GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, crossplane, consul-k8s-fips, cloudbeat, xeol, kubevela, helm-mapkubeapis, gitlab-rails-ce, kots, steampipe, kgateway-fips, envoy-gateway-fips, chainctl, syft-fips, docker, skaffold-fips, chartmuseum, helm-exporter-fips, syft, spegel-fips,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: consul-k8s, gatekeeper, skaffold, tigera-operator, kots, opa, wolfictl, spegel, docker-compose, dagger, trivy-operator, kubescape, envoy-gateway, rancher-helm, zot, opa-envoy, tw, steampipe, buildkitd, chartmuseum, k8sgpt, osv-scanner, docker-cli-buildx,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: consul-k8s, gatekeeper, skaffold, tigera-operator, kots, opa, wolfictl, spegel, docker-compose, dagger, trivy-operator, kubescape, envoy-gateway, rancher-helm, zot, opa-envoy, tw, steampipe, buildkitd, chartmuseum, k8sgpt, osv-scanner, docker-cli-buildx,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, consul-k8s-fips, cloudbeat, xeol, kubevela, helm-mapkubeapis, gitlab-rails-ce, kots, steampipe, kgateway-fips, envoy-gateway-fips, chainctl, syft-fips, docker, skaffold-fips, chartmuseum, osv-scanner, helm-exporter-fips, syft, spegel-fips,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: consul-k8s, tigera-operator, kots, kuma, cerbos, istio, trivy-operator, kubescape, envoy-gateway, zot, tw, chartmuseum, helm-docs, kube-arangodb, k9s, helm-set-status, helm-operator, headlamp, rancher-fleet, chart-testing, nova, flux, trivy, eksctl, cert-manager-cmct...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: consul-k8s, tigera-operator, kots, kuma, cerbos, istio, trivy-operator, kubescape, envoy-gateway, zot, tw, chartmuseum, helm-docs, kube-arangodb, k9s, helm-set-status, helm-operator, headlamp, rancher-fleet, chart-testing, nova, flux, trivy, eksctl, cert-manager-cmct...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, dkron, flux-notification-controller, karpenter, flux-helm-controller, stakater-reloader, secrets-store-csi-driver-provider-aws, flux-image-automation-controller, local-path-provisioner, actions-runner-controller, dataplaneapi, go,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: lazygit, skaffold, crossplane-provider-aws-elasticache, kyverno-notation-aws, tfsec, crossplane-provider-keycloak, cerbos, opentofu, k9s, wal-g, cluster-api, crossplane-provider-family-aws, grafana, crossplane-provider-aws-cloudfront, sops, gitsign, snyk-cli,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: lazygit, skaffold, crossplane-provider-aws-elasticache, kyverno-notation-aws, tfsec, crossplane-provider-keycloak, cerbos, opentofu, k9s, wal-g, cluster-api, crossplane-provider-family-aws, grafana, crossplane-provider-aws-cloudfront, sops, gitsign, snyk-cli,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, crossplane-provider-aws-iam, terraform-provider-time, amazon-ecs-agent-fips, grafana-pyroscope, etcd, metallb, consul-k8s-fips, go-bindata, k3d, oauth2-proxy-fips, azure-ipam, pulumi-language-java, spicedb-operator, hcl2json,...

BIT-FLUX-2022-36049 Flux2 Helm Controller denial of service

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...

EUVD-2022-6887

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: cerbos, dragonfly-operator, grafana-pyroscope, fulcio, mockgen, nri-mysql, k3d, rclone, kubernetes-dashboard-web, portieris, wal-g, nri-nginx, wait-for-port, steampipe, kubernetes-csi-node-driver-registrar, emissary, mattermost, bom, karpenter, guac, regclient,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: consul-k8s, flux-helm-controller, kots, cerbos, istio, trivy-operator, kubescape, envoy-gateway, zot, tw, chartmuseum, helm-docs, k8sgpt, k9s, kargo, helm-set-status, helm-operator, headlamp, rancher-fleet, chart-testing, nova, flux, trivy, eksctl, cert-manager-cmctl...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: consul-k8s, flux-helm-controller, kots, cerbos, istio, trivy-operator, kubescape, envoy-gateway, zot, chartmuseum, helm-docs, k8sgpt, k9s, kargo, helm-set-status, helm-operator, headlamp, rancher-fleet, chart-testing, nova, flux, trivy, eksctl, cert-manager-cmctl,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: consul-k8s, flux-helm-controller, kots, cerbos, istio, trivy-operator, kubescape, envoy-gateway, zot, chartmuseum, helm-docs, k8sgpt, k9s, kargo, helm-set-status, helm-operator, headlamp, rancher-fleet, chart-testing, nova, flux, trivy, eksctl, cert-manager-cmctl,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: consul-k8s, flux-helm-controller, kots, cerbos, istio, trivy-operator, kubescape, envoy-gateway, zot, tw, chartmuseum, helm-docs, k8sgpt, k9s, kargo, helm-set-status, helm-operator, headlamp, rancher-fleet, chart-testing, nova, flux, trivy, eksctl, cert-manager-cmctl...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: cilium-cli, consul-k8s-fips, cert-manager-cmctl-fips, zot, harbor, flux-helm-controller-fips, chart-testing-fips, trivy, cluster-api-helm-controller, flux-source-controller, helm-operator, helm-push, kots, k8ssandra-client-fips, trivy-fips, helm-docs, k9s, zarf,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: cilium-cli, consul-k8s-fips, cert-manager-cmctl-fips, zot, harbor, flux-helm-controller-fips, chart-testing-fips, trivy, cluster-api-helm-controller, flux-source-controller, helm-operator, helm-push, kots, k8ssandra-client-fips, trivy-fips, helm-docs, k9s, zarf,...