CVE-2025-26633
GoogleExploitedCISA KEV listedHIGH2025-03-11
CVEs:CVE-2025-26633
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 41 are already weaponised in the wild.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
CVEs:CVE-2025-26633
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVEs:CVE-2025-26633
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| windows_10_1507 | affected | microsoft | — | — |
| windows_10_1607 | affected | microsoft | — | — |
| windows_10_1809 | affected | microsoft | — | — |
| windows_10_21h2 | affected | microsoft | — | — |
| windows_10_22h2 | affected | microsoft | — | — |
| windows_11_22h2 | affected | microsoft | — | — |
| windows_11_23h2 | affected | microsoft | — | — |
| windows_11_24h2 | affected | microsoft | — | — |
| windows_server_2008 | affected | microsoft | — | — |
| windows_server_2012 | affected | microsoft | — | — |
| windows_server_2016 | affected | microsoft | — | — |
| windows_server_2019 | affected | microsoft | — | — |
| windows_server_2022 | affected | microsoft | — | — |
| windows_server_2022_23h2 | affected | microsoft | — | — |
| windows_server_2025 | affected | microsoft | — | — |
Microsoft Management Console Security Feature Bypass Vulnerability
CVEs:CVE-2025-26633
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.
CVEs:CVE-2025-27363
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed s...
CVEs:CVE-2025-27363
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| debian_linux | affected | debian | — | — |
| freetype | affected | freetype | — | — |
CVEs:CVE-2025-27363
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary cod
CVEs:CVE-2025-27363
GHSA-hfqm-jfc6-rh2f
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
CVEs:CVE-2025-2783
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVEs:CVE-2025-2783
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVEs:CVE-2025-2783
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
chromium - security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
CVEs:CVE-2025-24985
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
CVEs:CVE-2025-24985
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVEs:CVE-2025-24985
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| windows_10_1507 | affected | microsoft | — | — |
| windows_10_1607 | affected | microsoft | — | — |
| windows_10_1809 | affected | microsoft | — | — |
| windows_10_21h2 | affected | microsoft | — | — |
| windows_10_22h2 | affected | microsoft | — | — |
| windows_11_22h2 | affected | microsoft | — | — |
| windows_11_23h2 | affected | microsoft | — | — |
| windows_11_24h2 | affected | microsoft | — | — |
| windows_server_2008 | affected | microsoft | — | — |
| windows_server_2012 | affected | microsoft | — | — |
| windows_server_2016 | affected | microsoft | — | — |
| windows_server_2019 | affected | microsoft | — | — |
| windows_server_2022 | affected | microsoft | — | — |
| windows_server_2022_23h2 | affected | microsoft | — | — |
| windows_server_2025 | affected | microsoft | — | — |
DEBIAN-CVE-2025-24201
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| webkit2gtk | affected | Debian:11 | webkit2gtk | — |
| webkit2gtk | affected | Debian:12 | webkit2gtk | — |
| webkit2gtk | affected | Debian:13 | webkit2gtk | — |
| webkit2gtk | affected | Debian:14 | webkit2gtk | — |
| wpewebkit | affected | Debian:11 | wpewebkit | — |
| wpewebkit | affected | Debian:12 | wpewebkit | — |
| wpewebkit | affected | Debian:13 | wpewebkit | — |
| wpewebkit | affected | Debian:14 | wpewebkit | — |
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).
CVEs:CVE-2025-24201
CVEs:CVE-2025-24201
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have
CVEs:CVE-2025-24201
An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequ...
