132 matches found
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: zarf, terragrunt, wolfictl, kots, steampipe, grype, terraform, rancher-fleet, opentofu, kubescape, trivy, trivy-operator, conftest, tfsec, snyk-cli, syft, xeol, k9s, zot, tflint...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: xeol-fips, trivy-fips, trivy-operator, conftest, steampipe, rancher-fleet-fips, kots, trivy-operator-fips, zarf, rancher-fleet, syft, opentofu-fips, snyk-cli, cloudbeat, grype, opentofu, cloudbeat-fips, tflint, terragrunt, wolfictl, terraform, k9s-fips, tfsec, trivy,...
CVE-2025-54388 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, spire-server, cadvisor, splunk-otel-collector-fips, telegraf, trufflehog-fips, apko-fips, trivy-fips, cg, prometheus, goreleaser, docker-compose-fips, zarf, docker-compose, docker-cli-buildx-fips, syft, aws-otel-collector-fips,...
CVE-2023-24827
syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFTATTESTPASSWORD environment variable. The...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: zarf, flux-helm-controller, eksctl, wolfictl, neuvector-scanner, kots, grype, rancher-fleet, buildkitd, osv-scanner, ctop, flux-source-controller, k8ssandra-client, kubescape, trivy, fuse-overlayfs-snapshotter, nerdctl, docker-compose, opa-envoy, spegel, kargo,...
GHSA-JFVP-7X6P-H2PV vulnerabilities
Vulnerabilities for packages: k3s, buildah, syft, docker, opentelemetry-collector-contrib, neuvector-scanner, grype, k8s-device-plugin, podman, kubernetes, runc, cadvisor, ctop, grafana-alloy...
CVE-2024-45310 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor, k8s-device-plugin, docker, kubernetes-fips, runc, grafana-alloy, neuvector-fips, syft, neuvector-scanner-fips, eks-distro-fips, eks-distro, kubernetes, cluster-autoscaler-fips, ctop, grype, cadvisor-fips, podman, neuvector,...
CVE-2024-45310 vulnerabilities
Vulnerabilities for packages: k3s, buildah, syft, docker, opentelemetry-collector-contrib, neuvector-scanner, grype, k8s-device-plugin, podman, kubernetes, runc, cadvisor, ctop, grafana-alloy...
GO-2023-1533 Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in github.com/anchore/syft
Credential disclosure in syft when SYFTATTESTPASSWORD environment variable set in github.com/anchore/syft...
GHSA-V23V-6JW2-98FQ vulnerabilities
Vulnerabilities for packages: zarf, policy-controller, gitsign, flux-helm-controller, up, eksctl, ko, neuvector-sigstore-interface, timoni, neuvector-scanner, apko, kots, grype, wolfictl, rancher-fleet, slsa-verifier, buildkitd, skopeo, ctop, flux-source-controller, falcoctl,...
CVE-2024-32473 vulnerabilities
Vulnerabilities for packages: melange, dagger, harbor-scanner-trivy-fips, kaniko, grype, harbor-scanner-trivy, policy-controller-fips, docker-compose, syft, wolfictl, buf, policy-controller, k3d, helm-push, neuvector-scanner, cri-tools...
CVE-2024-32473 vulnerabilities
Vulnerabilities for packages: policy-controller, kaniko, k3d, syft, wolfictl, neuvector-scanner, helm-push, grype, buf, cri-tools, melange, docker-compose, harbor-scanner-trivy, dagger...
GHSA-X84C-P2G9-RQV9 vulnerabilities
Vulnerabilities for packages: melange, dagger, harbor-scanner-trivy-fips, kaniko, grype, harbor-scanner-trivy, policy-controller-fips, docker-compose, syft, wolfictl, buf, policy-controller, k3d, helm-push, neuvector-scanner, cri-tools...
GHSA-X84C-P2G9-RQV9 vulnerabilities
Vulnerabilities for packages: policy-controller, kaniko, k3d, syft, wolfictl, neuvector-scanner, helm-push, grype, buf, cri-tools, melange, docker-compose, harbor-scanner-trivy, dagger...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: spire-server, cadvisor, aactl, tkn, conftest, ko, prometheus, cilium-cli, docker-compose, syft, spire-server-fips, loki, kaniko, ctop, grype, cadvisor-fips, wolfictl, buf, up, trivy, melange, kubescape, dagger, buildkitd, crossplane, zot, conftest-fips, kargo...
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: spire-server, cadvisor, aactl, tkn, conftest, ko, prometheus, cilium-cli, docker-compose, syft, spire-server-fips, loki, kaniko, ctop, grype, cadvisor-fips, wolfictl, buf, up, trivy, melange, kubescape, dagger, buildkitd, crossplane, zot, conftest-fips, kargo...
CVE-2024-21626 vulnerabilities
Vulnerabilities for packages: zarf, wolfictl, kots, grype, podman, buildkitd, skopeo, ctop, kubescape, trivy, nerdctl, runc, skaffold, k3s, kaniko, syft, k3d, cadvisor, k9s, docker, zot, kubernetes, newrelic-infrastructure-agent...
CVE-2024-21626 vulnerabilities
Vulnerabilities for packages: cadvisor, docker, k3d, runc, skopeo, kots, skaffold, zarf, syft, kubernetes, kaniko, ctop, grype, wolfictl, podman, trivy, kubescape, k3s, newrelic-infrastructure-agent, buildkitd, zot, nerdctl, k9s...