GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, crossplane-provider-aws-opensearch-fips, helm-exporter, apiserver-network-proxy-fips, kube-state-metrics, nodetaint-fips, nodetaint, crossplane-provider-azure-authorization, kubevela, terraform-provider-grafana,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, k8ssandra-client, go-licenses, cert-exporter, mattermost, manifest-tool, bazelisk, whereabouts, opentelemetry-collector-contrib, neuvector-dbgen, nri-prometheus, traefik, terraform-provider-azurerm, vt-cli, redis-operator, grafana-mimir,...

GO-2025-3917 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: grype, kubescape, zarf, k9s, wolfictl, syft...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: nuclei, timoni, gptscript, dataplaneapi-fips, dataplaneapi...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: chart-testing-fips, helm-docs, kubescape, k8ssandra-client, trivy-operator, cluster-api-helm-controller, trivy-fips, teleport, headlamp-fips, envoy-gateway, linkerd2-fips, rancher-fleet-fips, kots, cerbos-fips, flux, harbor-fips, consul-k8s, helm-mapkubeapis,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: rustup, zola, deno, buck2, cargo-audit, lychee, oranda, tealdeer, fnm, sqlx, pixi, rustls-ffi, linkerd2-proxy, ztunnel, wadm, parseable, qdrant, wasm-pack, zizmor, ztunnel-fips, nushell, shadowsocks-rust, zed, samply, sccache, wasmcloud, atuin, linkerd-extension-init...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: cloudbeat, ko-fips, kyverno-policy-reporter-plugins-kyverno-fips, tkn, crossplane-fips, kyverno, tekton-chains-fips, trivy-operator, trivy-fips, teleport, ratify, aactl, commercial-chainloop-backend, ko, kyverno-fips, tekton-chains, kyverno-notation-aws-fips, zot,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, kube-state-metrics, nerdctl, nodetaint, crossplane-provider-azure-authorization, kubevela, terraform-provider-grafana, clickhouse-operator-fips, kubernetes-csi-external-snapshotter, git-sync-fips, kaniko-fips,...

GO-2025-3460 vulnerabilities

Vulnerabilities for packages: kots, zot...

GO-2024-2870 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubescape, zot...

GO-2024-2656 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: pluto, chart-testing, k8ssandra-client, k8sgpt, rancher-helm, envoy-gateway, linkerd2, helm-docs, rancher-fleet, flux-helm-controller, zarf, eksctl, kots, cert-manager-cmctl, tw, zot, cerbos, cilium-cli, cluster-api-helm-controller, helm-push, helm-operator, istio,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: teleport, gitness, ratify, k8ssandra-client, kyverno-notation-aws, helm-set-status, kube-arangodb, rancher-helm, xeol, rancher, argocd-image-updater, linkerd2, rancher-fleet, trivy-operator, vcluster, manifest-tool, argo-cd, consul-k8s, kyverno, zarf, eksctl,...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: podman, buildah, k8sgpt, undock, rancher, envoy-gateway, trivy-operator, opentelemetry-operator, aws-otel-collector, ko, kots, zot, amazon-cloudwatch-agent-operator, skopeo, nuclei, spire-server, nerdctl, rancher-agent, docker-credential-gcr, grafana, rancher-machine...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: podman, buildah, k8sgpt, undock, rancher, envoy-gateway, trivy-operator, opentelemetry-operator, aws-otel-collector, ko, kots, zot, amazon-cloudwatch-agent-operator, skopeo, nuclei, spire-server, nerdctl, rancher-agent, docker-credential-gcr, grafana, rancher-machine...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: telegraf, boring-registry, grafana-rollout-operator, cri-tools, pulumi, docker, ratify, tempo, kubevela, bento, ferretdb, k8ssandra-client, amazon-cloudwatch-agent, addon-resizer, external-dns, kube-metrics-adapter, sops, kubernetes-csi-driver-hostpath, envoy-gateway...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: falco-no-driver, slsa-verifier, vexctl, falcoctl, cosign, tekton-chains, skopeo, witness, gitsign, zarf, sigstore-scaffolding, aactl, kots, kubescape...

Qualys Expands Serverless Security with Vulnerability Scanning for AWS Lambda

Key Takeaways Qualys now delivers automated AWS Lambda vulnerability scanning , extending serverless security beyond posture checks CSPM into workload-level risk visibility. CSPM alone only catches misconfigurations excessive permissions, exposure, logging, encryption — it can't detect vulnerable...