CVEs:CVE-2025-24201
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| debian_linux | affected | debian | — | — |
| ipados | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| macos | affected | apple | — | — |
| safari | affected | apple | — | — |
| visionos | affected | apple | — | — |
| watchos | affected | apple | — | — |
CVEs:CVE-2025-24993
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVEs:CVE-2025-24993
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| windows_10_1507 | affected | microsoft | — | — |
| windows_10_1607 | affected | microsoft | — | — |
| windows_10_1809 | affected | microsoft | — | — |
| windows_10_21h2 | affected | microsoft | — | — |
| windows_10_22h2 | affected | microsoft | — | — |
| windows_11_22h2 | affected | microsoft | — | — |
| windows_11_23h2 | affected | microsoft | — | — |
| windows_11_24h2 | affected | microsoft | — | — |
| windows_server_2008 | affected | microsoft | — | — |
| windows_server_2012 | affected | microsoft | — | — |
| windows_server_2016 | affected | microsoft | — | — |
| windows_server_2019 | affected | microsoft | — | — |
| windows_server_2022 | affected | microsoft | — | — |
| windows_server_2022_23h2 | affected | microsoft | — | — |
| windows_server_2025 | affected | microsoft | — | — |
Windows NTFS Remote Code Execution Vulnerability
CVEs:CVE-2025-24993
CVEs:CVE-2025-24991
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVEs:CVE-2025-24991
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| windows_10_1507 | affected | microsoft | — | — |
| windows_10_1607 | affected | microsoft | — | — |
| windows_10_1809 | affected | microsoft | — | — |
| windows_10_21h2 | affected | microsoft | — | — |
| windows_10_22h2 | affected | microsoft | — | — |
| windows_11_22h2 | affected | microsoft | — | — |
| windows_11_23h2 | affected | microsoft | — | — |
| windows_11_24h2 | affected | microsoft | — | — |
| windows_server_2008 | affected | microsoft | — | — |
| windows_server_2012 | affected | microsoft | — | — |
| windows_server_2016 | affected | microsoft | — | — |
| windows_server_2019 | affected | microsoft | — | — |
| windows_server_2022 | affected | microsoft | — | — |
| windows_server_2022_23h2 | affected | microsoft | — | — |
| windows_server_2025 | affected | microsoft | — | — |
Windows NTFS Information Disclosure Vulnerability
CVEs:CVE-2025-24991
CVEs:CVE-2025-24984
Windows NTFS Information Disclosure Vulnerability
CVEs:CVE-2025-24984
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVEs:CVE-2025-24984
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| windows_10_1507 | affected | microsoft | — | — |
| windows_10_1607 | affected | microsoft | — | — |
| windows_10_1809 | affected | microsoft | — | — |
| windows_10_21h2 | affected | microsoft | — | — |
| windows_10_22h2 | affected | microsoft | — | — |
| windows_11_22h2 | affected | microsoft | — | — |
| windows_11_23h2 | affected | microsoft | — | — |
| windows_11_24h2 | affected | microsoft | — | — |
| windows_server_2012 | affected | microsoft | — | — |
| windows_server_2016 | affected | microsoft | — | — |
| windows_server_2019 | affected | microsoft | — | — |
| windows_server_2022 | affected | microsoft | — | — |
| windows_server_2022_23h2 | affected | microsoft | — | — |
| windows_server_2025 | affected | microsoft | — | — |
CVEs:CVE-2025-24983
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVEs:CVE-2025-24983
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| windows_10_1507 | affected | microsoft | — | — |
| windows_10_1607 | affected | microsoft | — | — |
| windows_server_2008 | affected | microsoft | — | — |
| windows_server_2012 | affected | microsoft | — | — |
| windows_server_2016 | affected | microsoft | — | — |
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVEs:CVE-2025-24983
CVEs:CVE-2025-22225
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.
CVEs:CVE-2025-22225
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cloud_foundation | affected | vmware | — | — |
| esxi | affected | vmware | — | — |
| telco_cloud_infrastructure | affected | vmware | — | — |
| telco_cloud_platform | affected | vmware | — | — |
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sandbox.
CVEs:CVE-2025-22225
ASB-A-380395346
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
ingress-nginx admission controller RCE escalation in k8s.io/ingress-nginx
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ingress-nginx admission controller RCE escalation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
ingress-nginx admission controller RCE escalation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.10 | affected | wolfi | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.10 | affected | chainguard | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.11 | affected | chainguard | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.11 | affected | wolfi | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.10 | affected | chainguard | ingress-nginx-controller-fips-1.10 | — |
| ingress-nginx-controller-fips-1.11 | affected | chainguard | ingress-nginx-controller-fips-1.11 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ingress-nginx admission controller RCE escalation
CVEs:CVE-2025-1974
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of...
