GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, gomplate, trivy-operator, rancher-fleet, teleport, kubescape, k9s, goreleaser, wolfictl, scorecard, trufflehog, nuclei, guac, pulumi-language-yaml, cerbos, melange, pulumi-language-java, zot, trivy, act, argo-events, gitsign, syft, argo-cd,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, gomplate, trivy-operator, rancher-fleet, teleport, kubescape, k9s, goreleaser, wolfictl, scorecard, trufflehog, nuclei, guac, pulumi-language-yaml, cerbos, melange, pulumi-language-java, zot, trivy, act, argo-events, gitsign, syft, argo-cd,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, gomplate, trivy-operator, rancher-fleet, teleport, kubescape, k9s, goreleaser, wolfictl, scorecard, trufflehog, nuclei, guac, pulumi-language-yaml, cerbos, melange, pulumi-language-java, zot, trivy, act, argo-events, gitsign, syft, argo-cd,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, gomplate, trivy-operator, rancher-fleet, teleport, kubescape, k9s, goreleaser, wolfictl, scorecard, trufflehog, nuclei, guac, pulumi-language-yaml, cerbos, melange, pulumi-language-java, zot, trivy, act, argo-events, gitsign, syft, argo-cd,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, gomplate, trivy-operator, rancher-fleet, teleport, kubescape, k9s, goreleaser, wolfictl, scorecard, trufflehog, nuclei, guac, pulumi-language-yaml, cerbos, melange, pulumi-language-java, zot, trivy, act, argo-events, gitsign, syft, argo-cd,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: osv-scanner, crossplane, gomplate, trivy-operator, rancher-fleet, teleport, kubescape, k9s, goreleaser, wolfictl, scorecard, trufflehog, nuclei, guac, pulumi-language-yaml, cerbos, melange, pulumi-language-java, zot, trivy, act, argo-events, gitsign, syft, argo-cd,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: spire-server, rekor, crossplane, ratify, ko, docker, slsa-verifier, trivy-operator, teleport, kubescape, goreleaser, guac, aactl, zot, kyverno-notation-aws, tkn, trivy, falcoctl, gitsign, buildkitd, tflint, dagger, policy-controller, docker-compose,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: ratify, docker, trivy, ratify-fips, cloudbeat, zot, cg, neuvector-sigstore-interface, image-factory, gitlab-runner-fips, image-factory-fips, kyverno-fips, spire-server-fips, tekton-chains-fips, policy-controller, chainloop-cli,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

CVE-2026-22741

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: ratify, rancher-webhook, sftpgo-plugin-auth, teleport, seaweedfs, cert-manager, trufflehog, nuclei, grafana, spqr, cert-manager-cmctl, telegraf, yunikorn-k8shim, juicefs, kyverno-notation-aws, zot, harbor, percona-server-mongodb-operator, frp, openbao, xeol, terrafor...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: ratify, rancher-webhook, sftpgo-plugin-auth, teleport, seaweedfs, cert-manager, trufflehog, nuclei, grafana, spqr, cert-manager-cmctl, telegraf, yunikorn-k8shim, juicefs, kyverno-notation-aws, zot, harbor, percona-server-mongodb-operator, frp, openbao, xeol, terrafor...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: commercial-grafana, cert-manager-openshift-routes, gitea-fips, ratify, cert-manager-cmctl-fips, seaweedfs-rocksdb-fips, terraform, versitygw, ratify-fips, cloudbeat, zot, yunikorn-k8shim-fips, beats, gitlab-runner-fips, harbor-fips, kyverno-fips,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: commercial-grafana, cert-manager-openshift-routes, gitea-fips, ratify, cert-manager-cmctl-fips, seaweedfs-rocksdb-fips, terraform, versitygw, ratify-fips, cloudbeat, zot, yunikorn-k8shim-fips, beats, gitlab-runner-fips, harbor-fips, kyverno-fips,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitea-fips, syft-fips, trivy, cloudbeat, zot, cg, snyk-cli, argocd-image-updater, gitlab-runner-fips, steampipe, kyverno-fips, cerbos, mapotf, external-secrets-operator, google-osconfig-agent, terragrunt, src-fingerprint, k9s, chainloop-cli,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane, ratify, ko, docker, slsa-verifier, trivy-operator, teleport, kubescape, goreleaser, aactl, zot, kyverno-notation-aws, tkn, trivy, falcoctl, gitsign, buildkitd, tflint, policy-controller, neuvector-sigstore-interface, zarf, vexctl, witness,...