips, kots, helm-fips, buildkitd, neuvector-fips,...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: beats, buildkitd-fips, envoy-gateway, rancher-agent, docker-cli-buildx, neuvector, kaniko, linkerd2, opa-fips-envoy, opa-envoy, kaniko-fips, envoy-gateway-fips, rancher-fleet-fips, cluster-api-helm-controller-fips, kots, helm-fips, buildkitd, neuvector-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, cortex, bank-vaults, hugo-extended, sqlpad, goreleaser, grafana-mimir, trivy, boring-registry, flux-image-reflector-controller, chezmoi, argo-workflows, rekor, restic, tkn, flux-kustomize-controller, opentelemetry-collector-contrib, argo-events, thanos,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: helm-operator, zarf, trivy, cilium-cli, k8sgpt, kubevela, zot, up, eksctl, helm-push, flux-source-controller, k9s, kubescape, kots, chartmuseum, flux-helm-controller...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: k9s, flux-source-controller, kubevela, kots, zarf, eksctl, kubescape, up, cilium-cli, helm-operator, trivy, helm-push, flux-helm-controller, zot, k8sgpt, chartmuseum...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: helm-operator, zarf, trivy, cilium-cli, k8sgpt, kubevela, zot, up, eksctl, helm-push, flux-source-controller, k9s, kubescape, kots, chartmuseum, flux-helm-controller...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: spire-server, skaffold, policy-controller, cosign, slsa-verifier, tekton-chains, flux-source-controller, ko, kubescape, apko, tkn, melange, aactl, falcoctl-fips, spire-server-fips...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: spire-server, skaffold, policy-controller, cosign, slsa-verifier, tekton-chains, flux-source-controller, ko, kubescape, apko, tkn, melange, aactl, falcoctl-fips, spire-server-fips...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: ctop, scorecard, k3d, skaffold, slsa-verifier, tekton-chains, bom, up, kpt, k3s, kubescape, paranoia, chartmuseum, aactl, falcoctl-fips, spire-server-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, vault-csi-provider, dgraph, kube-oidc-proxy, metrics-server-fips, kubernetes-csi-livenessprobe, falcoctl-fips, kubeflow-fips, buildkitd, src, cortex, k3d, kubevela, slsa-verifier, dynamic-localpv-provisioner-fips, kubeflow,...