109 matches found
hoppr-cop
Hoppr-Cop For Policing Your SBOM Vulnerabilities Hoppr Cop is a cli and python library that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials SBOM by aggregating data from multiple vulnerability databases. This project is offered as part of the hoppr...
grype
Grype 一款用于容器镜像和文件系统的漏洞扫描器。 特性 扫描容器镜像 、文件系统 和SBOM 以发现已知漏洞（查看文档了解完整的支持的扫描目标列表） 支持主流操作系统软件包生态系统（Alpine、Debian、Ubuntu、RHEL、Oracle Linux、Amazon Linux 以及更多） 支持特定语言的软件包（Ruby、Java、JavaScript、Python、.NET、Go、PHP、Rust 以及更多） 支持 Docker、OCI 和 Singularity 镜像格式 通过 EPSS 、KEV 和 风险评分 进行威胁与风险优先级排序（参见解读结果文档） OpenVEX...
CLEANSTART-2026-RD72054 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Multiple security vulnerabilities affect the grype-fips package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2026-EF52160 Security fixes in grype 0.117.0-r1
Package grype version 0.117.0-r1 fixes 3 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-41178...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.118.0-0.1.hum1 aarch64, x8664 grype-0.118.0-0.1.hum1.src src...
GO-2024-2490 vulnerabilities
Vulnerabilities for packages: kubescape, grype, wolfictl, k9s, zarf, syft...
GO-2024-2948 vulnerabilities
Vulnerabilities for packages: kots, kubescape, grype, tflint, trivy-fips, wolfictl, k9s, conftest, snyk-cli, terraform, zot, tfsec, trivy, conftest-fips, terragrunt, zarf...
GO-2026-4809 vulnerabilities
Vulnerabilities for packages: kubescape-server, grype-db, chainctl, kubescape, k9s-fips, xeol-fips, cg, kubescape-operator, wolfictl, k9s, zarf-fips, xeol, kubescape-operator-fips, kubescape-server-fips, chainctl-fips, syft-fips, zarf, guac...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: kots, kubescape, cg, gotenberg, wolfictl, zarf, gitleaks, mattermost, gptscript, chezmoi, grype-fips, mattermost-fips, filebrowser, k9s, syft-fips, syft, grype-db, chainctl, k9s-fips, grype, trufflehog-fips, nuclei, trufflehog, undock...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: kots, kubescape, skaffold, skopeo, k3s, wolfictl, podman, runc, zarf, newrelic-infrastructure-agent, cadvisor, k3d, trivy, kaniko, buildkitd, kubernetes, nerdctl, k9s, docker, ctop, syft, grype, zot...
GO-2024-3110 vulnerabilities
Vulnerabilities for packages: k3s, opentelemetry-collector-contrib, buildah, k8s-device-plugin, podman, runc, neuvector-scanner, cadvisor, neuvector-fips, gosu, neuvector, grafana-alloy-fips, cadvisor-fips, kubernetes, grafana-alloy, cluster-autoscaler, opentelemetry-collector-contrib-fips,...
GO-2024-2791 vulnerabilities
Vulnerabilities for packages: cadvisor, grype, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, buildah, wolfictl, ctop, cadvisor-fips, neuvector-scanner, kubernetes...
GO-2025-3528 vulnerabilities
Vulnerabilities for packages: cluster-api-helm-controller-fips, envoy-gateway, consul-k8s, kots, cert-manager-cmctl-fips, kubescape, skaffold, helm-operator, k3s, docker-compose-fips, docker-cli-buildx-fips, wolfictl, kaniko-fips, rancher-agent, helm-push, k8sgpt, zarf,...
GO-2025-3922 vulnerabilities
Vulnerabilities for packages: envoy-gateway, cg, regclient-fips, atlantis-fips, gotenberg, podman, trivy-operator, zarf, vcluster-fips, gitleaks, nsc, opentofu, mattermost, gitness, gptscript, drone-fips, envoy-gateway-fips, terraform, xeol, kubescape-operator-fips, packer,...
GO-2026-5758 vulnerabilities
Vulnerabilities for packages: cluster-api-helm-controller-fips, consul-k8s, kubescape, redpanda-operator, helmfile, docker-cli-buildx, xeol, cloudbeat-fips, fuse-overlayfs-snapshotter, steampipe, packer-fips, k9s, neuvector-scanner-fips, manifest-tool, k9s-fips, kube-mgmt, kube-mgmt-fips, kots, t...
GO-2024-2490 vulnerabilities
Vulnerabilities for packages: kubescape, wolfictl, syft, k9s, grype, zarf...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: kubescape, nuclei, syft, gitleaks, wolfictl, k9s, gptscript, grype, kots, chezmoi, zarf, undock, filebrowser, trufflehog...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: syft, trivy, kubernetes, skaffold, buildkitd, nerdctl, zot, k3s, k9s, zarf, newrelic-infrastructure-agent, docker, kubescape, wolfictl, kaniko, skopeo, cadvisor, grype, k3d, kots, runc, podman, ctop...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: flux-helm-controller, trivy, skaffold, buildkitd, zot, flux-source-controller, gitness, helm-push, newrelic-infrastructure-agent, helm, kubescape, up, kaniko, fuse-overlayfs-snapshotter, grype, k3d, k8sgpt, kots, melange, cilium-cli, kubevela, eksctl, ctop...