CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, docker-fips, cloudbeat-fips, grype-db, neuvector-scanner-fips, chainctl, spegel-fips, grype, docker-cli-buildx, neuvector-scanner, k9s, livekit-cli, zarf-fips, grype-fips, cloudbeat, manifest-tool, kube-mgmt, kubescape-server, packer-fips, syft,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: art, docker-fips, eks-distro-fips, kgateway, neuvector-sigstore-interface-fips, terraform-provider-databricks, aws-iam-authenticator-fips, authentik, azurefile-csi, flux-notification-controller, argo-workflows-fips, consul-k8s, tempo, kubescape-operator-fips, dapr,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: trivy, kgateway, newrelic-infrastructure-agent, helm-operator-fips, spegel-fips, grype, chaos-mesh-fips, k9s, grype-fips, skaffold-fips, helm-operator, kube-arangodb, scorecard, kots, trivy-fips, newrelic-infrastructure-agent-fips, docker-compose-fips,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, buildkitd, manifest-tool, docker-compose, neuvector-scanner, zot, trivy-operator, grype, dagger, fuse-overlayfs-snapshotter, kubescape, zarf, wolfictl, docker, kaniko, spegel, syft, k9s, trivy...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, buildkitd, manifest-tool, docker-compose, neuvector-scanner, zot, trivy-operator, grype, dagger, fuse-overlayfs-snapshotter, kubescape, zarf, wolfictl, docker, kaniko, spegel, syft, k9s, trivy...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, buildkitd, manifest-tool, docker-compose, neuvector-scanner, zot, trivy-operator, grype, dagger, fuse-overlayfs-snapshotter, kubescape, zarf, wolfictl, docker, kaniko, spegel, syft, k9s, trivy...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, buildkitd, manifest-tool, docker-compose, neuvector-scanner, zot, trivy-operator, grype, dagger, fuse-overlayfs-snapshotter, kubescape, zarf, wolfictl, docker, kaniko, spegel, syft, k9s, trivy...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, buildkitd, manifest-tool, docker-compose, neuvector-scanner, zot, trivy-operator, grype, dagger, fuse-overlayfs-snapshotter, kubescape, zarf, wolfictl, docker, kaniko, spegel, syft, k9s, trivy...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, buildkitd, manifest-tool, docker-compose, neuvector-scanner, zot, trivy-operator, grype, dagger, fuse-overlayfs-snapshotter, kubescape, zarf, wolfictl, docker, kaniko, spegel, syft, k9s, trivy...

CVE-2026-40090

Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf package inspect documentation subcommands. These subcommands output file paths are constructed by joining a...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips, trufflehog-fips,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips, trufflehog-fips,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: trivy, commercial-chainloop-cli, cerbos, grype, terragrunt-fips, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips,...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: trivy, commercial-chainloop-cli, cerbos, grype, terragrunt-fips, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips,...