84 matches found
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: zarf, spire-server, policy-controller, tkn, trivy-operator, flux-source-controller, kubescape, skaffold, neuvector-sigstore-interface, goreleaser, zot, crossplane, kyverno-notation-aws, trivy, aactl, kyverno, falcoctl, tekton-chains...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: zarf, spire-server, policy-controller, tkn, trivy-operator, flux-source-controller, kubescape, skaffold, neuvector-sigstore-interface, goreleaser, zot, crossplane, kyverno-notation-aws, trivy, aactl, kyverno, falcoctl, tekton-chains...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: falcoctl-fips, policy-controller, skaffold-fips, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, trivy, tekton-chains, cloudbeat-fips, crossplane, docker-fips, cosign, kubescape, tkn-fips, cosign-fips, flux-source-controller-fips,...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: falcoctl-fips, policy-controller, skaffold-fips, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, trivy, tekton-chains, cloudbeat-fips, crossplane, docker-fips, cosign, kubescape, tkn-fips, cosign-fips, flux-source-controller-fips,...
Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
MAL-2026-5641 Malicious code in goreleaser-run (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2733e0c086915d44eb8c971575087d9260bf1133d62da63920b578cf7e60c30 Package impersonates the legitimate goreleaser tool name goreleaser-run, homepage spoofed to https://goreleaser.org; goreleaser is not officially...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-2V5F-5R6W-P67R vulnerabilities
Vulnerabilities for packages: goreleaser...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, act, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, act, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, act, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: snyk-cli, kargo, tfsec, flux, external-secrets-operator, kaniko, melange, grype, teleport, flux-image-automation-controller, pulumi-language-java, steampipe, guac, gitaly, grafana-alloy, act, pulumi, kyverno, k9s, bom, trivy-operator, wolfictl, gitea,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: mapotf-fips, kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, osv-scanner, k9s-fips, zarf, packer-fips,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: mapotf-fips, kubevela-fips, argo-cd-fips, steampipe, pulumi-language-yaml, pulumi-language-dotnet, trivy-operator, trivy, external-secrets-operator, grype-db, witness, grafana-alloy-fips, crossplane, gitea, dagger, osv-scanner, k9s-fips, zarf, packer-fips,...
GHSA-GXHX-2686-5H9G vulnerabilities
Vulnerabilities for packages: atlantis, kubernetes-event-exporter, kubewatch, argo-rollouts, kyverno-policy-reporter, goreleaser, bento, argo-events, argo-cd...
GHSA-V8VW-GW5J-W7M6 vulnerabilities
Vulnerabilities for packages: goreleaser...