3030 matches found
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: chartmuseum-fips, gatekeeper, kube-arangodb-fips, conftest, headlamp, k9s-fips, argo-cd, commercial-kyverno, ocm-kubernetes-controller-fips, rancher-helm, kubescape-server, envoy-gateway-fips, cloudbeat, tw, kubescape-operator-fips, kube-mgmt, eksctl, ocm-cli,...
GO-2025-3602 vulnerabilities
Vulnerabilities for packages: chart-testing, cert-manager-cmctl, cluster-api-helm-controller, chartmuseum, rancher-helm, helm-push, flux-helm-controller, helm-docs, kubescape, flux-source-controller, trivy, helm-operator, zot, k9s, k8ssandra-client, zarf, cilium-cli, tw, kots, eksctl, pluto, flux...
GO-2024-2554 vulnerabilities
Vulnerabilities for packages: chartmuseum, k8sgpt, helm-push, flux-helm-controller, kubevela, zarf, cilium-cli, kubescape, helm-operator, kots, trivy, up, eksctl, zot, flux-source-controller, k9s...
GO-2024-2575 vulnerabilities
Vulnerabilities for packages: chartmuseum, k8sgpt, helm-push, flux-helm-controller, kubevela, zarf, cilium-cli, kubescape, helm-operator, kots, trivy, up, eksctl, zot, flux-source-controller, k9s...
GO-2026-5666 vulnerabilities
Vulnerabilities for packages: helm-push, cert-manager-cmctl, kuma, cilium-cli, zarf, rancher-fleet, kots, flux-source-controller, flux...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, helm, kaniko, gitness, k8sgpt, helm-push, flux-helm-controller, kubevela, buildkitd, kubescape, flux-source-controller, grype, trivy, up, zot, cilium-cli, melange, kots, skaffold, fuse-overlayfs-snapshotter, eksctl, k3d, ctop...
GO-2025-4100 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, cert-manager-cmctl, dagger, cluster-api-helm-controller, newrelic-infrastructure-agent, steampipe, xeol, headlamp, helm, falco-no-driver, nerdctl, syft, kaniko, envoy-gateway, chartmuseum, k8sgpt, rancher-helm, helm-push, flux-helm-controller,...
GO-2025-4108 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, cert-manager-cmctl, dagger, cluster-api-helm-controller, newrelic-infrastructure-agent, steampipe, xeol, headlamp, helm, falco-no-driver, nerdctl, syft, kaniko, envoy-gateway, chartmuseum, k8sgpt, rancher-helm, helm-push, flux-helm-controller,...
GO-2025-3802 vulnerabilities
Vulnerabilities for packages: chart-testing, cert-manager-cmctl, cluster-api-helm-controller, envoy-gateway, chartmuseum, k8sgpt, rancher-helm, helm-push, flux-helm-controller, linkerd2, rancher-fleet, helm-docs, istio, flux-source-controller, trivy, helm-operator, zot, k9s, k8ssandra-client, zar...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: grype, neuvector-scanner, helm-push, kaniko, dagger, melange, cri-tools, docker-compose, policy-controller, buf, wolfictl, syft, k3d, harbor-scanner-trivy...
CVE-2026-58437 Repository Visibility Manipulation via Git Push Options
Repository Visibility Manipulation via Git Push Options...
CVE-2026-58437 Repository Visibility Manipulation via Git Push Options
Repository Visibility Manipulation via Git Push Options...
CVE-2026-58437
Repository Visibility Manipulation via Git Push Options...
EUVD-2026-58164
Repository Visibility Manipulation via Git Push Options...
CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
UBUNTU-CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
EUVD-2026-57794
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...
CVE-2026-73625: Improper Neutralization of Special Elements used in an OS Command
GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clonefrom, fetch, pull, push, lsremote, itercommit...