CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: kyverno, aactl, policy-controller, trivy-operator, teleport, goreleaser, neuvector-sigstore-interface, spire-server, tkn, zarf, kyverno-notation-aws, crossplane, tekton-chains, trivy...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: kyverno, aactl, policy-controller, trivy-operator, teleport, goreleaser, neuvector-sigstore-interface, spire-server, tkn, zarf, kyverno-notation-aws, crossplane, tekton-chains, trivy...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-fips, flux-source-controller-fips, trivy-fips, flux-image-automation-controller, seaweedfs-rocksdb-fips, kyverno-fips, omnictl-multiarch, loki, spire-server, rancher-agent, osv-scanner, gitlab-workhorse-ce-fips, kubernetes, minio-fips, knative-eventing-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: src, argo-events-fips, crossplane-provider-aws-directconnect, crossplane-provider-aws-cloudwatchevents, crossplane-provider-azure-synapse, flux-image-automation-controller, agentbeat, crossplane-provider-aws-emr-fips, loki, gomplate, docker-machine-driver-linode,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, syft, crossplane-provider-family-azure, pulumi-language-dotnet, argo-events-fips, fulcio, crossplane-provider-azure-operationsmanagement, docker-fips, flux-fips, rootlesskit, crossplane-provider-azure-relay,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: flux-fips, flux-source-controller-fips, trivy-fips, flux-image-automation-controller, seaweedfs-rocksdb-fips, kyverno-fips, omnictl-multiarch, loki, spire-server, rancher-agent, osv-scanner, gitlab-workhorse-ce-fips, kubernetes, minio-fips, knative-eventing-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, syft, crossplane-provider-family-azure, pulumi-language-dotnet, argo-events-fips, fulcio, crossplane-provider-azure-operationsmanagement, docker-fips, flux-fips, rootlesskit, crossplane-provider-azure-relay, age,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, chainloop-cli-fips, flux-source-controller-fips, trivy-fips, flux-image-automation-controller, kyverno-fips, omnictl-multiarch, loki, spire-server, gomplate, rancher-agent, dagger, osv-scanner,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: src, argo-events-fips, crossplane-provider-aws-directconnect, crossplane-provider-aws-cloudwatchevents, crossplane-provider-azure-synapse, flux-image-automation-controller, agentbeat, crossplane-provider-aws-emr-fips, loki, gomplate, docker-machine-driver-linode,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, docker-fips, flux-fips, rootlesskit, chainloop-cli-fips, docker, longhorn-cli-fips, flux-source-controller-fips, trivy-fips, flux-image-automation-controller, seaweedfs-rocksdb-fips, kyverno-fips, omnictl-multiarch, lok...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kyverno, snyk-cli, prometheus-operator, flux-image-automation-controller, zot, k3s, rancher, fscrypt, kubernetes, opentelemetry-collector, cert-manager, gitea, aactl, istio, nerdctl, containerd, cilium-cli, kaf, flux, external-dns, chisel, loki, telegraf, gitlab-kas,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: kyverno, guac, flux-image-automation-controller, terragrunt, k3s, tkn, dagger, nfpm, falcoctl, atlantis, containerd, cilium-cli, step-issuer, step-kms-plugin, loki, policy-controller, crossplane-provider-family-azure, argocd-image-updater, pulumi-language-java,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, syft, beats-fips, kubescape-operator, helm-push, neuvector-fips, docker-fips, kgateway, gatekeeper, fuse-overlayfs-snapshotter, docker, trivy-fips, amazon-ecs-agent-fips, neuvector, rancher-agent, dagger, newrelic-infrastructure-agen...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, syft, kubescape-operator, helm-push, neuvector-fips, docker-fips, gatekeeper, kgateway, fuse-overlayfs-snapshotter, docker, trivy-fips, amazon-ecs-agent-fips, neuvector, rancher-agent, dagger, newrelic-infrastructure-agent, grype,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: kyverno, guac, snyk-cli, pulumi, flux-image-automation-controller, gptscript, rancher-fleet, terragrunt, zot, dagger, gitsign, gitea, pulumi-language-dotnet, nfpm, external-secrets-operator, goreleaser, flux, gitlab-runner, kubevela, teleport, syft, argo-workflows,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, chainloop-cli-fips, trivy-fips, flux-image-automation-controller, gitaly-fips, cerbos, kyverno-fips, gomplate, dagger, osv-scanner, cerbos-fips, grype, guac, xeol, syft-fips, kots, kubevela, witness, mapotf,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: syft, pulumi-language-dotnet, argo-events-fips, flux-fips, chainloop-cli-fips, trivy-fips, flux-image-automation-controller, gitaly-fips, cerbos, kyverno-fips, gomplate, dagger, osv-scanner, cerbos-fips, grype, guac, xeol, syft-fips, kots, kubevela, witness, mapotf,...