GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: gitleaks, temporal-server, chainloop-control-plane, cadence-fips, terraform-provider-azuread-fips, crossplane-provider-aws-cognitoidentity-fips, chisel, hubble, ucd, local-path-provisioner-fips, cloudprober-fips, athenz-cert-manager-issuer-fips, eck-operator-fips,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: grafana, ksops, grafana-fips, flux-kustomize-controller-fips, litestream, age, sops-fips, age-fips, sops, flux-kustomize-controller, chezmoi...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kaniko, opa, conftest, step, spegel, k3d, ksops, gomplate, sops, step-ca, trivy, minio, cilium-cli, melange, zarf, hubble-ui, spire-server, k3s, smarter-device-manager, guac, kubernetes-csi-driver-hostpath, sigstore-scaffolding, dex, dbmate, grafana-agent-operator,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, step, falcoctl, hugo, flyte, flux-kustomize-controller, py3-cassandra-medusa, rook, ksops, rclone, sops, trivy, step-ca, thanos, nuclei, up, zarf, sqlpad, hugo-extended, spire-server, chezmoi, flux-image-reflector-controller, guac,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, flux-kustomize-controller, ksops, sops, age, litestream...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kubevela, pulumi-kubernetes-operator, crossplane-provider-azure-storage, falcoctl, slsa-verifier, flux-kustomize-controller, rook, k3d, ksops, gomplate, sops, step-ca, nuclei, flux-image-automation-controller, scorecard, zarf, crossplane-provider-family-azure, gh,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cilium-cli, gh, spire-server, crossplane-provider-aws-sns, go-discover, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, neuvector-sigstore-interface, kubernetes-dashboard, buildah, mods, aactl,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cilium-cli, gh, spire-server, go-discover, flux-source-controller, snyk-cli, neuvector-sigstore-interface, kubernetes-dashboard, buildah, mods, aactl, argo-events, splunk-otel-collector, teleport, mattermost, docker-cli-buildx, buildkitd,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: slsa-verifier, hubble, bento, ksops, thanos, datadog-agent, ratify, kubescape-operator, terraform-provider-pagerduty, tetragon, grafana, cilium, migrate, trufflehog, grafana-agent-operator, argo-cd, wal-g, external-secrets-operator, cortex, ferretdb,...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: slsa-verifier, hubble, bento, ksops, thanos, datadog-agent, ratify, kubescape-operator, terraform-provider-pagerduty, tetragon, grafana, cilium, migrate, trufflehog, grafana-agent-operator, argo-cd, wal-g, external-secrets-operator, cortex, ferretdb,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: q, flux-kustomize-controller, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, aactl, crossplane-provider-aws-lambda, argo-events, docker-cli-buildx, buildkitd, trivy-operator, opentofu, extism,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: q, flux-kustomize-controller, cilium-cli, crossplane-provider-aws-sns, crossplane-provider-aws-cloudformation, flux-source-controller, snyk-cli, aactl, crossplane-provider-aws-lambda, argo-events, docker-cli-buildx, buildkitd, trivy-operator, opentofu, extism,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: thanos, polaris, fuse-overlayfs-snapshotter, kiali, timestamp-authority, grafana-rollout-operator, temporal-server, kserve-rest-proxy, kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-aws, aws-privateca-issuer, external-dns,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, step-ca, spire-server, dagdotdev, sigstore-scaffolding, sftpgo, flux-source-controller, cert-manager-istio-csr, temporal-ui-server, buildah, aactl, splunk-otel-collector, bank-vaults, kiali, timestamp-authority, spire-controller-manager,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, step-ca, spire-server, dagdotdev, sigstore-scaffolding, sftpgo, flux-source-controller, cert-manager-istio-csr, temporal-ui-server, buildah, aactl, splunk-otel-collector, bank-vaults, kiali, timestamp-authority, spire-controller-manager,...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: grafana, ksops, grafana-fips, flux-kustomize-controller-fips, litestream, age, sops-fips, age-fips, sops, flux-kustomize-controller, chezmoi...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, step, falcoctl, hugo, flyte, flux-kustomize-controller, py3-cassandra-medusa, rook, ksops, rclone, sops, trivy, step-ca, thanos, nuclei, up, zarf, sqlpad, hugo-extended, spire-server, chezmoi, flux-image-reflector-controller, guac,...