GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, tekton-pipelines, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, tekton-pipelines, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, tekton-pipelines, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, tekton-pipelines, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, tekton-pipelines, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, tekton-pipelines, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent, trivy-fips,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent, trivy-fips,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: datadog-agent, skaffold, kube-mgmt-fips, harvester, cloudbeat-fips, helm-fips, spegel-fips, kubescape-server, consul-k8s, buildkitd-fips, chartmuseum-fips, kubescape, docker-compose, kubevela, spegel, zot, trivy-operator, k9s, google-osconfig-agent, trivy-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: teleport, gitsign, src-fingerprint, trivy-operator, act, gitaly, wolfictl, argo-workflows, cerbos, kyverno, pulumi-language-yaml, witness, steampipe, snyk-cli, pulumi-language-dotnet, gitea, xeol, gptscript, kubescape, kaniko, melange, gitlab-runner, scorecard, kots,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: teleport, gitsign, src-fingerprint, trivy-operator, act, gitaly, wolfictl, argo-workflows, cerbos, kyverno, pulumi-language-yaml, witness, steampipe, snyk-cli, pulumi-language-dotnet, gitea, xeol, gptscript, kubescape, kaniko, melange, gitlab-runner, scorecard, kots,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: teleport, gitsign, src-fingerprint, trivy-operator, act, gitaly, wolfictl, argo-workflows, cerbos, kyverno, pulumi-language-yaml, witness, steampipe, snyk-cli, pulumi-language-dotnet, gitea, xeol, gptscript, kubescape, kaniko, melange, gitlab-runner, scorecard, kots,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: teleport, gitsign, src-fingerprint, trivy-operator, act, gitaly, wolfictl, argo-workflows, cerbos, kyverno, pulumi-language-yaml, witness, steampipe, snyk-cli, pulumi-language-dotnet, gitea, xeol, gptscript, kubescape, kaniko, melange, gitlab-runner, scorecard, kots,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: apko, skaffold, osv-scanner, cloudbeat-fips, tfsec, kubescape-server, nuclei, mapotf-fips, trufflehog, kubescape, kubevela, argocd-image-updater-fips, zot, goreleaser, trivy-operator, argo-cd, k9s, google-osconfig-agent, trivy-fips, grype-db,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: apko, skaffold, osv-scanner, cloudbeat-fips, tfsec, kubescape-server, nuclei, mapotf-fips, trufflehog, kubescape, kubevela, argocd-image-updater-fips, zot, goreleaser, trivy-operator, argo-cd, k9s, google-osconfig-agent, trivy-fips, grype-db,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: apko, skaffold, osv-scanner, cloudbeat-fips, tfsec, kubescape-server, nuclei, mapotf-fips, trufflehog, kubescape, kubevela, argocd-image-updater-fips, zot, goreleaser, trivy-operator, argo-cd, k9s, google-osconfig-agent, trivy-fips, grype-db,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: apko, skaffold, osv-scanner, cloudbeat-fips, tfsec, kubescape-server, nuclei, mapotf-fips, trufflehog, kubescape, kubevela, argocd-image-updater-fips, zot, goreleaser, trivy-operator, argo-cd, k9s, google-osconfig-agent, trivy-fips, grype-db,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: apko, skaffold, osv-scanner, cloudbeat-fips, tfsec, kubescape-server, nuclei, mapotf-fips, trufflehog, kubescape, kubevela, argocd-image-updater-fips, zot, goreleaser, trivy-operator, argo-cd, k9s, google-osconfig-agent, trivy-fips, grype-db,...

SUSE CVE-2026-28406

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

GO-2026-4580 kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko...