GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: chart-testing-fips, cluster-api-azure-controller-fips, skaffold, ytt-fips, multicluster-controlplane-fips, crossplane-provider-azure-netapp, influxd, crossplane-provider-family-aws, open-cluster-management, skopeo, kiali-fips, knative-eventing, kubedock-fips,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops, flux-kustomize-controller, grafana-fips, sops-fips, age, chezmoi, ksops, flux-kustomize-controller-fips, age-fips, litestream, grafana...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: tflint, osv-scanner, cloudnative-pg, k8sgpt-operator, kargo, dbmate, kubernetes-csi-external-provisioner, terraform-provider-google, ksops, restic, kubernetes-csi-driver-hostpath, guac, sops, terraform-docs, opa, grpc-health-probe, dex, kaniko, melange, k3d, ferretdb...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, py3-azure-identity, py3-cassandra-medusa, secrets-store-csi-driver-provider-azure, druid, flyte, ksops, guac, restic, sops, sqlpad, sigstore-scaffolding, chezmoi, fulcio, prometheus-operator, velero, bank-vaults, timestamp-authority, step-c...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, litestream, ksops, sops, chezmoi, age...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, flux-helm-controller, flux-notification-controller, crossplane-provider-azure-managedidentity, kargo, ksops, sops, buildkitd, guac, slsa-verifier, kubevela, sigstore-scaffolding, k3d, flux-image-automation-controller, fulcio, k3s,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, nfpm, gatus, k9s, src, crossplane-provider-aws-ec2, act, rancher, prometheus-operator, go-discover, external-secrets-operator, steampipe, zarf, crossplane-provider-aws-firehose, pulumi-language-dotnet, gh, snyk-cli, trivy, ko,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, nfpm, gatus, k9s, act, rancher, prometheus-operator, go-discover, external-secrets-operator, steampipe, zarf, pulumi-language-dotnet, gh, snyk-cli, trivy, ko, flux-source-controller, external-dns, spire-server, zot, hcloud, dagger, falcoctl,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: grafana, consul-k8s, migrate, ksops, juicefs, amazon-cloudwatch-agent, datadog-agent, slsa-verifier, trufflehog, ferretdb, tekton-chains, grafana-agent-operator, vcluster, cilium, external-secrets-operator, weaviate, bento, grafana-mimir, terraform-provider-pagerduty...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: grafana, consul-k8s, migrate, ksops, juicefs, amazon-cloudwatch-agent, datadog-agent, slsa-verifier, trufflehog, ferretdb, tekton-chains, grafana-agent-operator, vcluster, cilium, external-secrets-operator, weaviate, bento, grafana-mimir, terraform-provider-pagerduty...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: nfpm, k9s, crossplane-provider-aws-ec2, vcluster, zarf, crossplane-provider-aws-firehose, gitsign, pulumi-language-dotnet, trivy, snyk-cli, flux-source-controller, zot, dagger, gitness, crossplane-provider-azure-sql, docker-cli-buildx, rclone, gomplate, gitlab-runner...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: nfpm, k9s, crossplane-provider-aws-ec2, vcluster, zarf, crossplane-provider-aws-firehose, gitsign, pulumi-language-dotnet, trivy, snyk-cli, flux-source-controller, zot, dagger, gitness, crossplane-provider-azure-sql, docker-cli-buildx, rclone, gomplate, gitlab-runner...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: helm-set-status, cluster-api-aws-controller, juicefs, influx, k3d, kserve-rest-proxy, pombump, s5cmd, kind, temporal-server, docker-credential-acr-env, secrets-store-csi-driver, gitsign, pulumi-language-dotnet, nri-redis, external-dns, pguser, tailscale, rclone,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, temporal-ui-server, gatus, k3d, rook, steampipe, neuvector-scanner, zarf, weaviate, gitsign, trivy, ko, grafana-mimir, flux-source-controller, spire-server, zot, dagger, falcoctl, gomplate, kubescape, argo-workflows, dagdotdev,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: buildah, step-issuer, temporal-ui-server, gatus, k3d, rook, steampipe, neuvector-scanner, zarf, weaviate, gitsign, trivy, ko, grafana-mimir, flux-source-controller, spire-server, zot, dagger, falcoctl, gomplate, kubescape, argo-workflows, dagdotdev,...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: sops, flux-kustomize-controller, grafana-fips, sops-fips, age, chezmoi, ksops, flux-kustomize-controller-fips, age-fips, litestream, grafana...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, py3-azure-identity, py3-cassandra-medusa, secrets-store-csi-driver-provider-azure, druid, flyte, ksops, guac, restic, sops, sqlpad, sigstore-scaffolding, chezmoi, fulcio, prometheus-operator, velero, bank-vaults, timestamp-authority, step-c...