GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: syft-fips, google-osconfig-agent, jfrog-cli, kargo, k8ssandra-client, helm, headlamp, syft, packer-fips, steampipe, gatekeeper, neuvector-fips, eksctl, neuvector-scanner-fips, cluster-api-helm-controller, consul-k8s, grype-fips, harvester-fips, zot, chartmuseum-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: syft-fips, google-osconfig-agent, jfrog-cli, kargo, k8ssandra-client, helm, headlamp, syft, packer-fips, steampipe, gatekeeper, neuvector-fips, eksctl, neuvector-scanner-fips, cluster-api-helm-controller, consul-k8s, grype-fips, harvester-fips, zot, chartmuseum-fips,...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, neuvector-scanner-fips...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

The vulnerability of the NeuVector Enforcer security container arises from the lack of data cleaning at the management level, allowing a perpetrator to execute arbitrary code and trigger a service failure.

The vulnerability of the NeuVector Enforcer security container is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and trigger a service failure...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: argo-rollouts, k8ssandra-client, trivy, timoni, falcoctl, crossplane-provider-azure-storage, x509-certificate-exporter, argo-events, percona-server-mongodb-operator, mods, kpt, kor, certificate-transparency, nri-haproxy, grafana-rollout-operator, contour, kubewatch,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: lazydocker, argo-rollouts, k8ssandra-client, k3s, trivy, go, jitsucom-bulker, temporal, sftpgo-plugin-auth, azure-service-operator, kubernetes-csi-driver-nfs, rancher-fleet, timoni, tofu-controller, falcoctl, verticadb-operator, mattermost,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, karpenter-fips, prometheus, prometheus-redis-exporter-fips, db-operator, commercial-chainloop-backend, kubernetes-csi-livenessprobe, crossplane-provider-aws-rolesanywhere-fips, nri-discovery-kubernetes, rancher-webhook, request-1279,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, db-operator, kubernetes-csi-livenessprobe, hcl2json, prometheus-stackdriver-exporter, sftpgo-plugin-geoipfilter, yunikorn-web, knative-storage-migrate, neuvector-scanner-fips, crossplane-provider-aws-wafv2, virt-handler-fips,...

CLEANSTART-2026-KJ56465 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 5.4.8-r0

Multiple security vulnerabilities affect the neuvector-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: rancher, teleport-operator-fips, gotrue-fips, zitadel, neuvector-fips, dex-fips, gotrue, omni, teleport, mattermost, omni-fips, rancher-agent, dex, neuvector, commercial-grafana, mattermost-fips...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

NeuVector scanner (CVE-2025-67860) is affected: the scanner process accepts registry and controller credentials via command-line arguments, potentially exposing sensitive credentials to local users. Root cause: credentials handled in command-line context. Impact: limited confidentiality risk (Low...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...