CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, tekton-pipelines, ctop,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, tekton-pipelines, ctop,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, tekton-pipelines, ctop,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, tekton-pipelines, ctop,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, tekton-pipelines, ctop,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, tekton-pipelines, ctop,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, ctop, helm-exporter-fips,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, ctop, helm-exporter-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, spegel, chainctl, cluster-api-helm-controller-fips, trivy, docker-fips, headlamp, packer-fips, crossplane, dagger, trivy-fips, docker-cli-buildx-fips, linkerd2, fuse-overlayfs-snapshotter, helm-exporter, cg, ctop, helm-exporter-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melange, crossplane, terragrun...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melange, crossplane, terragrun...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melange, crossplane, terragrun...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melange, crossplane, terragrun...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, coder-fips, cg, src-fingerprint,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, coder-fips, cg, src-fingerprint,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, coder-fips, cg, src-fingerprint,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, coder-fips, cg, src-fingerprint,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, flux-source-controller-fips, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, cg,...

SUSE CVE-2026-28406

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

GO-2026-4580 kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko

kaniko has tar archive path traversal in its build context extraction, allowing file writes outside destination directories in github.com/chainguard-dev/kaniko...