GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kubescape-server, kubescape, teleport, spire-server-fips, trivy-fips, kyverno-fips, falcoctl-fips, tekton-chains, image-factory-fips, tbot, falcoctl, kyverno, teleport-operator-fips, ratify-fips, policy-controller-fips, zarf, cloudbeat, tkn, aactl, tekton-chains-fips...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, tflint, policy-controller, kyverno-notation-aws, trivy-operator, tekton-chains, teleport, aactl, ratify, gitsign, trivy, zarf, falcoctl, kubescape, neuvector-sigstore-interface, tkn...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: crossplane, kyverno, tflint, policy-controller, kyverno-notation-aws, trivy-operator, tekton-chains, teleport, aactl, ratify, gitsign, trivy, zarf, falcoctl, kubescape, neuvector-sigstore-interface, tkn...

GHSA-4JJ9-CGQC-X9H5 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-66001 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: kubescape-server, chainctl-fips, kubescape, teleport, spire-server-fips, ko, kyverno-fips, ko-fips, falcoctl-fips, tekton-chains, tbot, spire-server, falcoctl, kyverno, slsa-verifier, ratify-fips, policy-controller-fips, zarf, cloudbeat, tkn, aactl, tekton-chains-fip...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: kubescape-server, chainctl-fips, kubescape, teleport, spire-server-fips, ko, kyverno-fips, ko-fips, falcoctl-fips, tekton-chains, tbot, spire-server, falcoctl, kyverno, slsa-verifier, ratify-fips, policy-controller-fips, zarf, cloudbeat, tkn, aactl, tekton-chains-fip...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: crossplane, tekton-chains, aactl, ko, goreleaser, tkn, teleport, ratify, zarf, falcoctl, kyverno, kubescape, slsa-verifier, kyverno-notation-aws, spire-server, trivy-operator, gitsign, tflint, policy-controller, neuvector-sigstore-interface...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: crossplane, tekton-chains, aactl, ko, goreleaser, tkn, teleport, ratify, zarf, falcoctl, kyverno, kubescape, slsa-verifier, kyverno-notation-aws, spire-server, trivy-operator, gitsign, tflint, policy-controller, neuvector-sigstore-interface...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: grype-fips, kubescape, teleport, cluster-api-helm-controller-fips, beats-fips, headlamp, packer-fips, amazon-ecs-agent, docker-compose, neuvector-fips, datadog-agent-fips, skaffold-fips, xeol-fips, grype, chainctl, kots, google-osconfig-agent, kube-arangodb,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: grype-fips, kubescape, teleport, cluster-api-helm-controller-fips, beats-fips, headlamp, packer-fips, amazon-ecs-agent, docker-compose, neuvector-fips, datadog-agent-fips, skaffold-fips, xeol-fips, grype, chainctl, kots, google-osconfig-agent, kube-arangodb,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: grype-fips, kubescape, teleport, cluster-api-helm-controller-fips, beats-fips, headlamp, packer-fips, amazon-ecs-agent, docker-compose, neuvector-fips, datadog-agent-fips, skaffold-fips, xeol-fips, grype, chainctl, kots, google-osconfig-agent, kube-arangodb,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: grype-fips, kubescape, teleport, cluster-api-helm-controller-fips, beats-fips, headlamp, packer-fips, amazon-ecs-agent, docker-compose, neuvector-fips, datadog-agent-fips, skaffold-fips, xeol-fips, grype, chainctl, kots, google-osconfig-agent, kube-arangodb,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: grype-fips, kubescape, teleport, cluster-api-helm-controller-fips, beats-fips, headlamp, packer-fips, amazon-ecs-agent, docker-compose, neuvector-fips, datadog-agent-fips, skaffold-fips, xeol-fips, grype, chainctl, kots, google-osconfig-agent, kube-arangodb,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: grype-fips, kubescape, teleport, cluster-api-helm-controller-fips, beats-fips, headlamp, packer-fips, amazon-ecs-agent, docker-compose, neuvector-fips, datadog-agent-fips, skaffold-fips, xeol-fips, grype, chainctl, kots, google-osconfig-agent, kube-arangodb,...