CVEs:CVE-2025-1974
ingress-nginx controller - configuration injection via unsanitized mirror annotations in k8s.io/ingress-nginx
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ingress-nginx controller - configuration injection via unsanitized mirror annotations
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.10 | affected | chainguard | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.10 | affected | wolfi | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.11 | affected | chainguard | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.11 | affected | wolfi | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.10 | affected | chainguard | ingress-nginx-controller-fips-1.10 | — |
| ingress-nginx-controller-fips-1.11 | affected | chainguard | ingress-nginx-controller-fips-1.11 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ingress-nginx controller - configuration injection via unsanitized mirror annotations
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
ingress-nginx controller - configuration injection via unsanitized mirror annotations
CVEs:CVE-2025-1098
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target` and `mirror-host` Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code exe...
CVEs:CVE-2025-1098
ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation in k8s.io/ingress-nginx
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.10 | affected | wolfi | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.10 | affected | chainguard | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.11 | affected | chainguard | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.11 | affected | wolfi | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.10 | affected | chainguard | ingress-nginx-controller-fips-1.10 | — |
| ingress-nginx-controller-fips-1.11 | affected | chainguard | ingress-nginx-controller-fips-1.11 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
CVEs:CVE-2025-1097
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-cn` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of ...
CVEs:CVE-2025-1097
ingress-nginx controller - configuration injection via unsanitized auth-url annotation in k8s.io/ingress-nginx
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ingress-nginx controller - configuration injection via unsanitized auth-url annotation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.10 | affected | wolfi | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.10 | affected | chainguard | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.11 | affected | chainguard | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.11 | affected | wolfi | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.10 | affected | chainguard | ingress-nginx-controller-fips-1.10 | — |
| ingress-nginx-controller-fips-1.11 | affected | chainguard | ingress-nginx-controller-fips-1.11 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ingress-nginx controller - configuration injection via unsanitized auth-url annotation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingre...
CVEs:CVE-2025-24514
ingress-nginx controller - configuration injection via unsanitized auth-url annotation
CVEs:CVE-2025-24514
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
Ollama Divide By Zero vulnerability in github.com/ollama/ollama
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| mods | affected | wolfi | mods | — |
| mods | affected | chainguard | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Divide By Zero vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| mods | affected | wolfi | mods | — |
| mods | affected | chainguard | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Divide By Zero vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
CVEs:CVE-2025-29806
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVEs:CVE-2025-29806
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| edge_chromium | affected | microsoft | — | — |
Out-of-bounds Read in Ruby JSON Parser
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| json | affected | RubyGems | json | — |
Out-of-bounds Read in Ruby JSON Parser
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| json | affected | RubyGems | json | — |
| ruby3.1-fluentd-kubernetes-daemonset-1.16 | affected | chainguard | ruby3.1-fluentd-kubernetes-daemonset-1.16 | — |
| ruby3.2-fluentd-kubernetes-daemonset-1.16 | affected | chainguard | ruby3.2-fluentd-kubernetes-daemonset-1.16 | — |
| ruby3.2-json | affected | chainguard | ruby3.2-json | — |
| ruby3.2-json | affected | wolfi | ruby3.2-json | — |
| ruby3.3-fluentd-kubernetes-daemonset-1.16 | affected | chainguard | ruby3.3-fluentd-kubernetes-daemonset-1.16 | — |
| ruby3.3-json | affected | wolfi | ruby3.3-json | — |
| ruby3.3-json | affected | chainguard | ruby3.3-json | — |
| ruby3.4-fluentd-kubernetes-daemonset-1.16 | affected | chainguard | ruby3.4-fluentd-kubernetes-daemonset-1.16 | — |
| ruby3.4-json | affected | chainguard | ruby3.4-json | — |
| ruby3.4-json | affected | wolfi | ruby3.4-json | — |
CVEs:CVE-2025-26643
The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVEs:CVE-2025-26643
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| edge_chromium | affected | microsoft | — | — |
Ollama Allocation of Resources Without Limits or Throttling vulnerability in github.com/ollama/ollama
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| mods | affected | wolfi | mods | — |
| mods | affected | chainguard | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Allocation of Resources Without Limits or Throttling vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| mods | affected | wolfi | mods | — |
| mods | affected | chainguard | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Allocation of Resources Without Limits or Throttling vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Denial of Service (DoS) via Null Pointer Dereference
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| mods | affected | chainguard | mods | — |
| mods | affected | wolfi | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Denial of Service (DoS) via Null Pointer Dereference
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
istioctl-1.25.1-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| istioctl | affected | openSUSE:Tumbleweed | istioctl | — |
Crash due to uncontrolled recursion in protobuf crate
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| parseable | affected | chainguard | parseable | — |
| parseable | affected | wolfi | parseable | — |
| protobuf | affected | crates.io | protobuf | — |
| qdrant | affected | chainguard | qdrant | — |
| qdrant | affected | wolfi | qdrant | — |
| rust-analyzer | affected | chainguard | rust-analyzer | — |
| rust-analyzer | affected | wolfi | rust-analyzer | — |
| yara-x | affected | wolfi | yara-x | — |
| yara-x | affected | chainguard | yara-x | — |
| ztunnel-1.24 | affected | wolfi | ztunnel-1.24 | — |
| ztunnel-1.24 | affected | chainguard | ztunnel-1.24 | — |
| ztunnel-1.25 | affected | chainguard | ztunnel-1.25 | — |
| ztunnel-1.25 | affected | wolfi | ztunnel-1.25 | — |
| ztunnel-fips-1.25 | affected | chainguard | ztunnel-fips-1.25 | — |
Crash due to uncontrolled recursion in protobuf crate
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| protobuf | affected | crates.io | protobuf | — |
chromium - security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
CVEs:CVE-2025-1507
The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_actions() function in all versions up to, and including, 3.2.1. This makes it possible ...
