CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: openbao-k8s, snyk-cli, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot, sriov-network-device-plugin, spire-controller-manager, nodetaint, go-licenses, nri-elasticsearch,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: openbao-k8s, snyk-cli, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot, sriov-network-device-plugin, spire-controller-manager, nodetaint, go-licenses, nri-elasticsearch,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: ko-fips, crane-fips, gatus, kyverno, maru, opentelemetry-operator-fips, vt-cli, ip-masq-agent, flux-kustomize-controller, trust-manager, mattmoor-chainit, nri-cassandra, local-static-provisioner, dataplaneapi, aactl, dbmate, prometheus-redis-exporter-fips,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: trino, falcoctl, grafana-mimir, prometheus, external-secrets-fips, flux-kustomize-controller, cluster-autoscaler-fips, zot, chezmoi, opentelemetry-collector-fips, spire-server-fips, flux-image-reflector-controller, zarf, cosign-fips, trivy-fips, restic,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, thanos, velero, bank-vaults, flyte, flux-kustomize-controller, chezmoi, restic, k8sgpt, ksops, fluent-bit-plugin-loki, goreleaser, prometheus-operator, rclone, opentelemetry-collector-contrib, timestamp-authority, airflow, druid, hugo-extended,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: ko-fips, goreleaser, falcoctl, vexctl, chainctl, apko, melange, tkn-fips, tekton-chains-fips, zot, policy-controller-fips, slsa-verifier, policy-controller, falcoctl-fips, kubescape, ko, skaffold, aactl, spire-server-fips, zarf, spire-server, flux-source-controller,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, kubescape, zot, tkn, skaffold, wolfictl, melange, slsa-verifier, ko, flux-source-controller, tekton-chains, aactl, policy-controller, vexctl, zarf, gitsign, neuvector-sigstore-interface, apko, falcoctl...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, kubescape, zot, tkn, skaffold, wolfictl, melange, slsa-verifier, ko, flux-source-controller, tekton-chains, aactl, policy-controller, vexctl, zarf, gitsign, neuvector-sigstore-interface, apko, falcoctl...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, kubescape, zot, tkn, skaffold, wolfictl, melange, slsa-verifier, ko, flux-source-controller, tekton-chains, aactl, policy-controller, vexctl, zarf, gitsign, neuvector-sigstore-interface, apko, falcoctl...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: ko-fips, goreleaser, falcoctl, vexctl, chainctl, apko, melange, tkn-fips, tekton-chains-fips, zot, policy-controller-fips, slsa-verifier, policy-controller, falcoctl-fips, kubescape, ko, skaffold, aactl, spire-server-fips, zarf, spire-server, flux-source-controller,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, kubescape, zot, tkn, skaffold, wolfictl, melange, slsa-verifier, ko, flux-source-controller, tekton-chains, aactl, policy-controller, vexctl, zarf, gitsign, neuvector-sigstore-interface, apko, falcoctl...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: ko-fips, goreleaser, falcoctl, vexctl, chainctl, apko, melange, tkn-fips, tekton-chains-fips, zot, policy-controller-fips, slsa-verifier, policy-controller, falcoctl-fips, kubescape, ko, skaffold, aactl, spire-server-fips, zarf, spire-server, flux-source-controller,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: crossplane, prometheus, buildkitd, trivy, melange, kaniko, cilium-cli, cadvisor, conftest, conftest-fips, zot, dagger, grype, kubescape, ko, up, aactl, spire-server-fips, spire-server, cadvisor-fips, docker-compose, syft, loki, wolfictl, tkn, ctop, kargo, buf...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: crossplane, prometheus, buildkitd, trivy, melange, kaniko, cilium-cli, cadvisor, conftest, conftest-fips, zot, dagger, grype, kubescape, ko, up, aactl, spire-server-fips, spire-server, cadvisor-fips, docker-compose, syft, loki, wolfictl, tkn, ctop, kargo, buf...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: dex, bank-vaults, minio, flux-kustomize-controller, kargo, grpc-health-probe, goreleaser, caddy, kubernetes-dashboard, timestamp-authority, nerdctl, rekor, skopeo, rabbitmq-messaging-topology-operator, spire-server, oauth2-proxy, cosign, kubescape, gomplate, zot,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: mc-fips, boring-registry, minio-fips, falcoctl-fips, external-secrets-fips, falcoctl, spire-server-fips, mc, boring-registry-fips, minio, spire-server...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: mc-fips, boring-registry, minio-fips, falcoctl-fips, external-secrets-fips, falcoctl, spire-server-fips, mc, boring-registry-fips, minio, spire-server...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: spire-server, mc, kubescape, minio, vexctl, boring-registry, gitsign, tekton-chains, falcoctl...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-s3, crossplane-provider-aws-sqs, goreleaser, vexctl, crossplane-provider-aws-firehose, argo-workflows, flux, apko, crossplane-provider-aws-elasticache, melang...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: flux-source-controller, policy-controller, falcoctl-fips, kubescape, slsa-verifier, ko, cosign, skaffold, aactl, spire-server-fips, tekton-chains, tkn, spire-server, apko, melange...