21 matches found
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: bank-vaults-vault-operator, rclone-fips, goose, gitlab-kas, crossplane-provider-azure-managedidentity, node-problem-detector-fips, kube-metrics-adapter-fips, ld-relay, crossplane-function-patch-and-transform-fips, jobset-fips, velero-plugin-for-gcp,...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: bank-vaults-vault-operator, rclone-fips, goose, gitlab-kas, crossplane-provider-azure-managedidentity, node-problem-detector-fips, kube-metrics-adapter-fips, ld-relay, crossplane-function-patch-and-transform-fips, jobset-fips, velero-plugin-for-gcp,...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: grafana-mimir, dask-gateway, crossplane, velero-plugin-for-microsoft-azure, configmap-reload, gcp-compute-persistent-disk-csi-driver, argo-rollouts, helm-operator, controller-gen, mariadb-operator, kuma, nri-prometheus, cluster-api, croc, tigera-operator,...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: reports-server, kube-metrics-adapter-fips, jobset-fips, flux-operator-fips, google-osconfig-agent, kubernetes-csi-external-attacher, ucd, hey, ko, percona-xtradb-cluster-operator, nri-consul-fips, rke2-runtime, victorialogs-fips,...
GHSA-PC3F-X583-G7J2 vulnerabilities
Vulnerabilities for packages: falcoctl, envoy-gateway, kubernetes-dashboard-api, argocd-image-updater, kubescape, argo-rollouts, eksctl, gitlab-kas, datadog-agent, kargo, kubernetes, argo-cd, kwok, istio, k9s, argo-workflows, cluster-api, k8sgpt, gitlab-runner, cloudnative-pg, kube-arangodb,...
GHSA-PC3F-X583-G7J2 vulnerabilities
Vulnerabilities for packages: gitlab-kas, kubescape, consul-k8s, terraform-provider-kubernetes-fips, kiali-fips, gitlab-runner, neuvector, k8sgpt-operator, k8ssandra-client, neuvector-fips, kiali, postgres-operator, terraform-provider-kubernetes, skaffold-fips, datadog-agent, tigera-operator,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: grafana-mimir, dask-gateway, terraform-docs, crossplane, direnv, configmap-reload, argo-rollouts, controller-gen, mariadb-operator, nri-prometheus, minio-object-browser, croc, tigera-operator, kafka-proxy, otel-cli, kserve-modelmesh-serving, nri-nginx,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: helm-set-status, keda, grafana-mimir, dask-gateway, terraform-docs, crossplane, dgraph, kubernetes-dashboard-api, rancher-agent, cert-manager-csi-driver, envconsul, atlantis, tailscale, argo-rollouts, terraform-provider-azapi, aws-flb-firehose, etcd, falco-no-driver,...
GHSA-HFVC-G4FC-PQHX vulnerabilities
Vulnerabilities for packages: docker-compose, keda, grafana-mimir, crossplane-provider-aws-memorydb, dgraph, tailscale, gomplate, gcp-compute-persistent-disk-csi-driver, argo-rollouts, helm-operator, kubernetes-csi-external-health-monitor, etcd, falco-no-driver, guac, ferretdb, jaeger, kuma, k9s,...
GHSA-HFVC-G4FC-PQHX vulnerabilities
Vulnerabilities for packages: onepassword-operator, node-problem-detector-fips, gitlab-kas, crossplane-provider-azure-managedidentity, reports-server, kube-metrics-adapter-fips, ld-relay, crossplane-function-patch-and-transform-fips, clickhouse-backup, jobset-fips, sops, cert-manager-webhook-pdns...
CVE-2026-39883 vulnerabilities
Vulnerabilities for packages: onepassword-operator, node-problem-detector-fips, gitlab-kas, crossplane-provider-azure-managedidentity, reports-server, kube-metrics-adapter-fips, ld-relay, crossplane-function-patch-and-transform-fips, clickhouse-backup, jobset-fips, sops, cert-manager-webhook-pdns...
CVE-2026-28799 PJSIP: Heap use-after-free in PJSIP presence subscription termination handler
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: dask-gateway, terraform-docs, crossplane, direnv, velero-plugin-for-microsoft-azure, configmap-reload, argo-rollouts, controller-gen, gobump, nri-prometheus, minio-object-browser, kafka-proxy, otel-cli, kubernetes-csi-livenessprobe, terraform-provider-random,...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, terraform-docs, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, terraform-docs, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, terraform-docs, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi, kubernetes-csi-external-health-monitor,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, terraform-docs, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, terraform-docs, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, terraform-docs, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi,...