GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: grype, teleport, syft, flux-source-controller, kubescape, bom, gitlab-runner, melange, chezmoi, xeol, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, rancher-fleet, gitsign, nuclei, gitaly, gitea, grafana-alloy, crossplane,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: grype, teleport, syft, flux-source-controller, kubescape, bom, gitlab-runner, melange, chezmoi, xeol, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, rancher-fleet, gitsign, nuclei, gitaly, gitea, grafana-alloy, crossplane,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, cilium, oauth2-proxy, cluster-api-aws-controller, swagger, redka, authentik, crossplane-provider-aws-sns-fips, qemu-guesthelper, nginx-prometheus-exporter-fips, crossplane-provider-aws-cloudwatchlogs-fips, karma-fips, kafka-proxy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, cilium, minify-fips, oauth2-proxy, cluster-api-aws-controller, container-object-storage-interface-fips, swagger, prometheus-nats-exporter-fips, redka, authentik, crossplane-provider-aws-sns-fips, openbao-k8s, jaeger,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: kubescape, pulumi, fulcio, weaviate, kyverno-notation-aws, gatus, spire-controller-manager, boring-registry, grafana-mimir, istio, flyte, rook, argo-workflows, step, vexctl, sops, splunk-otel-collector, k3s, distribution, gomplate, sftpgo-plugin-kms, skopeo,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: istio-pilot-agent, temporal-ui-server-fips, cilium, oauth2-proxy, flux-source-controller, weaviate, trivy-fips, melange, prometheus-podman-exporter, splunk-otel-collector, podman, grafana-alloy-fips, spiffe-helper, k3s, zarf, tekton-chains, openbao, boring-registry,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: kubescape, pulumi, fulcio, weaviate, kyverno-notation-aws, gatus, spire-controller-manager, boring-registry, grafana-mimir, istio, flyte, rook, argo-workflows, step, vexctl, sops, splunk-otel-collector, k3s, distribution, gomplate, sftpgo-plugin-kms, skopeo,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: goreleaser, flux-source-controller, crossplane-provider-family-azure, kubescape, crossplane-provider-azure-managedidentity, ksops, step-ca, gh, crossplane-provider-azure-sql, opentelemetry-collector-contrib, pulumi, fulcio, flux, kubernetes-event-exporter, rekor,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-source-controller, crossplane-provider-family-azure, kubescape, crossplane-provider-azure-managedidentity, ksops, step-ca, gh, crossplane-provider-azure-sql, opentelemetry-collector-contrib, pulumi, fulcio, flux, kubernetes-event-exporter, rekor,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubevela, prometheus-blackbox-exporter, aws-efs-csi-driver, kubeflow-katib, kind, oauth2-proxy, nats, mc, chartmuseum, flux-source-controller, git-lfs, weaviate, flux, dive, kube-logging-logging-operator, prometheus-alertmanager, k3s, metacontroller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: grype, kubescape, spark-operator, pulumi, nri-prometheus, terraform-provider-aws, weaviate, terraform, conftest, kind, metacontroller, src, buildkitd, gomplate, gitness, cue, bom, dgraph, ip-masq-agent, git-lfs, flux-kustomize-controller, flux-helm-controller, rqlite...