GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector, gitea, nemo, flux-image-automation-controller, spire-server, helm, knative-serving-fips, kubescape-server-fips, cloudbeat, cilium, skaffold, kubescape, cilium-cli, k9s-fips, argocd-image-updater-fips, kubernetes, coder,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, bazelisk, falco-exporter, incert, docker-cli-buildx, fulcio, dfc, sbom-convert, nats, kubernetes-event-exporter, ko, renovate, spicedb-operator, terraform-docs, sops, kaf, kapp, petname, vault-k8s, openbao-k8s, gops, rancher-webhook,...

GHSA-9HV3-5J4J-V3P6 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk, openjdk-21-openj9...

GHSA-Q82R-2J7M-9RV4 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, traefik, sftpgo, terraform-provider-acme, traefik-fips...

GHSA-Q6GG-9F92-R9WG vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, falcoctl, trivy, buildah, tw, wolfictl, goreleaser, prometheus, opentelemetry-collector-contrib, aws-otel-collector, cadvisor, nerdctl, buf, apko, osv-scanner, zarf, zot, splunk-otel-collector, dagger, kargo, buildkitd, syft, grype, melange,...

CVE-2025-54388 vulnerabilities

Vulnerabilities for packages: buildkitd, opentelemetry-collector-fips, telegraf, agentbeat-fips, apko, opentelemetry-collector, prometheus-fips, spire-server-fips, grype-db, spire-server, trivy-fips, bootc-image-builder, docker-cli-buildx, melange, cg, goreleaser, docker-cli-buildx-fips,...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: buildkitd, opentelemetry-collector-fips, telegraf, agentbeat-fips, apko, opentelemetry-collector, prometheus-fips, spire-server-fips, grype-db, spire-server, trivy-fips, bootc-image-builder, docker-cli-buildx, melange, cg, goreleaser, docker-cli-buildx-fips,...

GHSA-RM8P-CX58-HCVX vulnerabilities

Vulnerabilities for packages: saf, lerna, kubeflow-centraldashboard...

GHSA-R5P3-955P-5GGQ vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips...

GHSA-4Q2V-9P7V-3V22 vulnerabilities

Vulnerabilities for packages: opensearch, apache-nifi, thingsboard, flyway, druid...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: cert-manager-fips, kots, chartmuseum-fips, helm-operator, cerbos, trivy-fips, helm-operator-fips, cerbos-fips, k8ssandra-client-fips, rancher-helm, flux-source-controller, istio, consul-k8s, k8sgpt, consul-k8s-fips, tw, k8ssandra-client, cilium-cli, flux, helm-push,...

Oracle Linux 9 : jq (ELSA-2025-10585)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10585 advisory. - Fix CVE-2025-48060 - Fix CVE-2024-23337 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: tez, gradle-stage0, confluent-common-docker, cassandra, cassandra-reaper, scala, celeborn...

GHSA-FV92-FJC5-JJ9H vulnerabilities

Vulnerabilities for packages: kots, agentbeat-fips, opentelemetry-collector, neuvector-sigstore-interface-fips, clusterctl, spire-server, kyverno-policy-reporter-ui, conftest, filebrowser, goreleaser, boring-registry-fips, tempo, gitlab-cng, dive, pgtimetable, nerdctl-fips, tekton-chains-fips,...

CVE-2025-6032 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, falco, prometheus-podman-exporter-fips...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath, cluster-autoscaler, azurefile-csi, rancher, rancher-agent, vcluster, yunikorn-k8shim, node-feature-discovery, calico, rancher-system-agent,...

GHSA-HJ2P-8WJ8-PFQ4 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, mesosphere-vsphere-csi, kubernetes-csi-driver-hostpath, cluster-autoscaler, azurefile-csi, rancher, rancher-agent, vcluster, yunikorn-k8shim, node-feature-discovery, calico, rancher-system-agent,...

GHSA-J57W-CC2H-3W6W vulnerabilities

Vulnerabilities for packages: mariadb...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, flux-notification-controller, incert, ko, cloudnative-pg, kaf, grafana-mimir, buf, protoc-gen-go-grpc, glab, nri-rabbitmq, liquibase-package-manager, terraform-mcp-server, newrelic-infra-operator, influx, cilium, hello-world-golang,...