GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kots, kubescape, helm, kaf, frankenphp-8.2, prometheus-mongodb-exporter, istio, trivy-operator-fips, cloud-provider-aws, commercial-grafana, kubernetes, osv-scanner, argo-workflows, calico-fips, gitlab-rails-ce-fips, traefik-fips, frankenphp-8.4...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitea, flux-image-automation-controller, external-dns, kubescape, knative-serving, kots, opentelemetry-collector, prometheus, argocd-image-updater, kine, snyk-cli, flux-source-controller, zot, istio, gitlab-kas, zarf, kaf, vitess, chisel, cilium, k9s, argo-cd,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, external-dns, pulumi-language-dotnet, flux-operator, witness, podman, kine, tekton-chains, flux-source-controller, zot, apko, sops, kaf, k8sgpt, cert-manager, loki, step, trivy-operator, kargo,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: external-dns, teleport, knative-serving, kots, docker-cli-buildx, opentelemetry-collector, prometheus, podman, kine, snyk-cli, zot, istio, gitlab-kas, kaf, buildah, vitess, cilium, argo-cd, cert-manager, loki, containerd, cloud-provider-aws, spire-server, nerdctl,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, external-dns, pulumi-language-dotnet, witness, podman, kine, zot, flux-source-controller, apko, kaf, cert-manager, loki, step, trivy-operator, gptscript, kubescape, argocd-image-updater, grype, istio, zarf, step-issuer, buildah,...

GHSA-J88V-2CHJ-QFWX vulnerabilities

Vulnerabilities for packages: pgtimetable, flyte, caddy, envoy-gateway, ferretdb, teleport, spicedb, amass, sftpgo, rke2-cloud-provider, kubeflow-pipelines, hydra, kine, src, wal-g, cloudprober, keda, seaweedfs, spqr, temporal-server, bento, timescaledb-parallel-copy, grafana-alloy, gitlab-kas,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: atlantis, nri-f5, aws-eks-pod-identity-agent, cortex, nodetaint, dbmate, witness, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, apko, pgpool2exporter, boring-registry, helm-set-status, cloudnative-pg, hugo, k8s-device-plugin...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, external-dns, kubernetes-dns-node-cache, litestream, spicedb, pulumi-language-dotnet, kubernetes-csi-node-driver-registrar, cortex, chartmuseum, vault-env, crossplane-provider-aws-rds, mc, flux-source-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: atlantis, aws-eks-pod-identity-agent, pulumi-language-dotnet, cortex, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, pgpool2exporter, boring-registry, yq, sops, k8s-device-plugin, mkcert, kustomize, k8sgpt, loki,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: atlantis, aws-eks-pod-identity-agent, pulumi-language-dotnet, cortex, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, pgpool2exporter, boring-registry, yq, sops, k8s-device-plugin, mkcert, kustomize, k8sgpt, loki,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: atlantis, aws-eks-pod-identity-agent, pulumi-language-dotnet, cortex, chartmuseum, kubernetes-ingress-defaultbackend, vt-cli, podman, vertical-pod-autoscaler, pgpool2exporter, boring-registry, yq, sops, k8s-device-plugin, mkcert, kustomize, k8sgpt, loki,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, external-dns, kubernetes-dns-node-cache, litestream, spicedb, pulumi-language-dotnet, kubernetes-csi-node-driver-registrar, cortex, chartmuseum, vault-env, crossplane-provider-aws-rds, mc, flux-source-controller,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, cluster-api-gcp-controller, kaniko, logstash-exporter, onepassword-operator, stern, cluster-api-provider-vsphere, yunikorn-web, gitlab-kas-fips, cfssl-fips, nri-elasticsearch-fips, maru, percona-server-mongodb-operator,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cluster-api-gcp-controller, onepassword-operator, cluster-api-provider-vsphere, gitlab-kas-fips, kaf, kubernetes-dashboard-api, tkn, secrets-store-csi-driver-provider-aws, envoy-gateway-fips, oauth2-proxy, cue-fips, packer-fips, prometheus-node-exporter,...

CVE-2024-5469

DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC requests...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-server, temporal-ui-server, temporal...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-ui-server-fips, temporal-server-fips, temporal, temporal-server, temporal-ui-server, temporal-fips...

CVE-2025-1243 vulnerabilities

Vulnerabilities for packages: temporal-server, temporal-ui-server, temporal...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: prometheus-adapter, cert-manager, k3s, buildkitd, up, rancher-webhook, kubevela, metrics-server-fips, kubernetes, kubernetes-fips, kube-oidc-proxy, caddy, rancher-webhook-fips...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, cert-manager, k3s, buildkitd, up, rancher-webhook, kubevela, metrics-server-fips, kubernetes, kubernetes-fips, kube-oidc-proxy, caddy, rancher-webhook-fips...