Open Source Vulnerabilities

grype, grype

syft, syft

chaos-mesh-fips-daemon

datadog-agent-fips-7.81

datadog-agent-fips-7.81

datadog-agent-fips-7.81

kubescape, kubescape

datadog-agent-fips-7.78

gitlab-rails-ce-19.2

cloudbeat-9.4

helm-exporter

eco-python-curl-nghttp2-dev

gitlab-rails-ce-18.9

mako

CVE-2026-41205 in mako - Patched by Root

mako

CVE-2026-44307 in mako - Patched by Root

envoy-gateway-fips-1.7-egctl

EspoCRM before 10.0.4 SSRF via IPv6 Transition Address Bypass

trivy-fips

Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout

Renovate before 44.14.7 Command Injection via distributionType

Renovate before 44.14.7 Command Injection via Mix organization

Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate before 44.14.7 Command Injection via gradle-wrapper

Renovate before 44.14.7 Command Injection via depName

Renovate before 44.3.1 Authentication Bypass via Digest Updates

Renovate before 44.14.4 TLS Private Key Log Sanitisation

Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate before 44.11.3 Credential Exfiltration via Link Header

Renovate before 44.11.3 Credential Exfiltration via Link Header

Traefik before v2.11.56 Identity Spoofing via Header Alias

Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass

Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

kargo-1.10, kargo-1.10

crossplane-cli-fips-2.4

helm-mapkubeapis, helm-mapkubeapis

buildctl, buildctl

MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization

buildkitd, buildkitd

dogstatsd-7.77, dogstatsd-7.77

google-osconfig-agent

xeol, xeol

chaos-mesh-daemon

eco-python-curl-minimal-dev

consul-k8s-fips-1.7-cli

skaffold-fips

gitlab-rails-ce-18.8

docker-cli-buildx, docker-cli-buildx

zarf, zarf

cloudbeat-fips-9.5

docker-compose, docker-compose