GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: image-factory-fips, neuvector-sigstore-interface, kubescape-server-fips, kubescape, kyverno-notation-aws, commercial-kyverno, falcoctl-fips, zarf-fips, trivy-operator-fips, trivy, aactl, ratify, tekton-chains-fips, spire-server-fips, cloudbeat, kyverno,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: ratify, zarf, kyverno, tkn, aactl, policy-controller, gitsign, tekton-chains, kyverno-notation-aws, kubescape, neuvector-sigstore-interface, crossplane, tflint, falcoctl, trivy-operator, trivy...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: ratify, zarf, kyverno, tkn, aactl, policy-controller, gitsign, tekton-chains, kyverno-notation-aws, kubescape, neuvector-sigstore-interface, crossplane, tflint, falcoctl, trivy-operator, trivy...

CVE-2025-66001 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

GHSA-4JJ9-CGQC-X9H5 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent

Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kubescape-server-fips, kubescape, kyverno-notation-aws, commercial-kyverno, falcoctl-fips, ko-fips, zarf-fips, trivy-operator-fips, goreleaser, aactl, ratify, tekton-chains-fips, ko, spire-server-fips, cloudbeat, kyverno,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, kubescape-server-fips, kubescape, kyverno-notation-aws, commercial-kyverno, falcoctl-fips, ko-fips, zarf-fips, trivy-operator-fips, goreleaser, aactl, ratify, tekton-chains-fips, ko, spire-server-fips, cloudbeat, kyverno,...

GHSA-47Q9-M4WW-924M vulnerabilities

Vulnerabilities for packages: ko, kyverno, teleport, spire-server, tkn, goreleaser, neuvector-sigstore-interface, kubescape, trivy-operator, ratify, aactl, gitsign, slsa-verifier, tekton-chains, falcoctl, policy-controller, kyverno-notation-aws, crossplane, zarf, tflint...

CVE-2026-48702 vulnerabilities

Vulnerabilities for packages: ko, kyverno, teleport, spire-server, tkn, goreleaser, neuvector-sigstore-interface, kubescape, trivy-operator, ratify, aactl, gitsign, slsa-verifier, tekton-chains, falcoctl, policy-controller, kyverno-notation-aws, crossplane, zarf, tflint...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kots, helmfile, headlamp-fips, zarf-fips, kubescape-operator-fips, docker-cli-buildx-fips, k8ssandra-client, beats, cloudbeat, cluster-api-helm-controller, docker-compose-fips, kubevela, tekton-pipelines-fips, chaos-mesh, kube-arangodb, harvester-fips, envoy-gateway,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kots, helmfile, headlamp-fips, zarf-fips, kubescape-operator-fips, docker-cli-buildx-fips, k8ssandra-client, beats, cloudbeat, cluster-api-helm-controller, docker-compose-fips, kubevela, tekton-pipelines-fips, chaos-mesh, kube-arangodb, harvester-fips, envoy-gateway,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kots, helmfile, headlamp-fips, zarf-fips, kubescape-operator-fips, docker-cli-buildx-fips, k8ssandra-client, beats, cloudbeat, cluster-api-helm-controller, docker-compose-fips, kubevela, tekton-pipelines-fips, chaos-mesh, kube-arangodb, harvester-fips, envoy-gateway,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kots, helmfile, headlamp-fips, zarf-fips, kubescape-operator-fips, docker-cli-buildx-fips, k8ssandra-client, beats, cloudbeat, cluster-api-helm-controller, docker-compose-fips, kubevela, tekton-pipelines-fips, chaos-mesh, kube-arangodb, harvester-fips, envoy-gateway,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kots, helmfile, headlamp-fips, zarf-fips, kubescape-operator-fips, docker-cli-buildx-fips, k8ssandra-client, beats, cloudbeat, cluster-api-helm-controller, docker-compose-fips, kubevela, tekton-pipelines-fips, chaos-mesh, kube-arangodb, harvester-fips, envoy-gateway,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: kots, helmfile, headlamp-fips, zarf-fips, kubescape-operator-fips, docker-cli-buildx-fips, k8ssandra-client, beats, cloudbeat, cluster-api-helm-controller, docker-compose-fips, kubevela, tekton-pipelines-fips, chaos-mesh, kube-arangodb, harvester-fips, envoy-gateway,...