GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi, syft, guac, podman, kaf, gh, act, snyk-cli, policy-controller, zarf, prometheus-operator, k3s, kine, pulumi-kubernetes-operator, crossplane-provider-azure-sql, trivy, gitea, cosign, tflint, gatus, gitlab-runner, terraform-provider-azurerm, gitlab-kas, eksctl,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kube-arangodb, pulumi, syft, guac, cloud-sql-proxy, grafana-rollout-operator, kiali, cloudprober, kwok, cadvisor, temporal, gitaly, rancher-webhook, crossplane-provider-aws-kinesis, datadog-operator, addon-resizer, db-operator, kubernetes-csi-driver-hostpath,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: grafana-mimir, ansible-operator-fips, traefik, crossplane-provider-azure-alertsmanagement, k8ssandra-client, crossplane-provider-aws-s3control, sftpgo-plugin-kms, dex, crossplane-provider-aws-directconnect, crossplane-provider-gcp, falco-no-driver, kuma,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: grafana-mimir, ansible-operator-fips, traefik, crossplane-provider-azure-alertsmanagement, k8ssandra-client, crossplane-provider-aws-s3control, sftpgo-plugin-kms, dex, crossplane-provider-aws-directconnect, crossplane-provider-gcp, falco-no-driver, kuma,...

CVE-2026-24051 vulnerabilities

Vulnerabilities for packages: ansible-operator-fips, traefik, sftpgo-plugin-kms, crossplane-provider-gcp, kuma, kubescape-server-fips, syft, coredns-fips, gitlab-cng-fips, eks-distro-fips, prometheus-adapter-fips, docker-cli-buildx-fips, falcoctl-fips, fluent-operator-fips, envoy-gateway-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: ansible-operator-fips, traefik, sftpgo-plugin-kms, crossplane-provider-gcp, kuma, kubescape-server-fips, syft, coredns-fips, gitlab-cng-fips, eks-distro-fips, prometheus-adapter-fips, docker-cli-buildx-fips, falcoctl-fips, fluent-operator-fips, envoy-gateway-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: argo-workflows, ory-kratos-fips, dex, trillian, age-fips, agentbeat, tkn-fips, dex-fips, gitea-fips, spicedb, timestamp-authority, elastic-agent-fips, beats, spire-server, envoy-gateway-fips, kyverno-fips, ksops, splunk-otel-collector, argo-workflows-fips,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: pulumi, guac, kiali, temporal, podman, traefik, policy-controller, zarf, kyverno-policy-reporter, k3s, oauth2-proxy, trivy, cosign, tflint, gatus, neuvector-scanner, kyverno-notation-aws, nerdctl, ksops, undock, rook, dgraph, skaffold, argo-workflows, octo-sts,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: grafana-mimir, argo-workflows, traefik, cert-manager-fips, sftpgo-plugin-kms, spiffe-helper, dex, temporal-ui-server-fips, policy-controller-fips, tkn-fips, dex-fips, containerd-fips, distribution, timestamp-authority, grafana, harbor-registry, flyte, goreleaser,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: pulumi, guac, kiali, temporal, podman, traefik, policy-controller, zarf, kyverno-policy-reporter, k3s, oauth2-proxy, trivy, cosign, tflint, gatus, neuvector-scanner, kyverno-notation-aws, nerdctl, ksops, undock, rook, dgraph, skaffold, argo-workflows, octo-sts,...

OPENSUSE-SU-2025:14612-1 sops-3.9.3-1.1 on GA media

These are all security issues fixed in the sops-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: sops-fips, ksops, sops, chezmoi, age, flux-kustomize-controller, age-fips, grafana, litestream, grafana-fips, flux-kustomize-controller-fips...

GO-2022-0410 Local directory executable lookup in sops (Windows-only) in go.mozilla.org/sops

Local directory executable lookup in sops Windows-only in go.mozilla.org/sops...

OPENSUSE-SU-2024:14104-1 sops-3.9.0-1.1 on GA media

These are all security issues fixed in the sops-3.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: argo-workflows, kubernetes-dashboard-fips, temporal-ui-server-fips, dex, policy-controller-fips, dex-fips, timestamp-authority, vault-csi-provider, goreleaser, falcoctl-fips, cosign, spire-server, kube-rbac-proxy-fips, temporal-ui-server,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: cosign-fips, argo-workflows, aactl, wolfictl, gitsign, slsa-verifier, kubevela, crossplane-provider-aws-firehose, kaniko, melange, grype, crossplane-provider-aws-iam, syft, zarf, pulumi-language-java, pulumi-language-dotnet, crossplane-provider-aws-memorydb,...

Malicious code in helm-secrets-sops-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90757472cd29931d6c7fbc69f6821bd0be3b056fdf34c1d231e3c4ad896f2f54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-X5C7-X7M2-RHMF Local directory executable lookup in sops (Windows-only)

Impact Windows users using the sops direct editor option sops file.yaml can have a local executable named either vi, vim, or nano executed if running sops from cmd.exe This attack is only viable if an attacker is able to place a malicious binary within the directory you are running sops from. As...

Local directory executable lookup in sops (Windows-only)

Impact Windows users using the sops direct editor option sops file.yaml can have a local executable named either vi, vim, or nano executed if running sops from cmd.exe This attack is only viable if an attacker is able to place a malicious binary within the directory you are running sops from. As...

Local directory executable lookup in sops (Windows-only)

Impact Windows users using the sops direct editor option sops file.yaml can have a local executable named either vi, vim, or nano executed if running sops from cmd.exe This attack is only viable if an attacker is able to place a malicious binary within the directory you are running sops from. As...