GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: zarf-fips, harbor, osv-scanner, rancher, knative-eventing-fips, spire-server, k9s-fips, argocd-image-updater, vitess, docker-machine-driver-harvester, trivy-fips, cloudbeat, mattermost, prometheus-mongodb-exporter, flux-image-automation-controller-fips, snyk-cli,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, rancher, chisel, spire-server, fscrypt, kaf, kubescape, rancher-agent, flux-source-controller, flux-image-automation-controller, knative-serving, minio, external-dns, telegraf, vitess, cilium, k9s, skaffold, kubernetes,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: snyk-cli, chisel, pulumi-language-yaml, terragrunt, ksops, gomplate, wolfictl, caddy, fulcio, vault-benchmark, telegraf, cosign, dagger, witness, podman, pulumi-language-java, helm, kots, step-issuer, prometheus, crossplane-provider-azure-authorization, gh,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kubevela, packer-fips, src-fingerprint, tfsec, zarf-fips, xeol, osv-scanner, k9s-fips, argocd-image-updater, grype-db, pulumi-kubernetes-operator, trivy-fips, argo-events, apko, melange, cloudbeat, amazon-ssm-agent, external-secrets-operator, nuclei, trufflehog-fips,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: neuvector-scanner, envoy-gateway, rancher-fleet, kubescape, xeol, flux-source-controller, helm-push, wolfictl, flux-helm-controller, docker, spegel, ctop, cert-manager-cmctl, cluster-api-helm-controller, opa-envoy, k8ssandra-client, docker-compose, melange,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, pulumi-kubernetes-operator, melange, timoni, crossplane-provider-aws, cortex, docker-credential-acr-env, gosu, secrets-store-csi-driver, govulncheck, http-echo, sonobuoy, q, git-lfs, ctop, capslock, multus-cni-fips, crane,...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...