GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, redis-operator, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips, longhorn-cli-fips, fluxcd-kustomize-mutating-webhook-fips,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, flux-kustomize-controller, age-fips, grafana-fips, sops-fips, grafana, chezmoi, flux-kustomize-controller-fips, sops, age, litestream...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: temporal, kubernetes-csi-driver-hostpath, rqlite, k8sgpt, kargo, cilium-cli, osv-scanner, trivy, grafana-mimir, grafana-agent-operator, zarf, sops, cloudnative-pg, cert-manager-cmctl, melange, sigstore-scaffolding, conftest, zot, pulumi-language-dotnet, tflint,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: falcoctl, py3-azure-identity, timestamp-authority, k8sgpt, argo-workflows, trivy, grafana-mimir, grafana-agent-operator, zarf, sops, airflow, sigstore-scaffolding, zot, nuclei, chezmoi, flux-kustomize-controller, rekor, py3-cassandra-medusa, restic, step-ca, buildkit...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, age, flux-kustomize-controller, chezmoi, sops, litestream...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, timestamp-authority, kargo, slsa-verifier, gitsign, grafana-mimir, zarf, sops, glab, sigstore-scaffolding, rabbitmq-messaging-topology-operator, crossplane-provider-azure-managedidentity, flux-image-automation-controller, snyk-cli,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, cloudflared, apko, chisel, istio, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, pulumi-language-yaml, grype, crossplane-provider-aws-iam, docker-compose, snyk-cli, chezmoi, tflint, kubernetes-dashboard, kaf, guac,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, apko, chisel, istio, osv-scanner, pulumi-language-yaml, grype, docker-machine-driver-harvester, snyk-cli, chezmoi, tflint, kubernetes-dashboard, kaf, guac, gomplate, step, tekton-chains, buildah, pulumi-language-java, mods, prometheus-operator,...

GHSA-CP6G-7HQX-QXHP vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, slsa-verifier, tetragon, teleport, grafana-pyroscope, grafana-agent-operator, datadog-agent, kubescape-operator, trufflehog, juicefs, argo-cd, ratify, grafana, splunk-otel-collector, tekton-chains, ksops, promxy, dapr, weaviate, kubescap...

CVE-2026-2303 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, slsa-verifier, tetragon, teleport, grafana-pyroscope, grafana-agent-operator, datadog-agent, kubescape-operator, trufflehog, juicefs, argo-cd, ratify, grafana, splunk-otel-collector, tekton-chains, ksops, promxy, dapr, weaviate, kubescap...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: opentofu, cluster-api, apko, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, helm-push, pulumi-language-yaml, grype, crossplane-provider-aws-iam, snyk-cli, trufflehog, guac, gomplate, crossplane-provider-aws-ec2, cerbos, gitaly,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: opentofu, cluster-api, apko, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, helm-push, pulumi-language-yaml, grype, crossplane-provider-aws-iam, snyk-cli, trufflehog, guac, gomplate, crossplane-provider-aws-ec2, cerbos, gitaly,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: dask-gateway, grafana-mimir, kubernetes-dashboard-metrics-scraper, restic, custom-pod-autoscaler, govulncheck, gitaly, sftpgo-plugin-pubsub, terraform-mcp-server, kubernetes-csi-external-provisioner, gitlab-pages, prometheus-operator, kubelet-csr-approver, terraform,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, timestamp-authority, apko, istio, grafana-mimir, trufflehog, rekor, tflint, guac, rook, gomplate, step, tekton-chains, buildah, sftpgo-plugin-kms, kube-rbac-proxy, kubescape, fulcio, tkn, dex, cosign, harbor-registry, oauth2-proxy, skaffold, undoc...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, timestamp-authority, apko, istio, grafana-mimir, trufflehog, rekor, tflint, guac, rook, gomplate, step, tekton-chains, buildah, sftpgo-plugin-kms, kube-rbac-proxy, kubescape, fulcio, tkn, dex, cosign, harbor-registry, oauth2-proxy, skaffold, undoc...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: ksops, flux-kustomize-controller, age-fips, grafana-fips, sops-fips, grafana, chezmoi, flux-kustomize-controller-fips, sops, age, litestream...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: falcoctl, py3-azure-identity, timestamp-authority, k8sgpt, argo-workflows, trivy, grafana-mimir, grafana-agent-operator, zarf, sops, airflow, sigstore-scaffolding, zot, nuclei, chezmoi, flux-kustomize-controller, rekor, py3-cassandra-medusa, restic, step-ca, buildkit...