GO-2023-1793 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: airflow, rekor, secrets-store-csi-driver-provider-azure, bank-vaults, tempo, pulumi, goreleaser, guac, sigstore-scaffolding, velero, ksops, argo-workflows, zarf, k8sgpt, chezmoi, cortex, argo-events, fluent-bit-plugin-loki, policy-controller,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: cilium, argo-cd, crossplane, telegraf, kots, goreleaser, litestream, amazon-cloudwatch-agent-operator, cilium-cli, k8sgpt, contour, splunk-otel-collector, go, aactl, rabbitmq-cluster-operator, aws-flb-kinesis, ko, redpanda, flyte, step-issuer, gatus, prometheus,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, rabbitmq-messaging-topology-operator, tfsec, vertical-pod-autoscaler, ferretdb, newrelic-fluent-bit-output, pgpool2exporter,...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, clickhouse-operator, sftpgo-plugin-eventsearch, supercronic, temporal, victoriametrics, dbmate, goreleaser, osv-scanner, grafana-operator, aws-load-balancer-controller, stakater-reloader, flux-image-reflector-controller, go,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: authservice, jupyterhub-k8s-image-awaiter-fips, openbao, vault-k8s, crossplane-provider-aws-rds-fips, swagger, falco-exporter, sftpgo-plugin-kms, opentelemetry-operator, flyte, aws-privateca-issuer, aws-node-termination-handler-fips, amazon-ecs-agent-fips, db-operato...

EUVD-2023-1539

Malicious code in bioql PyPI...

EUVD-2022-0837

Malicious code in bioql PyPI...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: karma-fips, vault-k8s, nvidia-nsight-compute-12.8, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws, docker-credential-ecr-login, kubernetes-dashboard-fips, vexctl, kube-vip, blob-csi-fips, ctop, gostatsd, confluent-common-docker,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: karma-fips, vault-k8s, nvidia-nsight-compute-12.8, linkerd2-proxy-init, secrets-store-csi-driver-provider-aws, docker-credential-ecr-login, kubernetes-dashboard-fips, vexctl, kube-vip, blob-csi-fips, ctop, gostatsd, confluent-common-docker,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, memcached-exporter, vertical-pod-autoscaler, supercronic, ferretdb, newrelic-fluent-bit-output, vt-cli, dockerize, goreleaser, k3d, controller-gen, prometheus-alertmanager, nri-mysql, yq, k8sgpt, nri-couchbase, stakater-reloader,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: airflow, rekor, secrets-store-csi-driver-provider-azure, bank-vaults, tempo, pulumi, goreleaser, guac, sigstore-scaffolding, velero, ksops, argo-workflows, zarf, k8sgpt, chezmoi, cortex, argo-events, fluent-bit-plugin-loki, policy-controller,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k9s, falcosidekick, memcached-exporter, rabbitmq-messaging-topology-operator, supercronic, ferretdb, pgpool2exporter, vertical-pod-autoscaler, crossplane, crossplane-provider-aws-cloudformation, kots, goreleaser, k3d, cilium-cli, prometheus-alertmanager, k8sgpt,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: vault-k8s, secrets-store-csi-driver-provider-aws, kube-logging-operator, kube-oidc-proxy, crossplane-provider-aws-sqs, prometheus-postgres-exporter, atlantis-fips, smarter-device-manager-fips, flux-image-reflector-controller, fulcio-fips, hubble-fips,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: scorecard, kubeflow-fips, kubernetes-csi-livenessprobe-fips, aws-efs-csi-driver-fips, aactl, slsa-verifier, kiam, bank-vaults-fips, cortex, kube-oidc-proxy, prometheus-stackdriver-exporter, plutono-fips, terraform-provider-sendgrid, kubevela,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: dgraph, spark-operator, terraform-provider-sendgrid, kubescape, src, aactl, kubeflow, slsa-verifier, up, kubevela, buildkitd, scorecard, k3d, cortex...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: vault-k8s, metacontroller, secrets-store-csi-driver-provider-gcp, kube-logging-operator, kube-oidc-proxy, mc, prometheus-postgres-exporter, atlantis-fips, flux-source-controller, smarter-device-manager-fips, fuse-overlayfs-snapshotter, flux-image-reflector-controller...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: memcached-exporter, nghttp2, kots, k3d, stakater-reloader, pulumi-language-dotnet, weaviate, aactl, cosign, flux-helm-controller, ko, haproxy-ingress, certificate-transparency, kpt, buildkitd, kubevela, gomplate, rqlite, flux-source-controller, nri-prometheus,...