GO-2026-5039 vulnerabilities

Vulnerabilities for packages: dbmate, spicedb-operator, terraform-provider-grafana, tigera-operator, rabbitmq-cluster-operator, crossplane-provider-aws-ec2, node-problem-detector, k9s, kubevela, kube-fluentd-operator, vault-k8s, vcluster, neuvector-scanner, azure-workload-identity-webhook,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, crossplane, teleport, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, policy-controller, zarf, tkn, kyverno, goreleaser, tflint, gitsign, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cosign, crossplane-provider-aws-ec2, docker, k9s, falcoctl, fulcio, kubernetes-dashboard, grype, mattermost, crossplane-provider-azure-storage, gptscript, flux-notification-controller, hcloud, crossplane-provider-aws-sns, terragrunt, tekton-chains, gitea, loki, act,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, falcoctl, docker-cli-buildx, flux-source-controller, crossplane, teleport, skaffold, gh, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, sigstore-scaffolding, vexctl, witness, policy-controller, zarf, tk...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, trivy-operator, falcoctl, flux-source-controller, crossplane, teleport, skaffold, gh, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, vexctl, witness, policy-controller, zarf, tkn, kyverno...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: cosign, undock, falco-no-driver, neuvector-sigstore-interface, trivy-operator, falcoctl, fulcio, portieris, rekor, flux-source-controller, kots, crossplane, skopeo, skaffold, gh, slsa-verifier, tekton-chains, ratify, podman, docker-compose, ko, kyverno-notation-aws,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, docker, trivy-operator, falcoctl, docker-cli-buildx, flux-source-controller, crossplane, teleport, skaffold, gh, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, sigstore-scaffolding, vexct...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, docker, trivy-operator, falcoctl, rekor, flux-source-controller, crossplane, teleport, skaffold, gh, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, sigstore-scaffolding, vexctl, witness,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, helm-set-status, falcoctl, fulcio, portieris, kubernetes-dashboard, gptscript, kapp-controller, helm-operator, delve, kuberlr, cloud-provider-gcp-cloud-controller-manager, bom, tekton-chains, emissary,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: cosign, neuvector-sigstore-interface, docker, trivy-operator, falcoctl, rekor, flux-source-controller, crossplane, teleport, skaffold, gh, slsa-verifier, tekton-chains, ratify, ko, kyverno-notation-aws, kubescape, spire-server, sigstore-scaffolding, vexctl, witness,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: cosign, nuclei, neuvector-sigstore-interface, flux-image-reflector-controller, falcoctl, fulcio, glab, kubevela, rekor, pulumi-kubernetes-operator, zot, grafana-mimir, flux-helm-controller, crossplane-provider-azure-storage, argo-events, flux-source-controller,...

CVE-2026-25703

NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...

EUVD-2026-53297

NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...

CVE-2026-25703 Potential information leakage from manager /network/graph API in NeuVector

NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...

CVE-2026-25703

NeuVector up to version 5.4.9 potentially leaks information from the manager, specifically via the /network/graph API, due to missing authentication and cached data containing sensitive information. Affected component: NeuVector manager API surface; vulnerability arises from insufficient access c...

CVE-2026-25703 Potential information leakage from manager /network/graph API in NeuVector

NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...

CLEANSTART-2026-ZD86302 Security fixes in neuvector-fips 5.4.8-r0

Package neuvector-fips version 5.4.8-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: falcoctl, kubescape, kubescape-server, ratify-fips, spire-server-fips, policy-controller-fips, kyverno-notation-aws, crossplane-fips, zarf-fips, tkn-fips, tekton-chains-fips, cloudbeat-fips, kyverno, trivy-fips, neuvector-sigstore-interface, tkn, image-factory-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: trivy, kyverno, neuvector-sigstore-interface, tekton-chains, ratify, policy-controller, trivy-operator, falcoctl, zarf, kyverno-notation-aws, tflint, kubescape, gitsign, tkn, crossplane, aactl...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: trivy, kyverno, neuvector-sigstore-interface, tekton-chains, ratify, policy-controller, trivy-operator, falcoctl, zarf, kyverno-notation-aws, tflint, kubescape, gitsign, tkn, crossplane, aactl...