CVEs:CVE-2025-1507
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dashboard_for_google_analytics | affected | sharethis | — | — |
The Stylish Google Sheet Reader 4.0 WordPress plugin before 4.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVEs:CVE-2024-13863
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| stylish_google_sheet_reader | affected | wppluginbox | — | — |
CVEs:CVE-2024-13863
CVEs:CVE-2025-1121
Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially craft...
CVEs:CVE-2025-1121
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome_os | affected | — | — |
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed...
CVEs:CVE-2025-20650
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| openwrt | affected | openwrt | — | — |
| rdk-b | affected | rdkcentral | — | — |
| yocto | affected | linuxfoundation | — | — |
CVEs:CVE-2025-20650
CVEs:CVE-2025-20652
In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is neede...
CVEs:CVE-2025-20652
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In dhd_process_full_gscan_result of dhd_pno.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-56191
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-56191
In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploi...
CVEs:CVE-2024-56186
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-56186
PUB-A-353680998
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In wl_notify_gscan_event of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2024-56192
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-56192
CVEs:CVE-2024-56185
In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interactio...
CVEs:CVE-2024-56185
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-364794723
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue...
CVEs:CVE-2025-20648
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-20648
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with...
CVEs:CVE-2025-2713
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gvisor | affected | — | — |
CVEs:CVE-2025-2713
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.
CVEs:CVE-2025-2713
DEBIAN-CVE-2025-2713
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-gvisor-gvisor | affected | Debian:12 | golang-gvisor-gvisor | — |
| golang-gvisor-gvisor | affected | Debian:13 | golang-gvisor-gvisor | — |
| golang-gvisor-gvisor | affected | Debian:14 | golang-gvisor-gvisor | — |
Updated chromium-browser-stable packages fix security vulnerabilities
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium-browser-stable | affected | Mageia:9 | chromium-browser-stable | — |
chromedriver-134.0.6998.88-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Tumbleweed | chromium | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Leap 15.6 | chromium | — |
| chromium | affected | SUSE:Package Hub 15 SP6 | chromium | — |
GHSA-m4gm-mjf9-cm9c
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
CVEs:CVE-2025-2135
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2025-2135
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2025-2135
DEBIAN-CVE-2025-2135
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
ingress-nginx controller - auth secret file path traversal vulnerability in k8s.io/ingress-nginx
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
ingress-nginx controller - auth secret file path traversal vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
ingress-nginx controller - auth secret file path traversal vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
| ingress-nginx-controller-1.10 | affected | chainguard | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.10 | affected | wolfi | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.11 | affected | wolfi | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.11 | affected | chainguard | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.13 | affected | chainguard | ingress-nginx-controller-1.13 | — |
| ingress-nginx-controller-1.14 | affected | wolfi | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.14 | affected | chainguard | ingress-nginx-controller-1.14 | — |
| ingress-nginx-controller-1.15 | affected | wolfi | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-1.15 | affected | chainguard | ingress-nginx-controller-1.15 | — |
| ingress-nginx-controller-fips-1.10 | affected | chainguard | ingress-nginx-controller-fips-1.10 | — |
| ingress-nginx-controller-fips-1.11 | affected | chainguard | ingress-nginx-controller-fips-1.11 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ingress-nginx-controller-fips-1.13 | affected | chainguard | ingress-nginx-controller-fips-1.13 | — |
| ingress-nginx-controller-fips-1.14 | affected | chainguard | ingress-nginx-controller-fips-1.14 | — |
| ingress-nginx-controller-fips-1.15 | affected | chainguard | ingress-nginx-controller-fips-1.15 | — |
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided data are included in a filename by the ingress-nginx Admission Controller feature, resulting in directory traversal within the contai...
