Lucene search
+L

40 matches found

Wolfi
Wolfi
added 2026/08/20 2:16 a.m.27 views

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: tekton-chains, helm-operator, telegraf, cluster-autoscaler, zot, opentelemetry-operator, hubble, kubernetes-csi-external-health-monitor, k3s, datadog-operator, yunikorn-k8shim, kuma, argocd-image-updater, spicedb, gatekeeper, rancher, kubescape-operator,...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.22 views

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, librechat, victoriametrics-cluster-fips, victoriametrics, omnictl-multiarch, flux-image-automation-controller, amazon-k8s-cni-fips, flux-source-controller, grafana-fips, localstack, cluster-autoscaler-fips, flux-notification-controller,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.16 views

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, podman, tekton-chains, crossplane-provider-aws-sns, buildah, docker-compose, gitea, crossplane-provider-aws-cloudfront, crossplane-provider-azure-managedidentity, telegraf, mattermost, opentofu, chisel, neuvector-sigstore-interface,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.19 views

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: wave, crossplane-provider-aws-sns, timoni, helm-operator, amass, crossplane-provider-aws-cloudfront, local-path-provisioner, k3d, ferretdb, secrets-store-csi-driver, mattermost, telegraf, nri-mongodb, kubernetes-event-exporter, undock, opentofu, chisel,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.15 views

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, tekton-chains, fulcio, falcoctl, grafana-mimir, flux-image-automation-controller, k3d, crossplane-provider-azure-managedidentity, flux, slsa-verifier, buildkitd, timestamp-authority, kubernetes-event-exporter, gh,...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/08 8:22 a.m.18 views

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/08 8:22 a.m.21 views

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

6.3CVSS5.9AI score0.00413EPSS
SaveExploits1
Chainguard
Chainguard
added 2026/08/08 8:22 a.m.20 views

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/08 8:22 a.m.20 views

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

7.1CVSS5.9AI score0.00357EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/08/08 8:22 a.m.18 views

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: steampipe, kots, crossplane, gitea, flux-image-automation-controller, gitaly, syft, flux, grype, scorecard, gomplate, pulumi, flux-notification-controller, pulumi-language-java, skaffold, rancher-fleet, kubescape, argo-events, external-secrets-operator, kyverno,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/08 8:22 a.m.21 views

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: steampipe, kots, crossplane, gitea, flux-image-automation-controller, gitaly, syft, flux, grype, scorecard, gomplate, pulumi, flux-notification-controller, pulumi-language-java, skaffold, rancher-fleet, kubescape, argo-events, external-secrets-operator, kyverno,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/08 8:22 a.m.21 views

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: steampipe, kots, crossplane, gitea, flux-image-automation-controller, gitaly, syft, flux, grype, scorecard, gomplate, pulumi, flux-notification-controller, pulumi-language-java, skaffold, rancher-fleet, kubescape, argo-events, external-secrets-operator, kyverno,...

6.3CVSS5.9AI score0.00413EPSS
SaveExploits1
Wolfi
Wolfi
added 2026/08/08 8:22 a.m.21 views

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: steampipe, kots, crossplane, gitea, flux-image-automation-controller, gitaly, syft, flux, grype, scorecard, gomplate, pulumi, flux-notification-controller, pulumi-language-java, skaffold, rancher-fleet, kubescape, argo-events, external-secrets-operator, kyverno,...

7.1CVSS5.9AI score0.00357EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/26 8:22 p.m.28 views

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, podman, tekton-chains, crossplane-provider-aws-sns, buildah, docker-compose, gitea, crossplane-provider-aws-cloudfront, crossplane-provider-azure-managedidentity, telegraf, mattermost, opentofu, chisel, neuvector-sigstore-interface,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/26 8:22 p.m.25 views

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: podman, tekton-chains, buildah, gitea, crossplane-provider-azure-managedidentity, telegraf, mattermost, opentofu, chisel, neuvector-sigstore-interface, rancher-machine, glab, prometheus-operator, tflint, loki, zot, k3s, nerdctl, cosign, dagger, kargo, caddy,...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/06/25 10:34 p.m.13 views

GO-2026-5419 Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering in github.com/fluxcd/notification-controller

Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering in github.com/fluxcd/notification-controller...

3.1CVSS5.8AI score0.00127EPSS
SaveExploits0References4
Wolfi
Wolfi
added 2026/06/19 8:24 p.m.22 views

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, podman, envoy-ratelimit, tekton-chains, crossplane-provider-aws-sns, buildah, docker-compose, helm-operator, dgraph, crossplane-provider-aws-cloudfront, gitaly, crossplane-provider-azure-managedidentity, ferretdb, cloudprober,...

5.3CVSS6.1AI score0.00336EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/19 8:24 p.m.34 views

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, podman, envoy-ratelimit, tekton-chains, crossplane-provider-aws-sns, buildah, docker-compose, helm-operator, dgraph, crossplane-provider-aws-cloudfront, gitaly, crossplane-provider-azure-managedidentity, ferretdb, cloudprober,...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/04/14 11:25 p.m.13 views

SUSE CVE-2026-40109

Flux notification-controller is the event forwarder and notification dispatcher for the GitOps Toolkit controllers. Prior to 1.8.3, the gcr Receiver type in Flux notification-controller does not validate the email claim of Google OIDC tokens used for Pub/Sub push authentication. This allows any...

3.1CVSS5.8AI score0.00127EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.11 views

CVE-2026-40109

Flux notification-controller is the event forwarder and notification dispatcher for the GitOps Toolkit controllers. Prior to 1.8.3, the gcr Receiver type in Flux notification-controller does not validate the email claim of Google OIDC tokens used for Pub/Sub push authentication. This allows any...

3.1CVSS5.8AI score0.00127EPSS
SaveExploits0References1
Rows per page
Query Builder