337 matches found
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: syft, docker-compose, kaniko, grype, neuvector-scanner, dagger, harbor-scanner-trivy, melange, wolfictl, buf, cri-tools, helm-push, policy-controller, k3d...
GO-2024-2791 vulnerabilities
Vulnerabilities for packages: grype, neuvector-scanner, cadvisor, opentelemetry-collector-contrib, ctop, buildah, wolfictl, kubernetes...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: nri-consul, tigera-operator, argo-events, local-path-provisioner, litestream, dbmate, istio, percona-server-mongodb-operator, kube-vip, sftpgo-plugin-auth, aactl, descheduler, amazon-cloudwatch-agent-operator, crossplane-provider-family-azure,...
GO-2026-5778 vulnerabilities
Vulnerabilities for packages: crossplane, aactl, neuvector-sigstore-interface, kubescape, falcoctl, kyverno-notation-aws, ko, tekton-chains, tflint, ratify, policy-controller, trivy-operator, goreleaser, zarf, kyverno, gitsign, spire-server, teleport, slsa-verifier, tkn...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: argo-events, istio, loki, aactl, crossplane-provider-family-azure, nfpm, chisel, cosign, sealed-secrets, glab, cloud-provider-aws, dagger, flux, guac, melange, snyk-cli, chezmoi, zot, pulumi-language-dotnet, vault-benchmark, gomplate, prometheus-operator, fulcio,...
GO-2026-4354 vulnerabilities
Vulnerabilities for packages: trivy, aactl, neuvector-sigstore-interface, skaffold, tkn, cosign, kubescape, falcoctl, kyverno-notation-aws, zot, ko, gh, tekton-chains, tflint, flux-source-controller, witness, ratify, policy-controller, goreleaser, trivy-operator, zarf, vexctl, gitsign,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: aactl, neuvector-sigstore-interface, skaffold, cosign, kubescape, falcoctl, sigstore-scaffolding, kyverno-notation-aws, zot, ko, gh, tekton-chains, tflint, docker-cli-buildx, flux-source-controller, witness, ratify, policy-controller, goreleaser, zarf, vexctl, gitsig...
GO-2026-4358 vulnerabilities
Vulnerabilities for packages: trivy, docker-compose, aactl, neuvector-sigstore-interface, skaffold, tkn, cosign, kubescape, rekor, guac, falcoctl, sigstore-scaffolding, kyverno-notation-aws, zot, ko, gh, tekton-chains, undock, falco-no-driver, tflint, fulcio, portieris, flux-source-controller,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: trivy, crossplane, aactl, neuvector-sigstore-interface, skaffold, tkn, cosign, kubescape, falcoctl, sigstore-scaffolding, kyverno-notation-aws, zot, ko, gh, tekton-chains, tflint, docker, docker-cli-buildx, flux-source-controller, witness, ratify, policy-controller,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: trivy, aactl, neuvector-sigstore-interface, skaffold, tkn, cosign, kubescape, rekor, falcoctl, sigstore-scaffolding, kyverno-notation-aws, zot, ko, gh, tekton-chains, tflint, docker, flux-source-controller, witness, ratify, policy-controller, goreleaser,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nri-consul, argo-events, wire-go, aactl, amazon-cloudwatch-agent-operator, wgcf, kubernetes-dashboard-api, controller-gen, kubernetes-dashboard-auth, rclone, kapp, glow, rancher-system-upgrade-controller, swagger, flux, guac, delve, kyverno-notation-aws, zot,...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: trivy, aactl, neuvector-sigstore-interface, skaffold, tkn, cosign, kubescape, rekor, falcoctl, sigstore-scaffolding, kyverno-notation-aws, zot, ko, gh, tekton-chains, tflint, docker, flux-source-controller, witness, ratify, policy-controller, goreleaser,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: rabbitmq-messaging-topology-operator, argo-events, crossplane-provider-azure, aactl, kubernetes-event-exporter, neuvector-sigstore-interface, crossplane-provider-family-azure, tkn, flux-helm-controller, cosign, k3d, nuclei, glab, kubescape, rekor, flux, falcoctl,...
CVE-2026-25703
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
EUVD-2026-53297
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703
NeuVector up to version 5.4.9 potentially leaks information from the manager, specifically via the /network/graph API, due to missing authentication and cached data containing sensitive information. Affected component: NeuVector manager API surface; vulnerability arises from insufficient access c...
CVE-2026-25703 Potential information leakage from manager /network/graph API in NeuVector
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703 Potential information leakage from manager /network/graph API in NeuVector
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703: Missing Authentication for Critical Function
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...