CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: helm-set-status, helm, steampipe, trivy, kubescape-operator, helm-mapkubeapis, wolfictl, opa, rancher-helm, zot, neuvector-scanner, chartmuseum, newrelic-infrastructure-agent, xeol, headlamp, rancher, cluster-api-helm-controller, syft, kots, ctop, datadog-agent,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: bom, grype-db, cg, chainctl, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, gitea-fips, k9s-fips, kubescape-server-fips, skaffold-fips, trivy-operator, cerbos-fips, chainloop-cli, cerbos, chainctl-fips, syft-fips, gitaly-fips, kaniko-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: bom, grype-db, cg, chainctl, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, gitea-fips, k9s-fips, kubescape-server-fips, skaffold-fips, trivy-operator, cerbos-fips, chainloop-cli, cerbos, chainctl-fips, syft-fips, gitaly-fips, kaniko-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: steampipe, trivy, wolfictl, zot, conftest, task, xeol, syft, snyk-cli, kots, terraform, k9s, tfsec, kubescape, terragrunt, grype, tflint, zarf, trivy-operator, opentofu...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: steampipe, trivy, wolfictl, zot, conftest, task, xeol, syft, snyk-cli, kots, terraform, k9s, tfsec, kubescape, terragrunt, grype, tflint, zarf, trivy-operator, opentofu...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kube-vip, cluster-api-provider-vsphere, cloud-provider-aws, terraform-provider-random, dataplaneapi, apache-exporter, helm-mapkubeapis, spiffe-helper, mattermost, argo-workflows, zot, flannel, apisix-ingress-controller, lazydocker, falcoctl, apko,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: mailpit-fips, bom, ko-fips, kubevirt-cdi-uploadserver, azurefile-csi-fips, tigera-operator, nerdctl, go, kbld-fips, kube-conformance, fuse-overlayfs-snapshotter, ko, vault-env, beats, nerdctl-fips, traefik-fips, gitaly-fips, cilium-envoy, flux-helm-controller-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: mailpit-fips, bom, ko-fips, kubevirt-cdi-uploadserver, azurefile-csi-fips, tigera-operator, nerdctl, go, kbld-fips, kube-conformance, fuse-overlayfs-snapshotter, ko, vault-env, beats, nerdctl-fips, traefik-fips, gitaly-fips, cilium-envoy, flux-helm-controller-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: bom, grype-db, cg, chainctl, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, gitea-fips, k9s-fips, kubescape-server-fips, skaffold-fips, trivy-operator, cerbos-fips, cerbos, chainctl-fips, syft-fips, gitaly-fips, kaniko-fips, kubescape,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: bom, grype-db, cg, chainctl, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, gitea-fips, k9s-fips, kubescape-server-fips, skaffold-fips, trivy-operator, cerbos-fips, cerbos, chainctl-fips, syft-fips, gitaly-fips, kaniko-fips, kubescape,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: bom, grype-db, cg, chainctl, apko, argo-workflows-fips, kubescape-server, gitlab-runner-fips, gomplate, gitea-fips, k9s-fips, kubescape-server-fips, skaffold-fips, trivy-operator, cerbos-fips, cerbos, chainctl-fips, syft-fips, gitaly-fips, kaniko-fips, kubescape,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, steampipe, trivy, flux, crossplane, gitsign, wolfictl, argo-workflows, zot, pulumi-language-yaml, guac, xeol, src-fingerprint, snyk-cli, syft, kots, apko, flux-source-controller, kargo, nfpm, pulumi-language-java, pulumi, bom, gitea,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, steampipe, trivy, flux, crossplane, gitsign, wolfictl, argo-workflows, zot, pulumi-language-yaml, guac, xeol, src-fingerprint, snyk-cli, syft, kots, apko, flux-source-controller, kargo, nfpm, pulumi-language-java, pulumi, bom, gitea,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, steampipe, trivy, flux, crossplane, gitsign, wolfictl, argo-workflows, zot, pulumi-language-yaml, guac, xeol, src-fingerprint, snyk-cli, syft, kots, apko, flux-source-controller, kargo, nfpm, pulumi-language-java, pulumi, bom, gitea,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, steampipe, trivy, flux, crossplane, gitsign, wolfictl, argo-workflows, zot, pulumi-language-yaml, guac, xeol, src-fingerprint, snyk-cli, syft, kots, apko, flux-source-controller, kargo, nfpm, pulumi-language-java, pulumi, bom, gitea,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: bom, crossplane-function-go-templating, ko-fips, azurefile-csi-fips, tigera-operator, json-exporter, authentik, kubernetes-csi-livenessprobe, aws-ebs-csi-driver, go, kube-oidc-proxy, sqlexporter, kube-conformance, sftpgo-plugin-geoipfilter, kubo,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: bom, crossplane-function-go-templating, ko-fips, azurefile-csi-fips, tigera-operator, json-exporter, smokescreen, authentik, kubernetes-csi-livenessprobe, aws-ebs-csi-driver, go, go-spdk-helper, kbld-fips, kube-oidc-proxy, kuberay-operator-fips,...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: steampipe, trivy, wolfictl, zot, conftest, xeol, syft, snyk-cli, kots, terraform, k9s, tfsec, kubescape, terragrunt, grype, tflint, zarf, rancher-fleet, trivy-operator, opentofu...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: steampipe, trivy, wolfictl, zot, conftest, xeol, syft, snyk-cli, kots, terraform, k9s, tfsec, kubescape, terragrunt, grype, tflint, zarf, rancher-fleet, trivy-operator, opentofu...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: kots, grype-db, cloudbeat, chainctl, terraform, grype-fips, k9s-fips, xeol, opentofu, wolfictl, trivy-operator, rancher-fleet, syft-fips, zot, conftest, kubescape, trivy, grype, rancher-fleet-fips, xeol-fips, k9s, steampipe, terraform-fips, cloudbeat-fips, tflint,...