GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: wgcf, consul-k8s, k3s, mongo-tools, cluster-api-provider-vsphere, cluster-api-azure-controller, opa, argo-events, ip-masq-agent, step-kms-plugin, delve, grafana-alloy, libnvidia-container, dive, kubecolor, nginx-prometheus-exporter, aws-eks-pod-identity-agent,...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: gendesk, oauth2-proxy, cis-operator, mongo-tools, telegraf, conftest, grafana-alloy, emissary, kubernetes-csi-driver-nfs, nodetaint, nri-apache, traefik, wgcf, apm-server, docker-machine-driver-harvester, ini-file, cloud-sql-proxy, trivy, aactl, azure-service-operato...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: gendesk, oauth2-proxy, cis-operator, mongo-tools, telegraf, conftest, grafana-alloy, emissary, kubernetes-csi-driver-nfs, nodetaint, nri-apache, traefik, wgcf, apm-server, docker-machine-driver-harvester, ini-file, cloud-sql-proxy, trivy, aactl, azure-service-operato...

GHSA-4F8R-QQR9-FQ8J vulnerabilities

Vulnerabilities for packages: slsa-verifier, wolfictl, sigstore-scaffolding, sigstore-scaffolding-fips, policy-controller-fips, melange, falcoctl, spire-server, chainctl, spire-server-fips, rekor, kyverno, neuvector-sigstore-interface, tekton-chains-fips, cosign, flux-source-controller, tkn, gh,...

CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: slsa-verifier, wolfictl, sigstore-scaffolding, sigstore-scaffolding-fips, policy-controller-fips, melange, falcoctl, spire-server, chainctl, spire-server-fips, rekor, kyverno, neuvector-sigstore-interface, tekton-chains-fips, cosign, flux-source-controller, tkn, gh,...

Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release

Red Hat OpenShift Pipelines 1.15.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: slsa-verifier, wolfictl, goreleaser, policy-controller-fips, skaffold, melange, spire-server, falcoctl, chainctl, spire-server-fips, ko-fips, neuvector-sigstore-interface, falco, tekton-chains-fips, ko, flux-source-controller, tkn, aactl, falcoctl-fips,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, skaffold, zot, gitsign, wolfictl, policy-controller, melange, aactl, falco, spire-server, kubescape, slsa-verifier, falcoctl, flux-source-controller, vexctl, zarf, goreleaser, tkn, apko, ko, tekton-chains...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, skaffold, zot, gitsign, wolfictl, policy-controller, melange, aactl, falco, spire-server, kubescape, slsa-verifier, falcoctl, flux-source-controller, vexctl, zarf, goreleaser, tkn, apko, ko, tekton-chains...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: slsa-verifier, wolfictl, goreleaser, policy-controller-fips, skaffold, melange, spire-server, falcoctl, chainctl, spire-server-fips, ko-fips, neuvector-sigstore-interface, falco, tekton-chains-fips, ko, flux-source-controller, tkn, aactl, falcoctl-fips,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: slsa-verifier, wolfictl, goreleaser, policy-controller-fips, skaffold, melange, spire-server, falcoctl, chainctl, spire-server-fips, ko-fips, neuvector-sigstore-interface, falco, tekton-chains-fips, ko, flux-source-controller, tkn, aactl, falcoctl-fips,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, skaffold, zot, gitsign, wolfictl, policy-controller, melange, aactl, falco, spire-server, kubescape, slsa-verifier, falcoctl, flux-source-controller, vexctl, zarf, goreleaser, tkn, apko, ko, tekton-chains...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: skaffold, zot, gitsign, kots, caddy, flux-kustomize-controller, rekor, terragrunt, wolfictl, step-ca, frp, policy-controller, fulcio, dgraph, melange, rook, aactl, dex, kargo, falco, spire-server, weaviate, cloudflared, kubescape, slsa-verifier, falcoctl, bank-vaults...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: cert-manager, loki, slsa-verifier, helm-fips, goreleaser, rancher-machine, kubevela, policy-controller-fips, skaffold, dagger, falcoctl, up, buildkitd, crane, cri-tools, ko-fips, helm-operator, falco, k8sgpt, pulumi, timoni, cosign, chartmuseum,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: cert-manager, loki, slsa-verifier, helm-fips, goreleaser, rancher-machine, kubevela, policy-controller-fips, skaffold, dagger, falcoctl, up, buildkitd, crane, cri-tools, ko-fips, helm-operator, falco, k8sgpt, pulumi, timoni, cosign, chartmuseum,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: boring-registry, kubescape, falcoctl, gitsign, mc, vexctl, tekton-chains, falco, spire-server, minio...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: slsa-verifier, rclone, wolfictl, terraform-provider-google, goreleaser, kubevela, crossplane-provider-aws-iam, skaffold, crossplane-provider-aws-rds, crossplane-provider-aws-sns, boring-registry, melange, sops, spire-server, crossplane, crossplane-provider-family-aws...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: kubescape, falcoctl, gitsign, vexctl, tekton-chains, falco...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: gitsign, falcoctl-fips, falco, kubescape, tekton-chains, falcoctl, vexctl, cosign-fips...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: slsa-verifier, melange, falcoctl-fips, aactl, falco, kubescape, apko, spire-server, policy-controller, cosign, tekton-chains, skaffold, ko, flux-source-controller, spire-server-fips, tkn...