GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, chainctl-fips, datadog-agent-fips, linkerd2-fips, cluster-api-helm-controller, grype-fips, kubescape-operator-fips, neuvector-scanner-fips, kube-arangodb, consul-k8s-fips, gatekeeper, crossplane-fips, scorecard, helmfile, buildkitd-fips,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: steampipe, rancher-helm, scorecard, helm-push, osv-scanner, consul-k8s, rancher-agent, kubescape-operator, containerd, tw, skaffold, ctop, helm-operator, opa, zarf, gatekeeper, eksctl, k9s, neuvector-scanner, manifest-tool, chartmuseum, kaniko, kots, docker-cli-build...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: steampipe, rancher-helm, scorecard, helm-push, osv-scanner, consul-k8s, rancher-agent, kubescape-operator, containerd, tw, skaffold, ctop, helm-operator, opa, zarf, gatekeeper, eksctl, k9s, neuvector-scanner, manifest-tool, chartmuseum, kaniko, kots, docker-cli-build...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, chainctl-fips, datadog-agent-fips, linkerd2-fips, cluster-api-helm-controller, grype-fips, opa-fips, kubescape-operator-fips, neuvector-scanner-fips, kube-arangodb, consul-k8s-fips, gatekeeper, opa-envoy, scorecard, containerd, osv-scanner,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: harbor, helm-push, consul-k8s, tw, helm-operator, zarf, nova, eksctl, cert-manager-cmctl, k9s, pluto, istio, chartmuseum, kots, helm-set-status, kubescape, tigera-operator, linkerd2, headlamp, k8ssandra-client, cluster-api-helm-controller, kuma, cerbos, envoy-gateway...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: harbor, helm-push, consul-k8s, tw, helm-operator, zarf, nova, eksctl, cert-manager-cmctl, k9s, pluto, istio, chartmuseum, kots, helm-set-status, kubescape, tigera-operator, linkerd2, headlamp, k8ssandra-client, cluster-api-helm-controller, kuma, cerbos, envoy-gateway...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, newrelic-k8s-metadata-injection, apko, osv-scanner, aws-network-policy-agent, nodetaint, smokescreen, flux-helm-controller, temporal, goreleaser, dkron, clickhouse-operator, dataplaneapi, ingress-nginx-controller, metacontroller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: guac, sops, wal-g, gptscript, vcluster, crossplane-provider-aws-rds, trufflehog, policy-controller, argo-events, syft, crossplane-provider-aws-sqs, witness, crossplane-provider-azure-managedidentity, kubevela, pulumi-language-dotnet, kyverno,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: guac, sops, wal-g, gptscript, vcluster, crossplane-provider-aws-rds, trufflehog, policy-controller, argo-events, syft, crossplane-provider-aws-sqs, witness, crossplane-provider-azure-managedidentity, kubevela, pulumi-language-dotnet, kyverno,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, livekit-server, k8s-device-plugin-fips, crossplane-provider-aws-lambda, nfs-subdir-external-provisioner, timescaledb-tune, kube-logging-operator, kubelet-csr-approver-fips, tofu-controller, docker-machine-driver-linode, crossplane-provider-sql,...

BIT-FLUX-2022-36049 Flux2 Helm Controller denial of service

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

BIT-FLUX-2022-24817 Improper kubeconfig validation allows arbitrary code execution

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...

EUVD-2022-6887

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: flux, cerbos, timescaledb-tune, kube-logging-operator, cluster-api-helm-controller, undock, apm-server, mongo-tools, harbor, karpenter, vitess, docker-cli, knative-serving, terraform-provider-azapi, tkn, polaris, kubernetes-csi-driver-hostpath, clickhouse-operator,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: harbor, helm-push, consul-k8s, tw, flux-helm-controller, helm-operator, zarf, nova, eksctl, cert-manager-cmctl, k9s, pluto, istio, chartmuseum, kots, kargo, helm-set-status, kubescape, linkerd2, headlamp, k8ssandra-client, cluster-api-helm-controller, kuma, cerbos,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: harbor, helm-push, consul-k8s, flux-helm-controller, helm-operator, zarf, nova, eksctl, cert-manager-cmctl, k9s, pluto, istio, chartmuseum, kots, kargo, helm-set-status, kubescape, linkerd2, headlamp, k8ssandra-client, cluster-api-helm-controller, kuma, cerbos,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: harbor, helm-push, consul-k8s, flux-helm-controller, helm-operator, zarf, nova, eksctl, cert-manager-cmctl, k9s, pluto, istio, chartmuseum, kots, kargo, helm-set-status, kubescape, linkerd2, headlamp, k8ssandra-client, cluster-api-helm-controller, kuma, cerbos,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: harbor, helm-push, consul-k8s, tw, flux-helm-controller, helm-operator, zarf, nova, eksctl, cert-manager-cmctl, k9s, pluto, istio, chartmuseum, kots, kargo, helm-set-status, kubescape, linkerd2, headlamp, k8ssandra-client, cluster-api-helm-controller, kuma, cerbos,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: flux, helm-operator-fips, chartmuseum-fips, flux-source-controller-fips, pluto, cluster-api-helm-controller, flux-helm-controller, cilium-cli, harbor, eksctl, cert-manager-cmctl-fips, cluster-api-helm-controller-fips, cert-manager-cmctl, chart-testing-fips, kots,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: flux, helm-operator-fips, chartmuseum-fips, flux-source-controller-fips, pluto, cluster-api-helm-controller, flux-helm-controller, cilium-cli, harbor, eksctl, cert-manager-cmctl-fips, cluster-api-helm-controller-fips, cert-manager-cmctl, chart-testing-fips, kots,...