GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: mattermost-fips, telegraf, argocd-image-updater-fips, seaweedfs-rocksdb, coder, docker-machine-driver-harvester, mattermost, zitadel, prometheus, frankenphp-8.5, trivy-operator, elastic-agent-fips, cert-manager, argo-workflows-fips, coder-fips, prometheus-fips, harbo...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cert-manager, cloud-provider-aws, telegraf, zarf, kaf, loki, rancher-agent, argocd-image-updater, kubernetes, istio, containerd, snyk-cli, flux-image-automation-controller, kubescape, kubernetes-dashboard, prometheus, trivy, rancher, vitess, helm, knative-serving,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: hcloud, podman, steampipe, zarf, caddy, loki, dagger, flux-kustomize-controller, kubernetes, policy-controller, istio, opentofu, grype, kargo, flux-image-automation-controller, crossplane-provider-azure-authorization, eksctl, rancher, chezmoi, falcoctl, tflint,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, gomplate, terragrunt, syft-fips, pulumi-language-yaml, trivy-operator, terragrunt-fips, chainloop-cli-fips, nuclei, gitsign, syft, argo-workflows-fips, src-fingerprint-fips, nemo, gitlab-runner, kubescape-server, cerbos, flux, grype, cg,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zarf, docker-compose, neuvector-scanner, helm-push, dagger, opa, wolfictl, envoy-gateway, cert-manager-cmctl, gatekeeper, grype, kargo, kubescape, flux-helm-controller, eksctl, helm-operator, chartmuseum, kubevela, k8sgpt, newrelic-infrastructure-agent,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, kind, eksctl, atlantis-fips, extism, caddy, prometheus-redis-exporter-fips, dask-gateway, oauth2-proxy, harbor-registry-fips, prometheus-mongodb-exporter-fips, bank-vaults, wavefront-collector-for-kubernetes, cert-exporter-fips,...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...