GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, buildkitd, bom, rekor, kyverno-notation-aws, docker-compose, gitlab-runner, ratify, slsa-verifier, tkn, zarf, docker-cli-buildx, kubescape, gitsign, cosign, trivy, trivy-operator, policy-controller, docker, flux-source-controller,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitness, gptscript, kyverno-notation-aws, crossplane-provider-aws-sns, grafana-alloy, argo-cd, argo-workflows, policy-controller, crossplane-provider-aws-iam, lazygit, helm-push, docker, flux-kustomize-controller, goreleaser, wolfictl, k9s, flux,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitness, gptscript, kyverno-notation-aws, crossplane-provider-aws-sns, grafana-alloy, argo-cd, argo-workflows, policy-controller, crossplane-provider-aws-iam, lazygit, helm-push, docker, flux-kustomize-controller, goreleaser, wolfictl, k9s, flux,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, actions-runner-controller-fips, crossplane-provider-aws-lambda, gitlab-operator-fips, trufflehog-fips, cluster-api, argo-events, crossplane-provider-aws-efs-fips, crossplane-provider-aws-rds-fips, crossplane-provider-aws-kinesis,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kargo, bom, pulumi-language-dotnet, gptscript, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, kubescape, gitsign, grafana-alloy, argo-cd, trivy, argo-workflows, chezmo...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kargo, bom, pulumi-language-dotnet, gptscript, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, kubescape, gitsign, grafana-alloy, argo-cd, trivy, argo-workflows, chezmo...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: rancher-fleet, syft, zarf, kubescape, trivy, trivy-operator, tfsec, wolfictl, k9s, snyk-cli, xeol, tflint, zot, terraform, terragrunt, conftest, kots, steampipe, grype, opentofu...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: rancher-fleet, syft, zarf, kubescape, trivy, trivy-operator, tfsec, wolfictl, k9s, snyk-cli, xeol, tflint, zot, terraform, terragrunt, conftest, kots, steampipe, grype, opentofu...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: k9s, rancher-fleet-fips, tfsec, rancher-fleet, trivy-operator-fips, grype, steampipe, zarf, cloudbeat-fips, grype-db, chainctl, snyk-cli, kubescape, syft, trivy, terraform, xeol, kots, terraform-fips, conftest, k9s-fips, tflint, syft-fips, trivy-fips, xeol-fips, zot,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: k9s, rancher-fleet-fips, tfsec, rancher-fleet, trivy-operator-fips, grype, steampipe, zarf, cloudbeat-fips, grype-db, chainctl, snyk-cli, kubescape, syft, trivy, terraform, xeol, kots, terraform-fips, conftest, k9s-fips, tflint, syft-fips, trivy-fips, xeol-fips, zot,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: rke2-runtime, elvish, dex, eksctl, opa, direnv, aws-flb-firehose-fips, dask-gateway, kube-metrics-adapter-fips, crossplane-provider-family-azure, apache-exporter, yunikorn-k8shim, cluster-proportional-autoscaler, malcontent, cluster-api-gcp-controller,...