GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea-fips, sftpgo, gitea...

GO-2022-0470 vulnerabilities

Vulnerabilities for packages: grafana, gitea-fips, gitness, mattermost-fips, gitea...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: mattermost, k9s-fips, kubescape-server-fips, cloudbeat, elastic-agent-fips, drone, cert-manager, chisel, commercial-grafana, kubernetes-fips, zarf-fips, tekton-pipelines-fips, tigera-operator, zarf, tekton-pipelines, gatekeeper, vault, gatekeeper-fips, kots, k9s,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: mattermost, k9s-fips, kubescape-server-fips, cloudbeat, elastic-agent-fips, drone, cert-manager, gh, chisel, commercial-grafana, prometheus-podman-exporter, kubernetes-fips, gomplate-fips, witness, peerdb-flow, pulumi, chainctl-fips, zarf-fips, tekton-pipelines-fips,...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, gomplate-fips, witness, pulumi, chainctl-fips, zarf-fips, terragrunt, act, grafana-alloy, zarf, src-fingerprint-fips, crossplane-fips, wolfictl, kots, k9s, pulumi-language-dotnet, pulumi-language-yaml, pulumi-language-java,...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, tkn, gh, slsa-verifier, net-kourier, k8s-device-plugin, witness, hubble, ipfs-cluster, envconsul-fips, qemu-guesthelper...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, tkn, gh, slsa-verifier, net-kourier, k8s-device-plugin, witness, hubble, ipfs-cluster, envconsul-fips, qemu-guesthelper...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips, tkn, gh, slsa-verifier,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, gitleaks, commercial-chainloop-backend, buildkite-agent, cluster-api-provider-vsphere, docker-compose-fips, vault-secrets-operator, kube-fluentd-operator, zabbix-agent2, cadence-fips, crossplane-provider-aws-ecs, terraform-provider-azuread-fips...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gitleaks, cluster-api-provider-vsphere, cargobump, virt-handler-fips, cadence-fips, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, chisel, amazon-cloudwatch-agent-fips, hubble, ucd, local-path-provisioner-fips, nri-elasticsearch,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, gomplate-fips, witness, pulumi, chainctl-fips, zarf-fips, grafana-alloy, zarf, src-fingerprint-fips, crossplane-fips, wolfictl, kots, k9s, pulumi-language-dotnet, pulumi-language-yaml, nfpm, pulumi-language-java, zot,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, gomplate-fips, witness, pulumi, chainctl-fips, zarf-fips, grafana-alloy, zarf, src-fingerprint-fips, crossplane-fips, wolfictl, kots, k9s, pulumi-language-dotnet, pulumi-language-yaml, nfpm, pulumi-language-java, zot,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, cloudbeat, gomplate-fips, witness, pulumi, chainctl-fips, zarf-fips, grafana-alloy, zarf, src-fingerprint-fips, crossplane-fips, wolfictl, kots, k9s, pulumi-language-dotnet, pulumi-language-yaml, nfpm, pulumi-language-java, zot,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: k9s-fips, kubescape-server-fips, crossplane-provider-aws-s3, cloudbeat, crossplane-provider-aws-lambda, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, kyverno-policy-reporter-plugins-kyverno-fips, crossplane-provider-aws-efs-fips,...