GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: portieris, zot, gitness, argocd-image-updater, envoy-gateway, kots...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: portieris, zot, gitness, argocd-image-updater, envoy-gateway, kots...

CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: portieris, zot, gitness, argocd-image-updater, envoy-gateway, kots...

CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, argocd-image-updater-fips, portieris, gitlab-rails-ce, argocd-image-updater, envoy-gateway-fips, gitlab-rails-ce-fips, portieris-fips, kots...

GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, argocd-image-updater-fips, portieris, gitlab-rails-ce, argocd-image-updater, envoy-gateway-fips, gitlab-rails-ce-fips, portieris-fips, kots...

GHSA-3P65-76G6-3W7R vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, argocd-image-updater-fips, portieris, gitlab-rails-ce, argocd-image-updater, envoy-gateway-fips, gitlab-rails-ce-fips, portieris-fips, kots...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, argocd-image-updater-fips, portieris, gitlab-rails-ce, argocd-image-updater, envoy-gateway-fips, gitlab-rails-ce-fips, portieris-fips, kots...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, trivy-operator-fips, bom, crossplane-fips, flux, grype-db, gitlab-runner-fips, pulumi-language-java, trivy, cerbos, packer-fips, dagger, gitea, xeol, argo-events-fips, syft, flux-source-controller, gitaly, kaniko, skaffold-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, trivy-operator-fips, bom, crossplane-fips, flux, grype-db, gitlab-runner-fips, pulumi-language-java, trivy, cerbos, packer-fips, dagger, gitea, xeol, argo-events-fips, syft, flux-source-controller, gitaly, kaniko, skaffold-fips,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, trivy-operator-fips, bom, crossplane-fips, flux, grype-db, gitlab-runner-fips, pulumi-language-java, trivy, cerbos, packer-fips, dagger, gitea, xeol, argo-events-fips, syft, flux-source-controller, gitaly, kaniko, skaffold-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: zot, teleport, pulumi-language-java, k9s, xeol, kargo, kaniko, nuclei, guac, cerbos, trufflehog, witness, gitlab-runner, kots, pulumi-language-dotnet, steampipe, argo-cd, grafana-alloy, dagger, flux-image-automation-controller, gitaly, chezmoi, rancher-fleet,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: zot, teleport, pulumi-language-java, k9s, xeol, kargo, kaniko, nuclei, guac, cerbos, trufflehog, witness, gitlab-runner, kots, pulumi-language-dotnet, steampipe, argo-cd, grafana-alloy, dagger, flux-image-automation-controller, gitaly, chezmoi, rancher-fleet,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: zot, teleport, pulumi-language-java, k9s, xeol, kargo, kaniko, nuclei, guac, cerbos, trufflehog, witness, gitlab-runner, kots, pulumi-language-dotnet, steampipe, argo-cd, grafana-alloy, dagger, flux-image-automation-controller, gitaly, chezmoi, rancher-fleet,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: zot, teleport, pulumi-language-java, k9s, xeol, kargo, kaniko, nuclei, guac, cerbos, trufflehog, witness, gitlab-runner, kots, pulumi-language-dotnet, steampipe, argo-cd, grafana-alloy, dagger, flux-image-automation-controller, gitaly, chezmoi, rancher-fleet,...

GHSA-465P-V42X-3FMJ vulnerabilities

Vulnerabilities for packages: kots...

CVE-2026-22728 vulnerabilities

Vulnerabilities for packages: kots...

CVE-2026-22728 vulnerabilities

Vulnerabilities for packages: kots...

GHSA-465P-V42X-3FMJ vulnerabilities

Vulnerabilities for packages: kots...

Malicious code in sonic-kots-jaufb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfa6f78e702eac7087387fe164f37736b8554fbaede38ba0dae45cb1bcf0fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-ub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6191a0201bc68b678aa7178537532393421df8bd55b30a21d5f64fef861d6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...