CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: atlantis, aws-eks-pod-identity-agent, cortex, nodetaint, dbmate, witness, chartmuseum, vertical-pod-autoscaler, apko, boring-registry, helm-set-status, cloudnative-pg, sops, k8s-device-plugin, k8sgpt, loki, git-lfs, redis-operator, k8ssandra-client,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: tflint, kubescape, kots, tfsec, snyk-cli, zot, grype, conftest, zarf, opentofu, xeol, k9s, steampipe, task, terragrunt, trivy-operator, wolfictl, syft, terraform, trivy...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: tflint, kubescape, kots, tfsec, snyk-cli, zot, grype, conftest, zarf, opentofu, xeol, k9s, steampipe, task, terragrunt, trivy-operator, wolfictl, syft, terraform, trivy...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, pulumi-language-dotnet, q, witness, hydra, crossplane-provider-aws-rds, zot, flux-source-controller, apko, crossplane-provider-aws-firehose, boring-registry, crossplane-provider-aws-sns, extism, sops, trivy-operator, gitsig...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: atlantis, flux-image-automation-controller, pulumi-language-dotnet, q, witness, hydra, crossplane-provider-aws-rds, zot, flux-source-controller, apko, crossplane-provider-aws-firehose, boring-registry, crossplane-provider-aws-sns, extism, sops, trivy-operator, gitsig...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cerbos, ratify, argocd-image-updater, crossplane-provider-keycloak, kots, kubescape, helm, crossplane-provider-aws-sns, crossplane-provider-aws-rds, helm-push, crossplane-provider-azure-authorization, omni-fips, trivy-operator-fips, wolfictl, hydra-fips, q,...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: tflint, kubescape, rancher-fleet, kots, tfsec, snyk-cli, zot, grype, conftest, zarf, opentofu, xeol, k9s, steampipe, terragrunt, trivy-operator, wolfictl, syft, terraform, trivy...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: tflint, kubescape, rancher-fleet, kots, tfsec, snyk-cli, zot, grype, conftest, zarf, opentofu, xeol, k9s, steampipe, terragrunt, trivy-operator, wolfictl, syft, terraform, trivy...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: zarf, kots, kubescape, cloudbeat, rancher-fleet-fips, grype-db, trivy-operator-fips, wolfictl, trivy, steampipe, xeol, terragrunt, zot, grype-fips, trivy-operator, conftest-fips, tfsec, terraform, trivy-fips, syft, syft-fips, terraform-fips, opentofu, tflint, k9s,...

CVE-2025-46569 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gatekeeper, witness, conftest, cosign, kots, spire-server, policy-controller, tfsec, trivy, kyverno...

GHSA-6M8W-JC87-6CR7 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gatekeeper, witness, conftest, cosign, kots, spire-server, policy-controller, tfsec, trivy, kyverno...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: datadog-agent, zarf, snyk-cli, zot, opa, kubescape, k8sgpt, conftest, cosign, kots, spire-server, policy-controller, tfsec...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: zarf, cosign-fips, kots, kubescape, datadog-agent, gatekeeper-fips, gatekeeper, spire-server, datadog-agent-fips, spire-server-fips, zot, cosign, conftest-fips, tfsec, opa, k8sgpt, policy-controller-fips, kyverno-fips, policy-controller, snyk-cli, conftest, kyverno...

CVE-2024-8260 vulnerabilities

Vulnerabilities for packages: zarf, cosign-fips, kots, kubescape, datadog-agent, gatekeeper-fips, gatekeeper, spire-server, datadog-agent-fips, spire-server-fips, zot, cosign, conftest-fips, tfsec, opa, k8sgpt, policy-controller-fips, kyverno-fips, policy-controller, snyk-cli, conftest, kyverno...

CVE-2024-8260 vulnerabilities

Vulnerabilities for packages: datadog-agent, zarf, snyk-cli, zot, opa, kubescape, k8sgpt, conftest, cosign, kots, spire-server, policy-controller, tfsec...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: datadog-agent, wolfictl, zarf, snyk-cli, zot, grype, tflint, kubescape, k9s, conftest, terragrunt, kots, terraform, trivy, tfsec...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: zarf, kots, kubescape, datadog-agent, wolfictl, trivy, datadog-agent-fips, terragrunt, zot, conftest-fips, tfsec, terraform, trivy-fips, tflint, opentofu, k9s, grype, snyk-cli, conftest...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: zarf, kots, kubescape, datadog-agent, wolfictl, trivy, datadog-agent-fips, terragrunt, zot, conftest-fips, tfsec, terraform, trivy-fips, tflint, opentofu, k9s, grype, snyk-cli, conftest...

Tfsec - Security Scanner For Your Terraform Code

tfsec uses static analysis of your terraform templates to spot potential security issues. Now with terraform v0.12+ support. Example Output Installation Install with brew/linuxbrew: brew install tfsec Install with Chocolatey: choco install tfsec You can also grab the binary for your system from t...