GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kuma, knative-serving, gatekeeper, gitea, trivy-fips, snyk-cli, docker-machine-driver-harvester, omnictl-multiarch-fips, argo-cd-fips, osv-scanner, kubescape-server-fips, traefik-fips, kyverno, knative-kafka-broker, mattermost-fips, omnictl-multiarch, falco-no-driver...

io.quarkiverse.openapi.generator:quarkus-openapi-generator-deployment (1.2.0), org.kie.kogito:integration-tests-jobs-service-quarkus-knative-eventing (>=1.33.0.final, <=1.34.0.final) +15 more potentially affected by CVE-2026-40180 via io.quarkiverse.openapi.generator:quarkus-openapi-generator (1.2.0)

io.quarkiverse.openapi.generator:quarkus-openapi-generator MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.openapi.generator:quarkus-openapi-generator and may be impacted: -...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, livekit-server-fips, cosign, kaniko, prometheus-podman-exporter-fips, tempo-fips, kubeflow-pipelines, kaniko-fips, oauth2-proxy, gotrue-fips, sqlexporter-fips, tempo, elastic-agent-fips, jitsucom-bulker, flux-operator, grafana-alloy-fips,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: rancher-machine, knative-serving, gitsign, octo-sts, cluster-api, kubernetes-dashboard-fips, node-problem-detector-fips, bank-vaults, knative-eventing, karpenter, vexctl, vault-benchmark, kube-logging-operator-custom-runner-fips, configmap-reload-fips, git-lfs,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, knative-serving, gitsign, octo-sts, cluster-api, kubernetes-dashboard-fips, node-problem-detector-fips, bank-vaults, knative-eventing, karpenter, vexctl, vault-benchmark, kube-logging-operator-custom-runner-fips, configmap-reload-fips, git-lfs,...