GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, coder, knative-serving, kube-state-metrics, kyverno-fips, drone, snyk-cli, k9s-fips, k9s, kube-arangodb-fips, vitess, argo-cd, gitea, kubernetes-dashboard, chisel-fips, opentelemetry-collector, knative-serving-fips, kots, spire-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, tekton-chains, external-dns, nfpm, step-issuer, rancher, spire-server, k8sgpt, kine, crossplane-provider-azure-authorization, dagger, fulcio, vault-benchmark, flux-image-automation-controller, wolfictl, podman, pulumi, melange, zot,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, zarf, chisel, argocd-image-updater, gitlab-kas, containerd, external-dns, kubernetes, minio, cilium, rancher, spire-server, k3s, gitea, trivy-operator, cilium-cli, kine, knative-serving, helm, flux-image-automation-controller, istio, prometheus, osv-scanner,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kyverno, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, k9s-fips, grafana-fips, k9s, kaniko, argo-cd, gitea, goreleaser, dagger, witness, guac, kots, mapotf, pulumi, osv-scanner, flux-source-controller-fips,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: trivy, zarf, docker, newrelic-infrastructure-agent, docker-cli-buildx, cluster-api-helm-controller, envoy-gateway, spegel, cert-manager-cmctl, k3s, buildkitd, k8sgpt, fuse-overlayfs-snapshotter, opa, ctop, cilium-cli, eksctl, helm, dagger, xeol, neuvector-scanner,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, tekton-chains, tempo, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, cri-tools, secrets-store-csi-driver-provider-gcp, sops, flyte, glab, kubernetes-dashboard-metrics-scraper-fips, kube-state-metrics, cadvisor-fips, cosign,...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...