GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: lvm-driver, kepler-fips, crossplane-provider-aws-budgets, gitlab-runner-operator-fips, perses-fips, addon-resizer, crossplane-provider-aws-servicediscovery-fips, opensearch-datasource, linkerd2-fips, metrics-agent-fips, falcosidekick, prometheus-beat-exporter,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, age-fips, flux-kustomize-controller-fips, age, chezmoi, grafana, litestream, sops-fips, sops, grafana-fips, ksops...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kwok, kubernetes-csi-external-provisioner, kargo, tempo, grafana-agent-operator, opentelemetry-collector-contrib, cilium-cli, ksops, restic, cert-manager-cmctl, grafana-mimir, opentelemetry-collector, dbmate, rqlite, temporal, guac, k3s, kots, melange, terragrunt,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: harbor-registry, chezmoi, tempo, pulumi, rook, grafana-agent-operator, tekton-chains, hugo-extended, trino, opentelemetry-collector-contrib, policy-controller, ksops, prometheus-operator, restic, flux, grafana-mimir, opentelemetry-collector, terragrunt, guac, trivy,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, age, flux-kustomize-controller, ksops, litestream, sops...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kargo, pulumi, crossplane-provider-azure, rook, tekton-chains, opentelemetry-collector-contrib, policy-controller, ksops, flux, grafana-mimir, gh, opentelemetry-collector, terragrunt, guac, k3s, rabbitmq-messaging-topology-operator, src-fingerprint, falcoctl,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildah, pulumi, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, ko, kots, rootlesskit, falcoctl, skaffold, rancher, pulumi-language-dotnet, terraform-provider-azurerm, eksctl, gomplate, k9s, crossplane-provider-azure-storage, act, buildkitd,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: buildah, pulumi, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, ko, kots, rootlesskit, falcoctl, skaffold, src, rancher, pulumi-language-dotnet, crossplane-provider-aws-elasticache,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, teleport, amazon-cloudwatch-agent, splunk-otel-collector, ratify, grafana-agent-operator, tekton-chains, terraform-provider-pagerduty, opentelemetry-collector-contrib, ksops, external-secrets-operator, cilium, tetragon, grafana-mimir, weaviate,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, teleport, amazon-cloudwatch-agent, splunk-otel-collector, ratify, grafana-agent-operator, tekton-chains, terraform-provider-pagerduty, opentelemetry-collector-contrib, ksops, external-secrets-operator, cilium, tetragon, grafana-mimir, weaviate,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: pulumi, tfsec, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, kots, skaffold, pulumi-language-dotnet, crossplane-provider-aws-elasticache, crossplane, crossplane-provider-aws-memoryd...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: pulumi, tfsec, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, kots, skaffold, pulumi-language-dotnet, crossplane-provider-aws-elasticache, crossplane, crossplane-provider-aws-memoryd...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nri-f5, kubernetes-dashboard-metrics-scraper, gobump, cis-operator, argocd-image-updater, polaris, pulumi-language-dotnet, hydra, ingress-nginx-controller, hcloud, gitlab-kas, kserve, podman, pluto, nri-consul, q, fuse-overlayfs-snapshotter, sftpgo-plugin-eventstore,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: buildah, pulumi, rook, ksops, argocd-image-updater, ko, kots, falcoctl, skaffold, goreleaser, hydra, kyverno-notation-aws, gomplate, oauth2-proxy, spire-server, tflint, gatus, argo-workflows, kubescape, dagger, spiffe-helper, podman, dex, timestamp-authority, minio,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: buildah, pulumi, rook, ksops, argocd-image-updater, ko, kots, falcoctl, skaffold, goreleaser, hydra, kyverno-notation-aws, gomplate, oauth2-proxy, spire-server, tflint, gatus, argo-workflows, kubescape, dagger, spiffe-helper, podman, dex, timestamp-authority, minio,...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, age-fips, flux-kustomize-controller-fips, age, chezmoi, grafana, litestream, sops-fips, sops, grafana-fips, ksops...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: harbor-registry, chezmoi, tempo, pulumi, rook, grafana-agent-operator, tekton-chains, hugo-extended, trino, opentelemetry-collector-contrib, policy-controller, ksops, prometheus-operator, restic, flux, grafana-mimir, opentelemetry-collector, terragrunt, guac, trivy,...