GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, act, external-secrets-operator, gitaly, gptscript, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: cloudbeat, kaniko, cerbos, packer, external-secrets-operator-fips, gitsign, cloudbeat-fips, trivy-fips, apko, chainloop-cli-fips, grype, pulumi-language-java, flux-image-automation-controller, argo-workflows, src-fingerprint-fips, zot, tfsec, grafana-alloy, nuclei,...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: tflint, bom, neuvector-sigstore-interface, spire-server, docker-compose, vexctl, gitlab-runner, gitsign, zot, ko, skaffold, goreleaser, slsa-verifier, gh, docker-cli-buildx, tkn, tekton-chains, zarf, falcoctl, trivy, kubescape, aactl, docker, kyverno-notation-aws,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, argo-cd, gptscript, crossplane-provider-aws-eks, gitlab-runner, xeol, crossplane-provider-aws-kinesis, skaffold, goreleaser, melange, crossplane-provider-aws-iam, flux-kustomize-controller, docker-cli-buildx, zarf, terragrunt, openbao, witness,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, argo-cd, gptscript, crossplane-provider-aws-eks, gitlab-runner, xeol, crossplane-provider-aws-kinesis, skaffold, goreleaser, melange, crossplane-provider-aws-iam, flux-kustomize-controller, docker-cli-buildx, zarf, terragrunt, openbao, witness,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: cloudbeat, ratify-fips, cerbos, packer, flux-kustomize-controller-fips, external-secrets-operator-fips, crossplane-provider-aws-firehose, gitsign, vcluster, rclone, argo-rollouts, cloudbeat-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-route53,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, wolfictl, kots, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, external-secrets-operator, gptscript, flux-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, grafana,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, wolfictl, kots, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, argo-workflows, external-secrets-operator, gptscript, flux-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, grafana,...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: tflint, steampipe, wolfictl, kots, tfsec, xeol, zot, conftest, zarf, terragrunt, snyk-cli, opentofu, terraform, trivy, kubescape, syft, grype, trivy-operator, k9s, rancher-fleet...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: tflint, steampipe, wolfictl, kots, tfsec, xeol, zot, conftest, zarf, terragrunt, snyk-cli, opentofu, terraform, trivy, kubescape, syft, grype, trivy-operator, k9s, rancher-fleet...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: cloudbeat, terraform, xeol-fips, kubescape, snyk-cli, opentofu-fips, xeol, grype-fips, syft-fips, cloudbeat-fips, tflint, trivy-fips, zarf, k9s, trivy-operator-fips, grype, trivy-operator, k9s-fips, rancher-fleet, zot, tfsec, terragrunt, kots, trivy, terraform-fips,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: cloudbeat, terraform, xeol-fips, kubescape, snyk-cli, opentofu-fips, xeol, grype-fips, syft-fips, cloudbeat-fips, tflint, trivy-fips, zarf, k9s, trivy-operator-fips, grype, trivy-operator, k9s-fips, rancher-fleet, zot, tfsec, terragrunt, kots, trivy, terraform-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: logstash-exporter, cilium-fips, swagger, cluster-api-helm-controller-fips, aws-flb-cloudwatch-fips, x509-certificate-exporter-fips, cloudnative-pg-fips, grpcurl, eck-operator, flux-helm-controller, argo-workflows, zot, spegel, kbld, temporal-fips, kube-rbac-proxy, yt...