312 matches found
GO-2022-0493 vulnerabilities
Vulnerabilities for packages: kubeflow, ctop, k3d, kind, grpcurl, dynamic-localpv-provisioner, terraform-provider-sendgrid...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: k3s, kaniko, cloudnative-pg, ksops, pulumi-language-dotnet, k3d, k8sgpt-operator, zot, gomplate, osv-scanner, falcosidekick, dex, cert-manager-cmctl, spegel, vcluster, temporal, fulcio, sops, zarf, ferretdb, kots, minio, spire-server, cilium-cli, grafana-mimir,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: buildkitd, grype, k3s, kaniko, wolfictl, docker, k9s, k3d, zot, newrelic-infrastructure-agent, kubernetes, ctop, zarf, runc, kots, nerdctl, cadvisor, podman, kubescape, skaffold, trivy, syft, skopeo...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: buildkitd, grype, kaniko, k3d, zot, flux-helm-controller, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, ctop, helm-push, kubevela, kots, cilium-cli, k8sgpt, eksctl, helm, melange, kubescape, gitness, skaffold, flux-source-controller, trivy, up...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: grype, kaniko, wolfictl, docker-compose, k3d, helm-push, melange, neuvector-scanner, policy-controller, cri-tools, dagger, syft, buf, harbor-scanner-trivy...
GO-2026-5841 vulnerabilities
Vulnerabilities for packages: telegraf, nerdctl, k3s, kaf, kyverno, k3d, prometheus-operator, containerd, aactl, kine, snyk-cli, helm, kots, minio, spire-server, loki, zot, flux...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: hubble, migrate, kubernetes-csi-driver-nfs, nri-haproxy, grafana-alloy, regclient, prometheus, docker-credential-gcr, nri-redis, ip-masq-agent, mockgen, fzf, wire-go, gcsfuse, neuvector-sigstore-interface, spark-operator, render-template, yunikorn-k8shim,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: buildkitd, pulumi-kubernetes-operator, k3s, pulumi, goreleaser, ksops, k3d, vexctl, zot, flux-helm-controller, gomplate, gh, terraform, flux-image-reflector-controller, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage,...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: prometheus, cilium, containerd, cert-manager, commercial-expanso-edge, backup-restore-operator, kots, telegraf, nerdctl, k3d, omnictl-multiarch, terraform, commercial-grafana, flux, upwind-agent, zitadel, elastic-agent-fips, aactl, omnictl-multiarch-fips, kine, kaf,...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: telegraf, nerdctl, k3s, kaf, kyverno, k3d, prometheus-operator, containerd, aactl, kine, snyk-cli, helm, kots, minio, spire-server, loki, zot, flux...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: hubble, chezmoi, telegraf, k3s, mattermost, istio, zot, cilium, prometheus, fuse-overlayfs-snapshotter, gitlab-pages, coredns, karpenter, kube-fluentd-operator, aws-flb-firehose, kaf, kubernetes, cert-manager, external-dns, aactl, falco-no-driver, redka, fscrypt, kot...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: hubble, chezmoi, telegraf, k3s, mattermost, istio, zot, cilium, prometheus, fuse-overlayfs-snapshotter, gitlab-pages, coredns, karpenter, kube-fluentd-operator, aws-flb-firehose, kaf, kubernetes, cert-manager, external-dns, aactl, falco-no-driver, redka, fscrypt, kot...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: cue, local-static-provisioner, haproxy-ingress, goreleaser, vault-k8s, k8sgpt-operator, spicedb-operator, mongodb-kubernetes-operator, kaf, sbom-convert, nri-redis, rancher-fleet, amass, timoni, db-operator, vale, rancher-agent, gcsfuse, yunikorn-k8shim,...
Malicious code in sierra-k3d-project (npm)
The package sierra-k3d-project was found to contain malicious code...
MAL-2025-33203 Malicious code in sierra-k3d-project (npm)
The package sierra-k3d-project was found to contain malicious code...
GHSA-2JWV-JMQ4-4J3R vulnerabilities
Vulnerabilities for packages: capslock, cue, local-static-provisioner, boring-registry, wave, vault-k8s, regclient, cloudflared, gosu, overmind, newrelic-prometheus-configurator, govulncheck, docker-credential-gcr, kaf, nvidia-container-toolkit, timoni, prometheus-adapter, ip-masq-agent, ferretdb...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: capslock, cue, nri-haproxy, goreleaser, vault-k8s, k8sgpt-operator, sbomqs, regclient, yq, flux-helm-controller, gh, gosu, nats, newrelic-prometheus-configurator, temporal-server, govulncheck, docker-credential-gcr, cass-operator, aws-flb-firehose, kaf,...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: capslock, cue, nri-haproxy, goreleaser, vault-k8s, k8sgpt-operator, sbomqs, regclient, yq, flux-helm-controller, gh, gosu, nats, newrelic-prometheus-configurator, temporal-server, govulncheck, docker-credential-gcr, cass-operator, aws-flb-firehose, kaf,...