GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: octo-sts, ksops-fips, flux-kustomize-controller, harbor-fips, cloud-provider-azure-fips, grafana-agent-operator, plutono, cyberark-secrets-provider-for-k8s-fips, tfsec, cloud-provider-gcp-cloud-controller-manager-fips, crossplane-provider-kubernetes-fips,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kubescape-operator, nginx-prometheus-exporter, sbom-convert, trillian, helm-mapkubeapis, haproxy-ingress, skaffold, cloudprober, ghaudit, argo-workflows, container-object-storage-interface, k9s, knative-serving, mcp-grafana, rancher-telemetry,...

GO-2025-3917 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: grype, kubescape, syft, k9s, zarf, wolfictl...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: gptscript, nuclei, dataplaneapi-fips, timoni, dataplaneapi...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: k8sgpt, eksctl, k8ssandra-client-fips, trivy-fips, trivy-operator-fips, nova-fips, zot, flux-source-controller, rancher-fleet-fips, helm-set-status, flux-fips, k9s, envoy-gateway-fips, linkerd2, harbor-fips, consul-k8s-fips, cluster-api-helm-controller, chartmuseum,...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: wash, pixi, xh, samply, cargo-audit, ztunnel, oranda, ztunnel-fips, atuin, zola, wadm, zizmor, uv, kdash, fnm, wasm-pack, tealdeer, rustup, deno, buck2, linkerd-extension-init, lychee, linkerd2-proxy, qdrant, zed, parseable, wasmtime, wasmcloud, rustls-ffi, sqlx,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: commercial-chainloop-cli, kyverno-policy-reporter-plugins-kyverno, trivy-operator-fips, trivy-fips, zot, cloudbeat, slsa-verifier, commercial-kyverno, commercial-chainloop-backend, kyverno, skaffold-fips, vexctl, ratify, crossplane, trivy, cloudbeat-fips, kyverno-fip...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: octo-sts, emissary, thanos-operator, wazero-fips, distribution, conftest-fips, docker-cli, openbao-k8s-fips, syft, flux-kustomize-controller, redka, paranoia, harbor-fips, grafana-agent-operator, tfsec, crossplane-provider-azure-managedidentity, falco-exporter,...

GO-2025-3460 vulnerabilities

Vulnerabilities for packages: zot, kots...

GO-2024-2870 vulnerabilities

Vulnerabilities for packages: k8sgpt, zot, kubescape...

GO-2024-2656 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cilium-cli, helm-docs, envoy-gateway, chartmuseum, istio, kots, k9s, tw, zot, trivy, cluster-api-helm-controller, eksctl, rancher-helm, k8sgpt, pluto, rancher-fleet, zarf, cerbos, flux-source-controller, kargo, helm-push, helm-operator, linkerd2, chart-testing,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, helm-set-status, kubescape-operator, cilium-cli, helm-mapkubeapis, vcluster, chartmuseum, xeol, gitness, kots, teleport, k9s, argo-cd, kyverno, manifest-tool, tigera-operator, gatekeeper, tw, gogatekeeper, trivy, ratify, consul-k8s,...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, envoy-gateway, kots, aws-otel-collector, zot, trivy, rancher-machine, portieris, podman, skopeo, k8sgpt, undock, trivy-operator, buildah, nerdctl, grafana, rancher-agent, amazon-cloudwatch-agent-operator, spire-server, opentelemetry-operator, k...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, envoy-gateway, kots, aws-otel-collector, zot, trivy, osv-scanner, rancher-machine, portieris, podman, skopeo, k8sgpt, undock, trivy-operator, buildah, nerdctl, grafana, rancher-agent, amazon-cloudwatch-agent-operator, spire-server,...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, snyk-cli, kubescape-operator, calico, grafana-agent-operator, trillian, kubernetes-dns-node-cache, harbor-registry, gomplate, kubernetes-csi-driver-hostpath, node-feature-discovery, chartmuseum, certificate-transparency, haproxy-ingress,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: aactl, sigstore-scaffolding, zarf, tekton-chains, gitsign, vexctl, cosign, witness, falcoctl, kots, kubescape, skopeo, slsa-verifier, falco-no-driver...

Qualys Expands Serverless Security with Vulnerability Scanning for AWS Lambda

Key Takeaways Qualys now delivers automated AWS Lambda vulnerability scanning , extending serverless security beyond posture checks CSPM into workload-level risk visibility. CSPM alone only catches misconfigurations excessive permissions, exposure, logging, encryption — it can't detect vulnerable...