MAL-2025-19005 Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: trino, podman, cargobump, paranoia, git-credential-oauth, trivy-operator, step, aws-flb-cloudwatch, azure-ipam, swagger, witness, pgpool2exporter, k8s-device-plugin, kubernetes-csi-driver-nfs, trillian, portieris, eksctl, extism, src, rancher-loglevel, kapp-controlle...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: redka, fluxcd-kustomize-mutating-webhook, nri-nagios, postgres-operator-fips, newrelic-fluent-bit-output, kube-logging-logging-operator, nri-memcached, terraform-provider-kubernetes-fips, rancher-security-scan-fips, cilium-certgen, rancher-system-agent, trufflehog,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: kargo, kots, linkerd2, k9s, flux-helm-controller, zot, flux-source-controller, cilium-cli, k8sgpt, helm-docs, chart-testing, rancher-fleet, k8ssandra-client, pluto, chartmuseum, helm-push, envoy-gateway, rancher-helm, cerbos, tw, helm-operator,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: kargo, kots, linkerd2, k9s, flux-helm-controller, zot, flux-source-controller, cilium-cli, k8sgpt, helm-docs, chart-testing, rancher-fleet, k8ssandra-client, pluto, chartmuseum, helm-push, envoy-gateway, rancher-helm, cerbos, tw, helm-operator,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: cerbos, trivy-operator-fips, linkerd2-fips, consul-k8s-fips, helm-operator, istio, helm-operator-fips, kuma, rancher-fleet, helm-docs, helm-push, tw, flux, flux-source-controller, zarf, flux-fips, teleport, trivy-fips, harbor, k9s, envoy-gateway, kargo,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: cerbos, trivy-operator-fips, linkerd2-fips, consul-k8s-fips, helm-operator, istio, helm-operator-fips, kuma, rancher-fleet, helm-docs, helm-push, tw, flux, flux-source-controller, zarf, flux-fips, teleport, trivy-fips, harbor, k9s, envoy-gateway, kargo,...

CVE-2022-39272

Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interv...

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2. A patched version of the package is available...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: kots, k9s, flux-helm-controller, zot, flux-source-controller, cilium-cli, helm-docs, chart-testing, k8ssandra-client, pluto, flux, chartmuseum, helm-push, rancher-helm, tw, helm-operator, cluster-api-helm-controller, cert-manager-cmctl, zarf, eksctl, kubescape, trivy...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: kots, k9s, flux-helm-controller, zot, flux-source-controller, cilium-cli, helm-docs, chart-testing, k8ssandra-client, pluto, flux, chartmuseum, helm-push, rancher-helm, tw, helm-operator, cluster-api-helm-controller, cert-manager-cmctl, zarf, eksctl, kubescape, trivy...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: kots, k9s, flux-helm-controller, zot, flux-source-controller, cilium-cli, helm-docs, chart-testing, k8ssandra-client, pluto, flux, chartmuseum, helm-push, rancher-helm, tw, helm-operator, cluster-api-helm-controller, cert-manager-cmctl, zarf, eksctl, kubescape, trivy...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: kots, k9s, flux-helm-controller, zot, flux-source-controller, cilium-cli, helm-docs, chart-testing, k8ssandra-client, pluto, flux, chartmuseum, helm-push, rancher-helm, tw, helm-operator, cluster-api-helm-controller, cert-manager-cmctl, zarf, eksctl, kubescape, trivy...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, helm-operator, helm-operator-fips, kuma, helm-docs, helm-push, tw, flux, flux-source-controller, zarf, flux-fips, trivy-fips, harbor, k9s, cluster-api-helm-controller, chart-testing-fips, k8ssandra-client, chart-testing, cilium-cli,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, helm-operator, helm-operator-fips, kuma, helm-docs, helm-push, tw, flux, flux-source-controller, zarf, flux-fips, trivy-fips, harbor, k9s, cluster-api-helm-controller, chart-testing-fips, k8ssandra-client, chart-testing, cilium-cli,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, helm-operator, helm-operator-fips, kuma, helm-docs, helm-push, tw, flux, flux-source-controller, zarf, flux-fips, trivy-fips, harbor, k9s, cluster-api-helm-controller, chart-testing-fips, k8ssandra-client, chart-testing, cilium-cli,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, helm-operator, helm-operator-fips, kuma, helm-docs, helm-push, tw, flux, flux-source-controller, zarf, flux-fips, trivy-fips, harbor, k9s, cluster-api-helm-controller, chart-testing-fips, k8ssandra-client, chart-testing, cilium-cli,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: go-licenses, trino, cargobump, paranoia, wireguard-go, git-credential-oauth, step, aws-flb-cloudwatch, swagger, wuzz, kubernetes-csi-driver-nfs, cadvisor, maru, gostatsd, extism, git-lfs, lvm-driver, rancher-loglevel, secrets-store-csi-driver-provider-aws,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: go-licenses, trino, cargobump, paranoia, wireguard-go, git-credential-oauth, step, aws-flb-cloudwatch, swagger, wuzz, kubernetes-csi-driver-nfs, cadvisor, maru, gostatsd, extism, git-lfs, lvm-driver, rancher-loglevel, secrets-store-csi-driver-provider-aws,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, harbor-registry-fips, redka, nri-nagios, crossplane-provider-keycloak-fips, postgres-operator-fips, dagdotdev, newrelic-fluent-bit-output, kube-logging-logging-operator, nginx-prometheus-exporter-fips, nri-memcached,...