GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: crossplane, k9s, gitsign, nfpm, act, witness, syft, kubescape, xeol, flux-source-controller, scorecard, grafana-alloy, pulumi-language-dotnet, argo-cd, skaffold, tfsec, dagger, gitea, cerbos, kaniko, guac, wolfictl, grype, zot, argocd-image-updater,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: src-fingerprint, kots, xeol-fips, dagger, rancher-fleet, flux, gitlab-runner-fips, skaffold-fips, coder, flux-source-controller, apko-fips, grype-db, argo-workflows-fips, kubevela, k9s, argo-events, trivy-fips, zot, cerbos-fips, crossplane, amazon-ssm-agent-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: src-fingerprint, kots, xeol-fips, dagger, rancher-fleet, flux, gitlab-runner-fips, skaffold-fips, coder, flux-source-controller, apko-fips, grype-db, argo-workflows-fips, kubevela, k9s, argo-events, trivy-fips, zot, cerbos-fips, crossplane, amazon-ssm-agent-fips,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: src-fingerprint, flux-source-controller-fips, kots, xeol-fips, dagger, rancher-fleet, flux, gitlab-runner-fips, skaffold-fips, flux-source-controller, apko-fips, grype-db, argo-workflows-fips, kubevela, k9s, argo-events, trivy-fips, zot, cerbos-fips, crossplane,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: src-fingerprint, flux-source-controller-fips, kots, xeol-fips, dagger, rancher-fleet, flux, gitlab-runner-fips, skaffold-fips, flux-source-controller, apko-fips, grype-db, argo-workflows-fips, kubevela, k9s, argo-events, trivy-fips, zot, cerbos-fips, crossplane,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: crossplane, k9s, gitsign, nfpm, witness, syft, kubescape, xeol, flux-source-controller, scorecard, chezmoi, grafana-alloy, pulumi-language-dotnet, argo-cd, skaffold, tfsec, dagger, gitea, cerbos, kaniko, guac, wolfictl, grype, zot, argocd-image-updater,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: crossplane, k9s, gitsign, nfpm, witness, syft, kubescape, xeol, flux-source-controller, scorecard, chezmoi, grafana-alloy, pulumi-language-dotnet, argo-cd, skaffold, tfsec, dagger, gitea, cerbos, kaniko, guac, wolfictl, grype, zot, argocd-image-updater,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: crossplane, k9s, gitsign, nfpm, witness, syft, kubescape, xeol, flux-source-controller, scorecard, chezmoi, grafana-alloy, pulumi-language-dotnet, argo-cd, skaffold, tfsec, dagger, gitea, cerbos, kaniko, guac, wolfictl, grype, zot, argocd-image-updater,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: crossplane, k9s, gitsign, nfpm, witness, syft, kubescape, xeol, flux-source-controller, scorecard, chezmoi, grafana-alloy, pulumi-language-dotnet, argo-cd, skaffold, tfsec, dagger, gitea, cerbos, kaniko, guac, wolfictl, grype, zot, argocd-image-updater,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: aactl, k9s, cert-manager-cmctl, syft, kubescape, cluster-api, pulumi-language-dotnet, flux-kustomize-controller, crossplane-provider-keycloak, dagger, nuclei, crossplane-provider-family-azure, crossplane-provider-aws-memorydb, gptscript, osv-scanner, vcluster,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: aactl, k9s, cert-manager-cmctl, syft, kubescape, cluster-api, pulumi-language-dotnet, flux-kustomize-controller, crossplane-provider-keycloak, dagger, nuclei, crossplane-provider-family-azure, crossplane-provider-aws-memorydb, gptscript, osv-scanner, vcluster,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: src-fingerprint, hydra-fips, terraform-fips, crossplane-provider-keycloak, flux-source-controller-fips, crossplane-provider-aws-cloudfront, kots, gitness, xeol-fips, dagger, crossplane-provider-aws-ecr, rancher-fleet, cilium-cli, flux, helm-diff-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, stakater-reloader, buf, kubernetes-dashboard-fips, flux, cilium, flux-image-reflector-controller, dex, kubeflow-katib, prometheus-node-exporter, aws-ebs-csi-driver, gh, zot, metacontroller, gcsfuse, cass-operator, terraform-provider-sendgri...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, aactl, spark-operator, k3d, cortex, src, terraform-provider-sendgrid, dgraph, prometheus-blackbox-exporter, up, kubevela, kubescape, buildkitd, scorecard, slsa-verifier, kubeflow...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: smarter-device-manager-fips, prometheus-stackdriver-exporter, aactl, volume-modifier-for-k8s-fips, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, cortex, kubernetes-csi-livenessprobe, kubeflow, bank-vaults-fips, cluster-autoscaler-fips, conftest-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: aactl, src, dgraph, kubescape, secrets-store-csi-driver, hugo, nginx-stable, minio, cortex, pulumi-language-dotnet, flux-kustomize-controller, wireguard-go, gobuster, nri-prometheus, buildkitd, ip-masq-agent, newrelic-infrastructure-agent, terraform-provider-azurerm,...