GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: kiali, prometheus, kubernetes, k9s, pinact, sealed-secrets, crossplane-provider-aws-route53, crossplane-provider-azure-authorization, cluster-autoscaler, cilium-certgen, karpenter, vault-k8s, contour, vertical-pod-autoscaler, crossplane-provider-aws-cloudformation,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: kiali, prometheus, kubernetes, k9s, pinact, sealed-secrets, crossplane-provider-aws-route53, crossplane-provider-azure-authorization, cluster-autoscaler, cilium-certgen, karpenter, vault-k8s, contour, vertical-pod-autoscaler, crossplane-provider-aws-cloudformation,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: speedtest-go, kiali, migrate, prometheus, azcopy, kubernetes, k9s, dapr, pinact, sealed-secrets, conjur-cli, crossplane-provider-aws-route53, crossplane-provider-azure-authorization, cluster-autoscaler, cilium-certgen, karpenter, kubo, terragrunt, buildah, vault-k8s,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: nri-redis, speedtest-go, kiali, migrate, prometheus, azcopy, kubernetes, k9s, dapr, pinact, sealed-secrets, conjur-cli, crossplane-provider-aws-route53, crossplane-provider-azure-authorization, cluster-autoscaler, cilium-certgen, karpenter, kubo, terragrunt, buildah,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: speedtest-go, kiali, migrate, prometheus, azcopy, kubernetes, k9s, dapr, pinact, sealed-secrets, conjur-cli, crossplane-provider-aws-route53, crossplane-provider-azure-authorization, cluster-autoscaler, cilium-certgen, karpenter, kubo, terragrunt, buildah, vault-k8s,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: nri-redis, speedtest-go, kiali, migrate, prometheus, azcopy, kubernetes, k9s, dapr, pinact, sealed-secrets, conjur-cli, crossplane-provider-aws-route53, crossplane-provider-azure-authorization, cluster-autoscaler, cilium-certgen, karpenter, kubo, terragrunt, buildah,...

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, rancher-agent, crossplane-provider-aws-lexmodels, crossplane-provider-aws-lambda-fips, virt-api, crossplane-provider-azure-resources, elastic-agent, crossplane-provider-aws-wafv2-fips, argo-cd-fips, traefik-fips, tigera-operator-fips,...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, rancher-agent, crossplane-provider-aws-lexmodels, crossplane-provider-aws-lambda-fips, virt-api, crossplane-provider-azure-resources, elastic-agent, crossplane-provider-aws-wafv2-fips, argo-cd-fips, traefik-fips, tigera-operator-fips,...

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, sftpgo-plugin-auth, gitlab-rails-ce, cerbos-fips, delve, jitsucom-bulker, rancher-agent, gke-deploy, memcached-exporter-fips, crossplane-provider-aws-lexmodels, crossplane-provider-aws-lambda-fips, virt-api, crossplane-provider-azure-resources,...

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: cloudflared-fips, sftpgo-plugin-auth, gitlab-rails-ce, cerbos-fips, delve, jitsucom-bulker, rancher-agent, gke-deploy, memcached-exporter-fips, crossplane-provider-aws-lexmodels, crossplane-provider-aws-lambda-fips, virt-api, crossplane-provider-azure-resources,...

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, sftpgo-plugin-auth, gitlab-rails-ce, cerbos-fips, delve, jitsucom-bulker, rancher-agent, gke-deploy, memcached-exporter-fips, crossplane-provider-aws-lexmodels, crossplane-provider-aws-lambda-fips, virt-api, crossplane-provider-azure-resources,...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, sftpgo-plugin-auth, gitlab-rails-ce, cerbos-fips, delve, jitsucom-bulker, rancher-agent, gke-deploy, memcached-exporter-fips, crossplane-provider-aws-lexmodels, crossplane-provider-aws-lambda-fips, virt-api, crossplane-provider-azure-resources,...

GHSA-H9Q6-HC68-35RP vulnerabilities

Vulnerabilities for packages: flyte...

CVE-2026-32284 vulnerabilities

Vulnerabilities for packages: flyte...

GHSA-H9Q6-HC68-35RP vulnerabilities

Vulnerabilities for packages: flyte...

CVE-2026-32284 vulnerabilities

Vulnerabilities for packages: flyte...

Malicious code in test-mlw2-price-flyte (npm)

The package test-mlw2-price-flyte was found to contain malicious code...

MAL-2025-36031 Malicious code in test-mlw2-price-flyte (npm)

The package test-mlw2-price-flyte was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: supercronic, direnv, databricks-cli-fips, kubescape-operator-fips, cerbos-fips, jitsucom-bulker, rancher-agent, eck-operator, apko-fips, argo-cd-fips, eksctl, ini-file, qemu-guesthelper, tigera-operator-fips, polaris-fips, cluster-api-ipam-provider-in-cluster,...

CVE-2022-39273

FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication easier for Flyte administrators, the...