GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, act, external-secrets-operator, gitaly, gptscript, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, act, external-secrets-operator, gitaly, gptscript, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: grafana-alloy, rclone, nfpm, weaviate, cri-tools, ollama, tempo, gitlab-runner, kubevela, opentelemetry-collector-contrib, minio, datadog-agent, grafana, nuclei, goreleaser, k8sgpt, prometheus, terragrunt, mcp-grafana, maru, witness, vcluster, dgraph, loki, malconten...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei, trufflehog, skaffold,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei, trufflehog, skaffold,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei, trufflehog, skaffold,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, external-secrets-operator, gptscript, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, external-secrets-operator, gptscript, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, external-secrets-operator, gptscript, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, external-secrets-operator, gptscript, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, dkron-fips, cluster-api-helm-controller-fips, prometheus-adapter-fips, cloudbeat-fips, k6-operator-fips, eck-operator, argo-workflows, zot, opencost, volsync, dkron, temporal-fips, gitaly, buildkitd, etcd, cloud-provider-aws,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, argo-cd, gptscript, crossplane-provider-aws-eks, gitlab-runner, xeol, crossplane-provider-aws-kinesis, skaffold, goreleaser, melange, crossplane-provider-aws-iam, flux-kustomize-controller, docker-cli-buildx, zarf, terragrunt, openbao, witness,...