CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, zot, crossplane-provider-azure-storage, k3s, terraform-provider-acme, kubernetes, external-secrets-operator, glab, opentelemetry-collector, hydra, traefik, grafana-pyroscope, crossplane-provider-azure-authorization,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, zot, crossplane-provider-azure-storage, k3s, terraform-provider-acme, kubernetes, external-secrets-operator, glab, opentelemetry-collector, hydra, traefik, grafana-pyroscope, crossplane-provider-azure-authorization,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, zot, crossplane-provider-azure-storage, k3s, terraform-provider-acme, kubernetes, external-secrets-operator, glab, opentelemetry-collector, hydra, traefik, grafana-pyroscope, crossplane-provider-azure-authorization,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, zot, crossplane-provider-azure-storage, k3s, terraform-provider-acme, kubernetes, external-secrets-operator, glab, opentelemetry-collector, hydra, traefik, grafana-pyroscope, crossplane-provider-azure-authorization,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, zot, crossplane-provider-azure-storage, k3s, terraform-provider-acme, kubernetes, external-secrets-operator, glab, opentelemetry-collector, hydra, traefik, grafana-pyroscope, crossplane-provider-azure-authorization,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, zot, crossplane-provider-azure-storage, k3s, terraform-provider-acme, kubernetes, external-secrets-operator, glab, opentelemetry-collector, hydra, traefik, grafana-pyroscope, crossplane-provider-azure-authorization,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, trivy-operator, pulumi, kubescape, act, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, trufflehog, wolfictl, k9s, gitsign, scorecard, steampipe,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, trivy-operator, pulumi, kubescape, act, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, trufflehog, wolfictl, k9s, gitsign, scorecard, steampipe,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, trivy-operator, pulumi, kubescape, act, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, trufflehog, wolfictl, k9s, gitsign, scorecard, steampipe,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, trivy-operator, pulumi, kubescape, act, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, trufflehog, wolfictl, k9s, gitsign, scorecard, steampipe,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitea, trufflehog-fips, flux-fips, argo-workflows, bom, skaffold, skaffold-fips, kubevela, xeol, steampipe, gitlab-rails-ce, rancher-fleet-fips, chainctl, xeol-fips, zarf, trivy-fips, kubescape-server-fips, pulumi-language-java, kubescape,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitea, trufflehog-fips, flux-fips, argo-workflows, bom, skaffold, skaffold-fips, kubevela, xeol, steampipe, gitlab-rails-ce, rancher-fleet-fips, chainctl, xeol-fips, zarf, trivy-fips, kubescape-server-fips, pulumi-language-java, kubescape,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitea, trufflehog-fips, flux-fips, argo-workflows, bom, skaffold, skaffold-fips, kubevela, xeol, steampipe, gitlab-rails-ce, rancher-fleet-fips, chainctl, xeol-fips, zarf, trivy-fips, kubescape-server-fips, pulumi-language-java, kubescape,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, flux-source-controller, trivy-operator, pulumi, kubescape, act, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, trufflehog, wolfictl, k9s, gitsign, scorecard,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, flux-source-controller, trivy-operator, pulumi, kubescape, act, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, trufflehog, wolfictl, k9s, gitsign, scorecard,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitea, trufflehog-fips, flux-fips, argo-workflows, bom, skaffold, skaffold-fips, kubevela, xeol, steampipe, gitlab-rails-ce, rancher-fleet-fips, chainctl, xeol-fips, zarf, trivy-fips, kubescape-server-fips, pulumi-language-java,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: docker, zot, flux-source-controller, trivy-operator, falcoctl, kubescape, kyverno-notation-aws, buildkitd, trivy, gh, cosign, rekor, gitsign, vexctl, zarf, policy-controller, neuvector-sigstore-interface, bom, crossplane, ko, kyverno, teleport, gitlab-runner, dagger,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, image-factory, kyverno-policy-reporter-plugins-kyverno, flux-source-controller-fips, bom, skaffold, skaffold-fips, chainctl, tekton-chains, zarf, trivy-fips, kubescape-server-fips, flux-source-controller, kubescape, docker, kyverno-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitea, trufflehog-fips, flux-source-controller-fips, flux-fips, argo-workflows, bom, skaffold, skaffold-fips, kubevela, xeol, steampipe, gitlab-rails-ce, rancher-fleet-fips, chainctl, xeol-fips, zarf, trivy-fips, kubescape-server-fips,...

CVE-2026-22741

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...