GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elastictranscoder-fips, crane-fips, prometheus-pgbouncer-exporter, aactl, crossplane-provider-aws-cloudwatch-fips, helmfile, juicefs-csi-driver, lvm-driver, crossplane-provider-aws-ssm, metrics-agent-fips, cri-tools,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: age-fips, sops-fips, litestream, grafana, grafana-fips, age, sops, chezmoi, flux-kustomize-controller-fips, flux-kustomize-controller, ksops...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, minio, pulumi-language-dotnet, cilium-cli, ferretdb, kubernetes-csi-external-provisioner, k8sgpt-operator, ksops, opa, osv-scanner, gomplate, step-ca, grafana-mimir, kwok, step, hubble-ui, kots, dex, terragrunt, vcluster, terraform-docs, conftest,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: tkn, thanos, nuclei, flux-source-controller, airflow, ksops, sqlpad, falcoctl, tekton-chains, step-ca, up, cortex, cosign, restic, prometheus-operator, grafana-mimir, velero, step, buildkitd, flux, pulumi, terragrunt, boring-registry, opentelemetry-collector, zarf,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: litestream, age, ksops, sops, flux-kustomize-controller, chezmoi...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: k3d, flux-image-automation-controller, tkn, gh, nuclei, slsa-verifier, crossplane-provider-azure, flux-source-controller, ksops, terraform-provider-azurerm, falcoctl, tekton-chains, gomplate, src-fingerprint, crossplane-provider-azure-sql, cosign, step-ca,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: minio, nfpm, crossplane-provider-aws-rds, argocd-image-updater, terraform-provider-tls, crossplane-provider-aws-s3, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: minio, nfpm, argocd-image-updater, terraform-provider-tls, ksops, kots, pulumi, istio, argo-cd, sops, opentofu, pulumi-language-yaml, rancher, crossplane-provider-azure-managedidentity, apko, policy-controller, mattermost, steampipe, docker-cli-buildx, k9s,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: thanos, ferretdb, migrate, slsa-verifier, ksops, tekton-chains, cortex, datadog-agent, grafana, kubescape-operator, external-secrets-operator, argo-cd, kubescape, dapr, juicefs, promxy, teleport, tetragon, consul-k8s, cilium, grafana-agent-operator,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: thanos, ferretdb, migrate, slsa-verifier, ksops, tekton-chains, cortex, datadog-agent, grafana, kubescape-operator, external-secrets-operator, argo-cd, kubescape, dapr, juicefs, promxy, teleport, tetragon, consul-k8s, cilium, grafana-agent-operator,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: nfpm, crossplane-provider-aws-rds, argocd-image-updater, crossplane-provider-aws-s3, extism, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, src-fingerprint, argo-rollouts, kots, pulumi, boring-registry, argo-cd, kubevela, sops, opentofu,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: nfpm, crossplane-provider-aws-rds, argocd-image-updater, crossplane-provider-aws-s3, extism, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, src-fingerprint, argo-rollouts, kots, pulumi, boring-registry, argo-cd, kubevela, sops, opentofu,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: opa-envoy, portieris, terraform-provider-sendgrid, k8ssandra-operator, hello-world-golang, sqlexporter, neuvector-dbgen, nri-haproxy, sonobuoy, kpt, nri-mysql, pguser, sealed-secrets, gotestsum, secrets-store-csi-driver-provider-azure, pdfcpu, kube-vip, nerdctl,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: minio, argocd-image-updater, ksops, temporal-ui-server, kots, dex, pulumi, istio, boring-registry, grpc-health-probe, flyte, sops, opentofu, cert-manager-istio-csr, dgraph, apko, harbor-registry, kube-rbac-proxy, policy-controller, steampipe, trufflehog, openbao,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: minio, argocd-image-updater, ksops, temporal-ui-server, kots, dex, pulumi, istio, boring-registry, grpc-health-probe, flyte, sops, opentofu, cert-manager-istio-csr, dgraph, apko, harbor-registry, kube-rbac-proxy, policy-controller, steampipe, trufflehog, openbao,...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: age-fips, sops-fips, litestream, grafana, grafana-fips, age, sops, chezmoi, flux-kustomize-controller-fips, flux-kustomize-controller, ksops...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: tkn, thanos, nuclei, flux-source-controller, airflow, ksops, sqlpad, falcoctl, tekton-chains, step-ca, up, cortex, cosign, restic, prometheus-operator, grafana-mimir, velero, step, buildkitd, flux, pulumi, terragrunt, boring-registry, opentelemetry-collector, zarf,...