GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: mapotf-fips, kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, osv-scanner, k9s-fips, zarf, packer-fips,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: mapotf-fips, kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, osv-scanner, k9s-fips, zarf, packer-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: mapotf-fips, kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, osv-scanner, k9s-fips, zarf, packer-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: mapotf-fips, kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, flux-source-controller-fips, commercial-chainloop-cl...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, crossplane-provider-aws-acm-fips, task, velero-plugin-for-aws, cluster-api-aws-controller, loki-fips, crossplane-provider-aws-ec2, steampipe, crossplane-provider-aws-sns, bank-vaults-fips, crossplane-provider-aws-servicediscovery-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: dkron-fips, keda-fips, temporal, external-secrets-operator, gotrue-fips, gitlab-kas, crossplane, dagger, cosign-fips, livekit-server-fips, seaweedfs-rocksdb-fips, slsa-verifier, grpc-health-probe, commercial-chainloop-backend, ko-fips, packer-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, flux-source-controller-fips, commercial-chainloop-cli, osv-scanne...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, flux-source-controller-fips, commercial-chainloop-cli, osv-scanne...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, sealed-secrets, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, crossplane-provider-kubernetes-fips, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, cluster-api, external-secrets-operator,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: kargo, nerdctl, grafana-alloy, pulumi, sops, dagdotdev, aactl, zarf, dagger, kube-rbac-proxy, hydra, trivy, cosign, buildah, argo-workflows, terragrunt, argocd-image-updater, apko, distribution, vexctl, fulcio, grafana-mimir, melange, kyverno-policy-reporter,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: policy-controller, containerd, fulcio-fips, argo-cd-fips, opentelemetry-collector-contrib-fips, harbor-fips, steampipe, bank-vaults-fips, kyverno-policy-reporter, step-ca, trivy, temporal, prometheus-podman-exporter, k3s, undock, grafana-alloy-fips, dgraph,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: kargo, nerdctl, grafana-alloy, pulumi, sops, dagdotdev, aactl, zarf, dagger, kube-rbac-proxy, hydra, trivy, cosign, buildah, argo-workflows, terragrunt, argocd-image-updater, apko, distribution, vexctl, fulcio, grafana-mimir, melange, kyverno-policy-reporter,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, kubernetes-event-exporter, flux, skopeo, timestamp-authority, gh, crossplane-provider-azure-authorization, flux-image-automation-controller, neuvector-sigstore-interface, rook, sigstore-scaffolding, glab, flux-image-reflector-controller,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: snyk-cli, kargo, kubernetes-event-exporter, flux, skopeo, timestamp-authority, gh, crossplane-provider-azure-authorization, flux-image-automation-controller, neuvector-sigstore-interface, rook, sigstore-scaffolding, glab, flux-image-reflector-controller,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: gitness, atlantis, flux-helm-controller, aws-ebs-csi-driver, k8sgpt-operator, bank-vaults-fips, up, kiam, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, prometheus-postgres-exporter, pulumi-language-dotnet, k3s, helm, newrelic-infrastructure-agent,...