CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, knative-serving, kube-state-metrics, kyverno-fips, snyk-cli, kube-arangodb-fips, vitess, argo-cd, kubernetes-dashboard, opentelemetry-collector, knative-serving-fips, kots, spire-server, gatekeeper-fips, buildah, cilium, mattermost-fips,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, grype-db, knative-serving, kube-state-metrics, pulumi-language-dotnet, kyverno-fips, snyk-cli, k9s-fips, k9s, kube-arangodb-fips, vitess, argo-cd, gitea, kubernetes-dashboard, opentelemetry-collector, knative-serving-fips, dagger, witness,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-azure-solutions, telegraf, fscrypt, coder, grype-db, tekton-chains, juicefs, knative-serving, kargo, cluster-api-azure-controller-fips, terraform-provider-azurerm-fips, crossplane-fips, crossplane-provider-azure-securityinsights,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-azure-solutions, telegraf, fscrypt, coder, grype-db, tekton-chains, juicefs, knative-serving, kargo, cluster-api-azure-controller-fips, terraform-provider-azurerm-fips, crossplane-fips, crossplane-provider-azure-securityinsights,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, telegraf, grype-db, tekton-chains, crossplane-provider-family-aws, kargo, crossplane-provider-keycloak, crossplane-fips, crossplane-provider-azure-securityinsights, flux-kustomize-controller-fips, glab, longhorn-cli-fips,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: trivy, guac, trufflehog, zarf, nuclei, argocd-image-updater, gomplate, argo-workflows, cerbos, nfpm, gitaly, gitea, trivy-operator, tfsec, grafana-alloy, dagger, xeol, flux-image-automation-controller, scorecard, wolfictl, kaniko, grype, external-secrets-operator,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: kyverno, coder, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, k9s-fips, k9s, kaniko, argo-cd, gitea, goreleaser, dagger, witness, guac, kots, mapotf, pulumi, osv-scanner, chainctl-fips, jfrog-cli, trufflehog-fip...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kyverno, grype-db, kargo, crossplane-fips, grafana-alloy-fips, pulumi-language-dotnet, kyverno-fips, snyk-cli, k9s-fips, grafana-fips, k9s, kaniko, argo-cd, gitea, goreleaser, dagger, witness, guac, kots, mapotf, pulumi, osv-scanner, flux-source-controller-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, crossplane-provider-family-aws, terraform-provider-azuread, crossplane-provider-aws-memorydb, nfpm, cluster-api, crossplane-provider-aws-elasticache, q, crossplane-provider-azure-authorization, dagger, xeol, flux-image-automation-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trivy, zarf, wal-g, crossplane-provider-family-aws, terraform-provider-azuread, crossplane-provider-aws-memorydb, nfpm, cluster-api, crossplane-provider-aws-elasticache, q, crossplane-provider-azure-authorization, dagger, xeol, flux-image-automation-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno, crossplane-provider-aws-s3, hydra-fips, grype-db, argo-rollouts, crossplane-provider-family-aws, kyverno-notation-aws, terraform-provider-azurerm-fips, crossplane-provider-keycloak, crossplane-fips, flux-kustomize-controller-fips, grafana-alloy-fips, sops,...

EUVD-2024-2964

Malicious code in bioql PyPI...

EUVD-2022-7108

Malicious code in bioql PyPI...

EUVD-2025-19191

Malicious code in bioql PyPI...

EUVD-2024-3120

Malicious code in bioql PyPI...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy, zarf, terraform, tflint, opentofu, trivy-operator, tfsec, xeol, conftest, wolfictl, grype, kubescape, snyk-cli, zot, terragrunt, kots, steampipe, k9s, syft, rancher-fleet...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: trivy, zarf, terraform, tflint, opentofu, trivy-operator, tfsec, xeol, conftest, wolfictl, grype, kubescape, snyk-cli, zot, terragrunt, kots, steampipe, k9s, syft, rancher-fleet...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy-operator, xeol, zarf, wolfictl, grype-db, syft, terraform-fips, trivy-fips, trivy-operator-fips, grype-fips, xeol-fips, terragrunt, grype, tflint, opentofu, snyk-cli, conftest-fips, k9s-fips, kubescape, k9s, trivy, rancher-fleet-fips, cloudbeat, conftest, zot,...

GO-2025-3789 Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode in github.com/snyk/go-application-framework

Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode in github.com/snyk/go-application-framework...

CVE-2025-6624

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...