GO-2023-1793 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, py3-cassandra-medusa, chezmoi, bank-vaults, goreleaser, secrets-store-csi-driver-provider-azure, k8sgpt, restic, harbor-registry, guac, rook, rekor, opentelemetry-collector-contrib, policy-controller, zot, falcoctl, sops,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: runc, terraform-provider-acme, kyverno, dask-gateway, gatekeeper, gitaly, goreleaser, k8ssandra-client, k8sgpt, apko, karpenter, gitlab-pages, nerdctl, lazydocker, cilium, opencost, skopeo, terraform-provider-tls, step-issuer, sftpgo-plugin-eventstore, argo-events,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cosign, runc, crossplane-provider-aws-elasticache, go-licenses, http-echo, kapp-controller, kubernetes-dns-node-cache, dask-gateway, rancher-loglevel, spark-operator, sftpgo-plugin-kms, gatekeeper, goreleaser, kubeflow, minio-operator, kserve-modelmesh-serving,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-FP92201 Security fixes in secrets-store-csi-driver-provider-gcp 1.15.0-r1

Package secrets-store-csi-driver-provider-gcp version 1.15.0-r1 fixes 21 vulnerabilities: CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, terraform-provider-acme, continuity, spark-operator, sftpgo-plugin-kms, kube-vip, gatekeeper, apko, kube-vip-cloud-provider, src-fingerprint, gitlab-pages, pdfcpu, policy-controller, temporal-ui-server, kubescape-operator,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dataplaneapi, dbmate, clickhouse-operator, flux-source-controller, ingress-nginx-controller, go, oras, newrelic-k8s-metadata-injection, goreleaser, hubble, flux-image-automation-controller, smarter-device-manager, apko, rabbitmq-messaging-topology-operator, karpenter...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: malcontent, yunikorn-k8shim-fips, wgcf, hydra-fips, kafkaexporter, spicedb-operator, zitadel, longhorn-cli, aws-application-networking-k8s, flux-kustomize-controller, docker, emqx-exporter-fips, cloud-provider-azure-fips, cloud-provider-azure,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: malcontent, yunikorn-k8shim-fips, wgcf, hydra-fips, kafkaexporter, spicedb-operator, zitadel, longhorn-cli, aws-application-networking-k8s, flux-kustomize-controller, docker, emqx-exporter-fips, cloud-provider-azure-fips, cloud-provider-azure,...

EUVD-2022-0837

Malicious code in bioql PyPI...

EUVD-2023-1539

Malicious code in bioql PyPI...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: dagdotdev, bank-vaults, kube-vip, cloud-provider-aws, container-object-storage-interface, custom-pod-autoscaler-operator, ctop, kube-vip-cloud-provider, kuberay-operator, grafana-operator, kubeflow-katib, k8sgpt-operator, terraform-provider-time, shfmt, vault-k8s,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-custom-runner-fips, knative-eventing, karpenter-fips, cloud-provider-aws-fips, nvidia-nsight-compute-13.0, k8sgpt-operator, gostatsd, newrelic-nri-statsd, vault-k8s, custom-pod-autoscaler-operator, octo-sts, prometheus-adapter, cluster-api,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-custom-runner-fips, knative-eventing, karpenter-fips, cloud-provider-aws-fips, nvidia-nsight-compute-13.0, k8sgpt-operator, gostatsd, newrelic-nri-statsd, vault-k8s, custom-pod-autoscaler-operator, octo-sts, prometheus-adapter, cluster-api,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, runc, memcached-exporter, cluster-proportional-autoscaler, go-licenses, http-echo, cni-plugins, kubernetes-dns-node-cache, dask-gateway, spark-operator, wire-go, goreleaser, cadvisor, k8sgpt, smarter-device-manager, sbom-scorecard, kuberay-operator...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, py3-cassandra-medusa, chezmoi, bank-vaults, goreleaser, secrets-store-csi-driver-provider-azure, k8sgpt, restic, harbor-registry, guac, rook, rekor, opentelemetry-collector-contrib, policy-controller, zot, falcoctl, sops,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cosign, runc, crossplane-provider-aws-elasticache, memcached-exporter, cluster-proportional-autoscaler, kaniko, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, spark-operator, crossplane-provider-aws-memorydb, goreleaser, kubeflow, cadvisor,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: trivy, flux-kustomize-controller, docker, scorecard, crossplane-provider-aws-dynamodb, kubeflow, prometheus-redis-exporter, pulumi-language-dotnet, doppler-kubernetes-operator, rabbitmq-cluster-operator, grpcurl, slsa-verifier, gitness, k8ssandra-operator,...