CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: opentofu, wolfictl, k9s, tfsec, zarf-fips, crossplane-provider-terraform-fips, crossplane-provider-terraform, cloudbeat, tflint, packer, zot, kubescape-server-fips, task, task-fips, kots, cg, xeol-fips, conftest, terraform-fips, kubescape-server, terragrunt, zarf,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: opentofu, wolfictl, k9s, tfsec, zarf-fips, crossplane-provider-terraform-fips, crossplane-provider-terraform, cloudbeat, tflint, packer, zot, kubescape-server-fips, task, task-fips, kots, cg, xeol-fips, conftest, terraform-fips, kubescape-server, terragrunt, zarf,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, flux-source-controller-fips, grafana-alloy, gomplate, nfpm, cerbos-fips, packer, zot, src-fingerprint, rancher-fleet, kargo, rancher-fleet-fips, zarf, melange, bom, gitlab-rails-ce-fips, xeol, k9s-fips, pulumi-language-java, google-osconfig-agent,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, flux-source-controller-fips, grafana-alloy, gomplate, nfpm, cerbos-fips, packer, zot, src-fingerprint, rancher-fleet, kargo, rancher-fleet-fips, zarf, melange, bom, gitlab-rails-ce-fips, xeol, k9s-fips, pulumi-language-java, google-osconfig-agent,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, flux-source-controller-fips, grafana-alloy, gomplate, nfpm, cerbos-fips, packer, zot, src-fingerprint, rancher-fleet, kargo, rancher-fleet-fips, zarf, melange, bom, gitlab-rails-ce-fips, xeol, k9s-fips, pulumi-language-java, google-osconfig-agent,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: melange, gitlab-runner, grype, k9s, apko, kyverno, pulumi-language-yaml, gptscript, wolfictl, argo-events, trivy-operator, witness, xeol, trivy, kubevela, teleport, argocd-image-updater, cerbos, kaniko, trufflehog, zarf, crossplane, kots, syft, gitea, scorecard, flux...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: melange, gitlab-runner, grype, k9s, apko, kyverno, pulumi-language-yaml, gptscript, wolfictl, argo-events, trivy-operator, witness, xeol, trivy, kubevela, teleport, argocd-image-updater, cerbos, kaniko, trufflehog, zarf, crossplane, kots, syft, gitea, scorecard, flux...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: melange, gitlab-runner, grype, k9s, apko, kyverno, pulumi-language-yaml, gptscript, wolfictl, argo-events, trivy-operator, witness, xeol, trivy, kubevela, teleport, argocd-image-updater, cerbos, kaniko, trufflehog, zarf, crossplane, kots, syft, gitea, scorecard, flux...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: melange, gitlab-runner, grype, k9s, apko, kyverno, pulumi-language-yaml, gptscript, wolfictl, argo-events, trivy-operator, witness, xeol, trivy, kubevela, teleport, argocd-image-updater, cerbos, kaniko, trufflehog, zarf, crossplane, kots, syft, gitea, scorecard, flux...

grype-0.109.1-1.1 on GA media (moderate)

grype-0.109.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10317-1 Rating: moderate Cross-References: CVE-2025-12183 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-0.109.1-1.1...

OPENSUSE-SU-2026:10317-1 grype-0.109.1-1.1 on GA media

These are all security issues fixed in the grype-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitlab-runner, crossplane-provider-azure-storage, docker-cli-buildx, crossplane-provider-aws-sns, argo-events, trivy-operator, buildkitd, kubevela, crossplane-provider-aws-rds, rclone, trufflehog, crossplane-provider-aws-sqs, terraform-provider-azurerm,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitlab-runner, crossplane-provider-azure-storage, docker-cli-buildx, crossplane-provider-aws-sns, argo-events, trivy-operator, buildkitd, kubevela, crossplane-provider-aws-rds, rclone, trufflehog, crossplane-provider-aws-sqs, terraform-provider-azurerm,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-aws-ecr, datadog-agent-fips, flux-source-controller-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-iam-fips, boring-registry, grafana-alloy, actions-runner-controller-fips, crossplane-provider-aws-kinesis,...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

SUSE CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, wave-fips, sonobuoy, rootlesskit-fips, newrelic-nri-kube-events-fips, dfc, distribution-fips, grafana-alloy, kube-rbac-proxy-fips, kube-metrics-adapter, kafkaexporter-fips, apache-beam-java-sdk, rancher-webhook, redis-operator,...

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

EUVD-2025-199596

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...