CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: buf, dapr-fips, step-issuer-fips, caddy-fips, karma, step-ca-fips, step-issuer, kyverno-policy-reporter-ui, step-fips, gitness, rclone-fips, gogatekeeper, tkn-fips, step-ca, caddy, kyverno-policy-reporter-ui-fips, step, telegraf, sftpgo, rclone, cloudflared, dapr, tk...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: cloudflared, kyverno-policy-reporter-ui, tkn, karma, buf, sftpgo, caddy, rclone, gitness, step-ca, step, gogatekeeper, step-issuer...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: cloudflared, kyverno-policy-reporter-ui, tkn, karma, buf, sftpgo, caddy, rclone, gitness, step-ca, step, gogatekeeper, step-issuer...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: buf, dapr-fips, step-issuer-fips, caddy-fips, karma, step-ca-fips, step-issuer, kyverno-policy-reporter-ui, step-fips, gitness, rclone-fips, gogatekeeper, tkn-fips, step-ca, caddy, kyverno-policy-reporter-ui-fips, step, telegraf, sftpgo, rclone, cloudflared, dapr, tk...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, pulumi-language-dotnet, node-problem-detector, gitsign, k8sgpt, crossplane-provider-azure, metrics-server, step-ca, nats, nri-kubernetes, terraform-provider-google, tflint,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, q, spegel, traefik, ipfs-cluster, dkron, kubo, k8sgateway, k3s, caddy, frp, kubernetes-dns-node-cache, kargo...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: cloudflared, kyverno-policy-reporter-ui, tkn, karma, buf, sftpgo, caddy, rclone, gitness, step-ca, step, gogatekeeper, step-issuer...

GO-2026-5577 Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui...

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Summary Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses v-html for the else branch of the URL check, meaning any non-URL string value flows...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, q, spegel, traefik, ipfs-cluster, dkron, kubo, k8sgateway, k3s, caddy, frp, kubernetes-dns-node-cache, kargo...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: syncthing-fips, q, coredns, ipfs-cluster-fips, ipfs-cluster, caddy-fips, k3s, dkron, kubernetes-dns-node-cache, kyverno-policy-reporter-ui, rke2-runtime, kargo, spegel-fips, caddy, eks-distro, kyverno-policy-reporter-ui-fips, kubo, traefik-fips, traefik, kubo-fips,...