GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-autoscaling, prometheus-fips, prometheus-podman-exporter, crossplane-provider-aws-memorydb, coder-fips, snyk-cli, ko-fips, terraform-provider-azurerm-fips, pulumi-kubernetes-operator, tekton-pipelines, trufflehog-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: prometheus-fips, gitlab-workhorse-ce, loki, snyk-cli, tekton-pipelines, argo-workflows-fips, opentofu-fips, opentelemetry-collector, frankenphp-8.5, buildah, tekton-pipelines-fips, podman, mattermost-fips, etcd-fips, calico-fips, omnictl-multiarch-fips, vitess,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: prometheus-fips, prometheus-podman-exporter, gitlab-workhorse-ce, loki, openbao, pulumi, snyk-cli, pulumi-kubernetes-operator, tekton-pipelines, trufflehog-fips, scorecard, argo-workflows-fips, opentofu-fips, zarf-fips, cloudbeat, act, amazon-ssm-agent,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: prometheus-fips, gitlab-workhorse-ce, loki, snyk-cli, tekton-pipelines, argo-workflows-fips, opentofu-fips, opentelemetry-collector, frankenphp-8.5, buildah, tekton-pipelines-fips, podman, mattermost-fips, etcd-fips, calico-fips, omnictl-multiarch-fips, vitess,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: prometheus-fips, prometheus-podman-exporter, gitlab-workhorse-ce, loki, pulumi, coder-fips, snyk-cli, pulumi-kubernetes-operator, tekton-pipelines, trufflehog-fips, scorecard, argo-workflows-fips, opentofu-fips, zarf-fips, cloudbeat, act, amazon-ssm-agent,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, spire-server, cloud-provider-aws, helm, kyverno, zot, trivy, gitlab-kas, kubernetes, snyk-cli, trivy-operator, fscrypt, nerdctl, osv-scanner, cilium-cli, cert-manager, zarf, kine, telegraf, prometheus, argocd-image-updater, flux, k3s,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, spire-server, cloud-provider-aws, helm, kyverno, zot, trivy, gitlab-kas, kubernetes, snyk-cli, trivy-operator, fscrypt, nerdctl, osv-scanner, cilium-cli, cert-manager, zarf, kine, telegraf, prometheus, argocd-image-updater, flux, k3s,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: prometheus-operator, caddy, podman, step-issuer, zot, go-discover, cert-manager, telegraf, prometheus, argocd-image-updater, dagger, flux, k3s, step-kms-plugin, external-secrets-operator, rancher-agent, pulumi-language-yaml, istio, aactl, nfpm, kots, docker-cli-build...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, scorecard, spire-server, melange, opentofu, argo-cd, cloud-provider-aws, helm, grype, kyverno, podman, trivy, zot, gitlab-kas, kubernetes, snyk-cli, witness, wolfictl, pulumi-language-java, trivy-operator, fscrypt, nerdctl, osv-scanner,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: minio, prometheus-operator, spire-server, docker-cli-buildx, cloud-provider-aws, helm, podman, kyverno, zot, gitlab-kas, kubernetes, snyk-cli, fscrypt, nerdctl, cilium-cli, cert-manager, kine, telegraf, prometheus, flux, k3s, external-secrets-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-fips, envoy-gateway, gitlab-operator, keda, nri-elasticsearch, prometheus-podman-exporter, volsync, json-exporter-fips, seaweedfs-fips, configmap-reload, docker-credential-ecr-login-fips, kbld, terraform-provider-random-fips, helm-set-status,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: envoy-gateway, mage, configmap-reload, kbld, xcover, ghaudit, cilium-certgen-fips, db-operator-fips, kepler, hcl2json, overmind, yq, minc-fips, kafkaexporter-fips, mongodb-k8s-operator-version-upgrade-post-start-hook-fips, yace-fips, amazon-ssm-agent, kratos,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: prometheus-fips, envoy-gateway, gitlab-operator, keda, nri-elasticsearch, prometheus-podman-exporter, volsync, json-exporter-fips, seaweedfs-fips, configmap-reload, docker-credential-ecr-login-fips, kbld, terraform-provider-random-fips, helm-set-status,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: jaeger-operator, keda, nri-elasticsearch, docker-credential-ecr-login-fips, kbld, terraform-provider-random-fips, helm-set-status, pdfcpu, snyk-cli, ko-fips, pulumi-kubernetes-operator, tekton-pipelines, trufflehog-fips, newrelic-fluent-bit-output-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: jaeger-operator, keda, nri-elasticsearch, docker-credential-ecr-login-fips, kbld, terraform-provider-random-fips, helm-set-status, pdfcpu, snyk-cli, ko-fips, pulumi-kubernetes-operator, tekton-pipelines, trufflehog-fips, newrelic-fluent-bit-output-fips,...

EUVD-2023-3019

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, cluster-api-azure-controller, kube-bench, regclient, cni-plugins, helm-set-status, kubeflow-katib, undock, cluster-api, kubernetes-dashboard-auth, tekton-pipelines, envconsul, nri-apache, timescaledb-tune, kubernetes-dashboard-web, falcoctl...

GO-2023-2355 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving

Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler in knative.dev/serving...

The vulnerability of the Knative Serving deployment and application management tool, related to uncontrolled resource consumption, allows a attacker to cause service failures.

The vulnerability of the Knative Serving deployment and application management tool is related to an uncontrolled resource consumption when processing endpoints in the /metrics directory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-48713

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound...