GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone, kubevela-fips, containerd, argo-cd-fips, harbor-fips, keda-fips, trivy-operator, trivy, cloud-provider-aws, tigera-operator, k3s, gitlab-kas, helm, gitea, nerdctl, seaweedfs-rocksdb-fips, minio-fips, flux-source-controller-fips, terraform, reports-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kargo, nerdctl, docker, kine, pulumi-language-java, age, pulumi, rootlesskit, sops, flux-notification-controller, aactl, terraform-provider-azurerm, zarf, dagger, slsa-verifier, chisel, docker-machine-driver-harvester, trivy, cosign, pulumi-language-yaml, buildah,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: snyk-cli, flux, fscrypt, nerdctl, kubernetes-dashboard, kaf, kine, helm, flux-image-automation-controller, minio, containerd, kyverno, k9s, cloud-provider-aws, trivy-operator, cilium-cli, gitea, gitlab-kas, mattermost, skaffold, rancher, aactl, zot, cilium, zarf, k3s...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: nerdctl, kine, pulumi-language-java, pulumi, aactl, zarf, dagger, docker-machine-driver-harvester, trivy, pulumi-language-yaml, buildah, nuclei, terragrunt, argocd-image-updater, apko, kubernetes, external-secrets-operator, melange, grype, helm, containerd, kyverno,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: snyk-cli, flux, fscrypt, nerdctl, kubernetes-dashboard, kaf, kine, helm, minio, containerd, kyverno, cloud-provider-aws, cilium-cli, gitlab-kas, mattermost, rancher, aactl, zot, cilium, k3s, opentelemetry-collector, kots, istio, telegraf, prometheus-operator,...

GHSA-J88V-2CHJ-QFWX vulnerabilities

Vulnerabilities for packages: ferretdb, step-issuer, teleport, kine, steampipe, grafana, openfga, gitaly, grafana-alloy, sftpgo-plugin-eventstore, step, step-ca, temporal, spqr, gitness, kubeflow-pipelines, envoy-gateway, src, rke2-cloud-provider, azure-service-operator, jitsucom-bulker,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: incert, nerdctl, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, aws-efs-csi-driver, flux-notification-controller, aws-sigv4-proxy, cerbos, k8ssandra-client, chisel, chartmuseum, neuvector-dbgen, trivy, doppler-kubernetes-operator, nuclei, redpanda,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, amazon-cloudwatch-agent-operator, pulumi-language-java, newrelic-infrastructure-agent, flux-image-reflector-controller, pulumi, terraform-provider-pagerduty, spqr, volume-modifier-for-k8s, src,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, amazon-cloudwatch-agent-operator, pulumi-language-java, newrelic-infrastructure-agent, flux-image-reflector-controller, pulumi, terraform-provider-pagerduty, spqr, volume-modifier-for-k8s, src,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, opentelemetry-collector-contrib, sops, aws-otel-collector, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbos, zarf, kube-rbac-proxy...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, opentelemetry-collector-contrib, sops, aws-otel-collector, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbos, zarf, kube-rbac-proxy...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, mockgen, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, opentelemetry-collector-contrib, sops, aws-otel-collector, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbos, zarf,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, sealed-secrets, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, cluster-api, external-secrets-operator,...

CVE-2024-5469

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-server, temporal, temporal-ui-server...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal, temporal-ui-server-fips, temporal-server, temporal-server-fips, temporal-ui-server, temporal-fips...

CVE-2025-1243 vulnerabilities

Vulnerabilities for packages: temporal-server, temporal, temporal-ui-server...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: buildkitd, rancher-webhook-fips, k3s, kube-oidc-proxy, kubevela, kubernetes-fips, rancher-webhook, metrics-server-fips, up, caddy, prometheus-adapter, kubernetes...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: buildkitd, rancher-webhook-fips, k3s, kube-oidc-proxy, kubevela, kubernetes-fips, rancher-webhook, metrics-server-fips, up, caddy, prometheus-adapter, kubernetes...