CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: incert, nerdctl, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, aws-efs-csi-driver, flux-notification-controller, aws-sigv4-proxy, cerbos, k8ssandra-client, chisel, chartmuseum, neuvector-dbgen, trivy, doppler-kubernetes-operator, nuclei, redpanda,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: polaris-fips, secrets-store-csi-driver-provider-aws-fips, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, git-sync-fips, google-cloud-otel-ops-collector, prometheus-redis-exporter, keda-fips, pulumi-language-yaml,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: dkron-fips, keda-fips, temporal, external-secrets-operator, gotrue-fips, gitlab-kas, crossplane, dagger, cosign-fips, livekit-server-fips, seaweedfs-rocksdb-fips, slsa-verifier, grpc-health-probe, commercial-chainloop-backend, ko-fips, packer-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, opentelemetry-collector-contrib, sops, aws-otel-collector, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbos, zarf, kube-rbac-proxy...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, opentelemetry-collector-contrib, sops, aws-otel-collector, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbos, zarf, kube-rbac-proxy...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, mockgen, kor, spqr, secrets-store-csi-driver-provider-azure, litestream, opentelemetry-collector-contrib, sops, aws-otel-collector, flux-notification-controller, aws-sigv4-proxy, crossplane-provider-aws-kms, cerbos, zarf,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, crossplane-provider-aws-ec2, prometheus-nats-exporter, crossplane-provider-kubernetes-fips, metrics-agent-fips, sealed-secrets, dkron-fips, google-cloud-otel-ops-collector, keda-fips, pulumi-language-yaml,...

EUVD-2021-16005

Malware in sbrugna...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: polaris-fips, descheduler-fips, metrics-agent-fips, prometheus-redis-exporter, fq, temporal, hugo-fips, gitea, node-feature-discovery-fips, dagger, go-md2man, crossplane-provider-azure, opa, terraform, kube-vip-fips, slsa-verifier, cass-operator-fips-no-pvc-delete,...

CVE-2021-29370

A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, nerdctl, grafana-operator, kine, pulumi-language-java, speedtest-go, newrelic-infrastructure-agent, flux-image-reflector-controller, gops, pulumi, kor, kubeflow-pipelines, bazelisk, kind, cue, nri-couchbase,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, nerdctl, grafana-operator, kine, pulumi-language-java, speedtest-go, newrelic-infrastructure-agent, flux-image-reflector-controller, gops, pulumi, kor, kubeflow-pipelines, bazelisk, kind, cue, nri-couchbase,...

Moderate: Red Hat Security Advisory: Cluster Observability Operator 0.4.1

The Cluster Observability Operator is a Kubernetes operator which enables the management of Monitoring/Alerting stacks through Kubernetes CRDs. Cluster Observability Operator Security Fixes: coo-prometheus-container: go-retryablehttp: url might write sensitive information to log file coo-0...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, hugo-extended, timestamp-authority, rook, sigstore-scaffolding, guac, flux-image-reflector-controller, flux-kustomize-controller, step-ca, step, pulumi, up, tekton-chains, secrets-store-csi-driver-provider-azure, buildkitd, rclone, policy-controller,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: gitness, cadvisor, policy-controller, atlantis, aws-flb-firehose-fips, local-static-provisioner, docker-compose, fulcio-fips, grafana-operator, prometheus-nats-exporter, aws-ebs-csi-driver, petname, opentelemetry-collector-contrib-fips, bank-vaults-fips,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, kargo, nerdctl, grafana-operator, hugo-extended, docker, kine, pulumi-language-java, newrelic-infrastructure-agent, flux-image-reflector-controller, pulumi, kor, kubeflow-pipelines, volume-modifier-for-k8s, src,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, prometheus-nats-exporter, prometheus-redis-exporter, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, temporal, crossplane, crossplane-provider-aws-cloudfront, dagger, cosign-fips, crossplane-provider-azure, terraform,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, nerdctl, grafana-operator, kine, pulumi-language-java, speedtest-go, newrelic-infrastructure-agent, flux-image-reflector-controller, gops, pulumi, kor, kubeflow-pipelines, bazelisk, kind, cue, nri-couchbase,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falcoctl-fips, src, kubevela, prometheus-blackbox-exporter, bank-vaults-fips, up, kubernetes-csi-livenessprobe-fips, kiam, vault-csi-provider, buildkitd, kubeflow, timestamp-authority-fips, scorecard, prometheus-adapter-fips, metrics-server-fips, dgraph, kubescape,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: buildkitd, k3d, terraform-provider-sendgrid, aactl, kubescape, dgraph, slsa-verifier, spark-operator, kubeflow, prometheus-blackbox-exporter, cortex, up, kubevela, src, scorecard...