CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: stakater-reloader, flux-source-watcher, flux-operator-fips, pgwatch, temporal-fips, amazon-k8s-cni-fips, victoriametrics, victoriametrics-cluster, victoriametrics-cluster-fips, loki-fips, steampipe, cert-manager-fips, aws-ebs-csi-driver, flux-helm-controller, polaris...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, timoni, witness, wolfictl, apko, gomplate, grype, kots, steampipe, rancher-fleet, teleport, osv-scanner, flux-source-controller, gitaly, scorecard, kubescape, trivy, flux-image-automation-controller, trivy-operator, argo-workflows,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, timoni, witness, wolfictl, apko, gomplate, grype, kots, steampipe, rancher-fleet, teleport, osv-scanner, flux-source-controller, gitaly, scorecard, kubescape, trivy, flux-image-automation-controller, trivy-operator, argo-workflows,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: argo-events-fips, flux-source-controller-fips, nuclei, chezmoi, trufflehog-fips, gitea, trivy-fips, trivy-operator, src-fingerprint, teleport, flux-operator, zarf, kyverno, google-osconfig-agent, gomplate, amazon-ssm-agent-fips, nfpm, external-secrets-operator,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: argo-events-fips, flux-source-controller-fips, nuclei, chezmoi, trufflehog-fips, gitea, trivy-fips, trivy-operator, src-fingerprint, teleport, flux-operator, zarf, kyverno, google-osconfig-agent, gomplate, amazon-ssm-agent-fips, nfpm, external-secrets-operator,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, ko, kor, harbor-cli, kubernetes-dashboard-web, helm-set-status, emissary, kapp, lazydocker, nri-rabbitmq, buildkitd, amazon-cloudwatch-agent-operator, opentofu, ip-masq-agent, prometheus, rabbitmq-cluster-operator, nodetaint,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: nri-memcached, rabbitmq-cluster-operator, nri-haproxy, aws-application-networking-k8s, mockgen, nuclei, kyverno-notation-aws, conftest, portieris, aws-privateca-issuer, k8sgpt, nri-mysql, rancher-system-upgrade-controller, docker-credential-gcr, ko, kpt, wgcf,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: nri-memcached, rabbitmq-cluster-operator, nri-haproxy, aws-application-networking-k8s, mockgen, nuclei, kyverno-notation-aws, conftest, portieris, aws-privateca-issuer, k8sgpt, nri-mysql, rancher-system-upgrade-controller, docker-credential-gcr, ko, kpt, wgcf,...

GHSA-JC7W-C686-C4V9 vulnerabilities

Vulnerabilities for packages: zarf, gptscript, terragrunt, steampipe, terraform, podman, rancher-fleet, gitness, opentofu, trivy, nsc, filebrowser, trivy-operator, undock, gitleaks, kubescape-operator, guac, envoy-gateway, xeol, nuclei, grafana-alloy, vcluster, k9s, trufflehog, zot, tflint...

CVE-2025-58058 vulnerabilities

Vulnerabilities for packages: zarf, gptscript, terragrunt, steampipe, terraform, podman, rancher-fleet, gitness, opentofu, trivy, nsc, filebrowser, trivy-operator, undock, gitleaks, kubescape-operator, guac, envoy-gateway, xeol, nuclei, grafana-alloy, vcluster, k9s, trufflehog, zot, tflint...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: zarf, terragrunt, wolfictl, kots, steampipe, grype, terraform, rancher-fleet, opentofu, kubescape, trivy, trivy-operator, conftest, tfsec, snyk-cli, syft, xeol, k9s, zot, tflint...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: zarf, terragrunt, wolfictl, kots, steampipe, grype, terraform, rancher-fleet, opentofu, kubescape, trivy, trivy-operator, conftest, tfsec, snyk-cli, syft, xeol, k9s, zot, tflint...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: xeol-fips, trivy-fips, trivy-operator, conftest, steampipe, rancher-fleet-fips, kots, trivy-operator-fips, zarf, rancher-fleet, syft, opentofu-fips, snyk-cli, cloudbeat, grype, opentofu, cloudbeat-fips, tflint, terragrunt, wolfictl, terraform, k9s-fips, tfsec, trivy,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: xeol-fips, trivy-fips, trivy-operator, conftest, steampipe, rancher-fleet-fips, kots, trivy-operator-fips, zarf, rancher-fleet, syft, opentofu-fips, snyk-cli, cloudbeat, grype, opentofu, cloudbeat-fips, tflint, terragrunt, wolfictl, terraform, k9s-fips, tfsec, trivy,...

Malicious code in steampipe-reports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da60e6d3d0eabe3a13ee33ff083b62e33e8c5dd6a42852a73061c0ce975fa140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...