GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tflint-fips, cloudbeat, spire-server-fips, docker-fips, kubescape-server-fips, trivy, ratify, zarf, cloudbeat-fips, zarf-fips, trivy-fips, neuvector-sigstore-interface-fips, kyverno-notation-aws, kubescape, policy-controller-fips, trivy-operator, tekton-chains-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: tkn, gitsign, kubescape, tflint, policy-controller, falcoctl, ratify, crossplane, trivy-operator, trivy, tekton-chains, aactl, zarf, neuvector-sigstore-interface, kyverno-notation-aws, kyverno...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: tkn, gitsign, kubescape, tflint, policy-controller, falcoctl, ratify, crossplane, trivy-operator, trivy, tekton-chains, aactl, zarf, neuvector-sigstore-interface, kyverno-notation-aws, kyverno...

CVE-2025-66001 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

GHSA-4JJ9-CGQC-X9H5 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: tflint-fips, cloudbeat, slsa-verifier, spire-server-fips, docker-fips, kubescape-server-fips, ratify, zarf, cloudbeat-fips, zarf-fips, neuvector-sigstore-interface-fips, spire-server, kyverno-notation-aws, kubescape, policy-controller-fips,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: tflint-fips, cloudbeat, slsa-verifier, spire-server-fips, docker-fips, kubescape-server-fips, ratify, zarf, cloudbeat-fips, zarf-fips, neuvector-sigstore-interface-fips, spire-server, kyverno-notation-aws, kubescape, policy-controller-fips,...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, neuvector-sigstore-interface, kyverno, teleport, kubescape, ratify, aactl, zarf, kyverno-notation-aws, gitsign, falcoctl, crossplane, trivy-operator, tekton-chains, slsa-verifier, ko, tkn, tflint, goreleaser...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, neuvector-sigstore-interface, kyverno, teleport, kubescape, ratify, aactl, zarf, kyverno-notation-aws, gitsign, falcoctl, crossplane, trivy-operator, tekton-chains, slsa-verifier, ko, tkn, tflint, goreleaser...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kgateway, kubescape-operator-fips, cg, chaos-mesh-fips, chartmuseum, k9s-fips, helm-exporter-fips, kube-mgmt, zarf, envoy-gateway, zarf-fips, tekton-pipelines-fips, trivy-fips, harvester-fips, neuvector, docker-cli-buildx-fips, helm-operator, buildkitd-fips, kubescap...