GO-2026-5882 vulnerabilities

Vulnerabilities for packages: k9s-fips, drone, gitlab-operator, envoy-gateway-fips, consul-k8s-fips, crossplane-fips, gogatekeeper, jfrog-cli, manifest-tool, ratify, chaos-mesh, xeol, zarf, helm-exporter-fips, gitlab-operator-fips, ocm-cli, helm-push, kyverno-notation-aws-fips, k9s, ratify-fips,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: k9s-fips, argo-workflows-fips, nuclei, osv-scanner, flux, terragrunt-fips, gitlab-rails-ce, crossplane-fips, chainloop-cli-fips, gitsign, scorecard, witness, external-secrets-operator-fips, gitaly, tfsec, snyk-cli, chainloop-cli, goreleaser, grype-fips, pulumi,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: terraform, k9s-fips, splunk-otel-collector, argo-workflows-fips, flux-source-controller, nuclei, prometheus-podman-exporter-fips, prometheus-operator, harbor-fips, gitlab-kas, knative-kafka-broker, kubernetes, osv-scanner, flux, terragrunt-fips,...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: grafana, cri-tools, maru, malcontent, opentelemetry-collector, ollama, teleport, opentelemetry-collector-contrib, eksctl, k3s, prometheus, lazygit, tempo, dagger, dgraph, vcluster, weaviate, redpanda, terragrunt, nfpm, nuclei, mcp-grafana, kubevela, gitlab-runner,...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: k9s-fips, drone, gitlab-operator, envoy-gateway-fips, consul-k8s-fips, crossplane-fips, gogatekeeper, k8sgpt, jfrog-cli, manifest-tool, ratify, chaos-mesh, xeol, zarf, helm-exporter-fips, gitlab-operator-fips, ocm-cli, helm-push, kyverno-notation-aws-fips, k9s,...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: k9s-fips, drone, gitlab-operator, envoy-gateway-fips, consul-k8s-fips, crossplane-fips, gogatekeeper, k8sgpt, jfrog-cli, manifest-tool, ratify, chaos-mesh, xeol, zarf, helm-exporter-fips, gitlab-operator-fips, ocm-cli, helm-push, kyverno-notation-aws-fips, k9s,...

CVE-2026-50151 vulnerabilities

Vulnerabilities for packages: k9s-fips, drone, gitlab-operator, envoy-gateway-fips, consul-k8s-fips, crossplane-fips, gogatekeeper, jfrog-cli, manifest-tool, ratify, chaos-mesh, xeol, zarf, helm-exporter-fips, gitlab-operator-fips, ocm-cli, helm-push, kyverno-notation-aws-fips, k9s, ratify-fips,...

GHSA-JXPM-75MH-9FP7 vulnerabilities

Vulnerabilities for packages: k9s-fips, drone, gitlab-operator, envoy-gateway-fips, consul-k8s-fips, crossplane-fips, gogatekeeper, jfrog-cli, manifest-tool, ratify, chaos-mesh, xeol, zarf, helm-exporter-fips, gitlab-operator-fips, ocm-cli, helm-push, kyverno-notation-aws-fips, k9s, ratify-fips,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k9s-fips, datadog-agent-fips, gitlab-rails-ce, envoy-gateway-fips, consul-k8s-fips, crossplane-fips, helmfile, scorecard, buildkitd-fips, docker-fips, k8sgpt, grype-fips, amazon-ecs-agent, jfrog-cli, manifest-tool, newrelic-infrastructure-agent, wolfictl, chaos-mesh,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: k9s-fips, osv-scanner, datadog-agent-fips, opa-envoy, gitlab-rails-ce, envoy-gateway-fips, consul-k8s-fips, scorecard, buildkitd-fips, docker-fips, gogatekeeper, k8sgpt, grype-fips, amazon-ecs-agent, jfrog-cli, manifest-tool, newrelic-infrastructure-agent, wolfictl,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: k9s-fips, argo-workflows-fips, nuclei, osv-scanner, flux, terragrunt-fips, gitlab-rails-ce, crossplane-fips, chainloop-cli-fips, gitsign, scorecard, witness, external-secrets-operator-fips, gitaly, tfsec, snyk-cli, chainloop-cli, goreleaser, grype-fips, pulumi,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: k9s-fips, argo-workflows-fips, nuclei, osv-scanner, flux, terragrunt-fips, gitlab-rails-ce, crossplane-fips, chainloop-cli-fips, gitsign, scorecard, witness, external-secrets-operator-fips, gitaly, tfsec, snyk-cli, chainloop-cli, goreleaser, grype-fips, pulumi,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: k9s-fips, argo-workflows-fips, nuclei, osv-scanner, flux, terragrunt-fips, gitlab-rails-ce, crossplane-fips, chainloop-cli-fips, gitsign, scorecard, witness, external-secrets-operator-fips, gitaly, tfsec, snyk-cli, chainloop-cli, goreleaser, grype-fips, pulumi,...

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: grafana, cri-tools, maru, malcontent, opentelemetry-collector, ollama, teleport, opentelemetry-collector-contrib, eksctl, k3s, prometheus, lazygit, tempo, dagger, dgraph, vcluster, weaviate, redpanda, terragrunt, nfpm, nuclei, mcp-grafana, kubevela, gitlab-runner,...

CVE-2023-50976

Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API...

EUVD-2023-34868

Malicious code in bioql PyPI...

EUVD-2023-28634

Malicious code in bioql PyPI...

EUVD-2023-55703

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: addon-resizer-fips, gke-gcloud-auth-plugin, wave-fips, cloud-provider-azure, gofumpt, kubernetes-dashboard-web, kubebuilder, rook, victoriametrics-fips, beats, blob-csi, loki-fips, fluxcd-kustomize-mutating-webhook, eks-distro-fips, flux, atlantis,...

CVE-2023-30450

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...