GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, falco-no-driver, helm, trivy-operator, redpanda-operator, rancher, syft, consul-k8s-fips, amazon-ecs-agent, helmfile, trivy-operator-fips, tigera-operator, neuvector, chaos-mesh-fips, kubescape-server-fips, spegel, headlamp-fips, rancher-agent...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, falco-no-driver, helm, trivy-operator, redpanda-operator, rancher, syft, consul-k8s-fips, amazon-ecs-agent, helmfile, trivy-operator-fips, tigera-operator, neuvector, chaos-mesh-fips, kubescape-server-fips, spegel, headlamp-fips, rancher-agent...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8PXW-9C75-6W56 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-8077 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

The vulnerability of the NeuVector Enforcer security container arises from the lack of data cleaning at the management level, allowing a perpetrator to execute arbitrary code and trigger a service failure.

The vulnerability of the NeuVector Enforcer security container is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and trigger a service failure...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, buf, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, lazygit, nuclei, mcp-grafana, yunikorn-k8shim, mkcert, crossplane-provider-azure-storage, nsc, percona-server-mongodb-operator, configmap-reload, ingress-nginx-controller...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: delve, bento, vexctl, tkn, dask-gateway, nginx-prometheus-exporter, cerbos, kargo, kubescape, kyverno-policy-reporter-ui, nerdctl, pulumi-language-java, helm-set-status, k8ssandra-client, nuclei, cloud-provider-vsphere, dataplaneapi, boring-registry, bom, mcp-grafana...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, gitsign, goose, langfuse-fips, otel-cli, flux-helm-controller, snyk-cli, cluster-api, ytt, gpu-operator-fips, k8ssandra-operator, flux-operator-fips, kafka-proxy, crossplane-provider-aws-lambda-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: aws-fsx-csi-driver-fips, cephcsi, langfuse-fips, smarter-device-manager, gpu-operator-fips, crossplane-provider-aws-lambda-fips, terraform-provider-sendgrid-fips, argocd-image-updater, istio-fips, falcoctl-fips, extism, atlantis, hcloud, amazon-k8s-cni-fips,...

CLEANSTART-2026-KJ56465 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 5.4.8-r0

Multiple security vulnerabilities affect the neuvector-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33487 vulnerabilities

Vulnerabilities for packages: mattermost-fips, commercial-grafana, dex, rancher-agent, teleport, teleport-operator-fips, mattermost, omni-fips, zitadel, neuvector, neuvector-fips, gotrue-fips, gotrue, omni, rancher, dex-fips...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860

NeuVector scanner (CVE-2025-67860) is affected: the scanner process accepts registry and controller credentials via command-line arguments, potentially exposing sensitive credentials to local users. Root cause: credentials handled in command-line context. Impact: limited confidentiality risk (Low...

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

CVE-2025-67860 NeuVector scanner insecurely handles passwords as command arguments

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...