CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: zot, envoy-gateway, portieris, kots, argocd-image-updater, gitness...

GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, envoy-gateway-fips, gitness, portieris-fips, kots, envoy-gateway, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater-fips, portieris...

GHSA-3P65-76G6-3W7R vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, envoy-gateway-fips, gitness, portieris-fips, kots, envoy-gateway, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater-fips, portieris...

CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, envoy-gateway-fips, gitness, portieris-fips, kots, envoy-gateway, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater-fips, portieris...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: zot, argocd-image-updater, envoy-gateway-fips, gitness, portieris-fips, kots, envoy-gateway, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater-fips, portieris...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, teleport, livekit-cli, skaffold-fips, zarf, cloudbeat, argo-events-fips, google-osconfig-agent, flux-fips, kubescape-server-fips, crossplane, kots, packer-fips, osv-scanner, crossplane-fips, flux-source-controller-fips, grafana-alloy-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, teleport, livekit-cli, skaffold-fips, zarf, cloudbeat, argo-events-fips, google-osconfig-agent, flux-fips, kubescape-server-fips, crossplane, kots, packer-fips, osv-scanner, crossplane-fips, flux-source-controller-fips, grafana-alloy-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, teleport, livekit-cli, skaffold-fips, zarf, cloudbeat, argo-events-fips, google-osconfig-agent, flux-fips, kubescape-server-fips, crossplane, kots, packer-fips, osv-scanner, crossplane-fips, flux-source-controller-fips, grafana-alloy-fips,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: zot, gitea, kargo, nfpm, bom, zarf, nuclei, argo-cd, steampipe, trufflehog, pulumi, snyk-cli, witness, argocd-image-updater, wolfictl, crossplane, kubescape, rancher-fleet, k9s, argo-workflows, flux, gptscript, src-fingerprint, pulumi-language-dotnet, grafana-alloy,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: zot, gitea, kargo, nfpm, bom, zarf, nuclei, argo-cd, steampipe, trufflehog, pulumi, snyk-cli, witness, argocd-image-updater, wolfictl, crossplane, kubescape, rancher-fleet, k9s, argo-workflows, flux, gptscript, src-fingerprint, pulumi-language-dotnet, grafana-alloy,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: zot, gitea, kargo, nfpm, bom, zarf, nuclei, argo-cd, steampipe, trufflehog, pulumi, snyk-cli, witness, argocd-image-updater, wolfictl, crossplane, kubescape, rancher-fleet, k9s, argo-workflows, flux, gptscript, src-fingerprint, pulumi-language-dotnet, grafana-alloy,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: zot, gitea, kargo, nfpm, bom, zarf, nuclei, argo-cd, steampipe, trufflehog, pulumi, snyk-cli, witness, argocd-image-updater, wolfictl, crossplane, kubescape, rancher-fleet, k9s, argo-workflows, flux, gptscript, src-fingerprint, pulumi-language-dotnet, grafana-alloy,...

GHSA-465P-V42X-3FMJ vulnerabilities

Vulnerabilities for packages: kots...

CVE-2026-22728 vulnerabilities

Vulnerabilities for packages: kots...

CVE-2026-22728 vulnerabilities

Vulnerabilities for packages: kots...

GHSA-465P-V42X-3FMJ vulnerabilities

Vulnerabilities for packages: kots...

Malicious code in sonic-kots-jauab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc1d30cfa1e02ad4c3382b2428b9bea1b709288e79762143cfffdb413d1d819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6191a0201bc68b678aa7178537532393421df8bd55b30a21d5f64fef861d6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185060 Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...