CVEs:CVE-2025-24513
ingress-nginx controller - auth secret file path traversal vulnerability
CVEs:CVE-2025-24513
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
ingress-nginx controller - auth secret file path traversal vulnerability
CVEs:CVE-2025-24513
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ingress-nginx | affected | k8s.io | k8s.io/ingress-nginx | — |
Updated chromium-browser-stable packages fix security vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium-browser-stable | affected | Mageia:9 | chromium-browser-stable | — |
chromedriver-134.0.6998.117-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Tumbleweed | chromium | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | SUSE:Package Hub 15 SP6 | chromium | — |
| chromium | affected | openSUSE:Leap 15.6 | chromium | — |
chromium - security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
GHSA-422v-qjrr-7jh4
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2025-2476
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2025-2476
Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2025-2476
DEBIAN-CVE-2025-2476
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Fix CVE(s): CVE-2024-11168, CVE-2024-4032, CVE-2025-0938
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| idle-python3.5 | affected | TuxCare:Ubuntu:16.04 | idle-python3.5 | — |
| libpython3.5 | affected | TuxCare:Ubuntu:16.04 | libpython3.5 | — |
| libpython3.5-dev | affected | TuxCare:Ubuntu:16.04 | libpython3.5-dev | — |
| libpython3.5-minimal | affected | TuxCare:Ubuntu:16.04 | libpython3.5-minimal | — |
| libpython3.5-stdlib | affected | TuxCare:Ubuntu:16.04 | libpython3.5-stdlib | — |
| libpython3.5-testsuite | affected | TuxCare:Ubuntu:16.04 | libpython3.5-testsuite | — |
| python3.5 | affected | TuxCare:Ubuntu:16.04 | python3.5 | — |
| python3.5-dev | affected | TuxCare:Ubuntu:16.04 | python3.5-dev | — |
| python3.5-doc | affected | TuxCare:Ubuntu:16.04 | python3.5-doc | — |
| python3.5-examples | affected | TuxCare:Ubuntu:16.04 | python3.5-examples | — |
| python3.5-minimal | affected | TuxCare:Ubuntu:16.04 | python3.5-minimal | — |
| python3.5-venv | affected | TuxCare:Ubuntu:16.04 | python3.5-venv | — |
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-cd-2.11 | affected | chainguard | argo-cd-2.11 | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| azuredisk-csi-1.28 | affected | chainguard | azuredisk-csi-1.28 | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-fips-0.5 | affected | chainguard | rancher-webhook-fips-0.5 | — |
| rancher-webhook-fips-0.6 | affected | chainguard | rancher-webhook-fips-0.6 | — |
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-cd-2.10 | affected | wolfi | argo-cd-2.10 | — |
| argo-cd-2.10 | affected | chainguard | argo-cd-2.10 | — |
| argo-cd-2.11 | affected | chainguard | argo-cd-2.11 | — |
| argo-cd-2.11 | affected | wolfi | argo-cd-2.11 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.11 | affected | chainguard | argo-cd-fips-2.11 | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| azuredisk-csi-1.28 | affected | chainguard | azuredisk-csi-1.28 | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| calico-3.27 | affected | chainguard | calico-3.27 | — |
| calico-3.28 | affected | chainguard | calico-3.28 | — |
| calico-3.28 | affected | wolfi | calico-3.28 | — |
| calico-fips-3.27 | affected | chainguard | calico-fips-3.27 | — |
| calico-fips-3.28 | affected | chainguard | calico-fips-3.28 | — |
| cluster-autoscaler-1.28 | affected | chainguard | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.28 | affected | wolfi | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| eks-distro-1.27 | affected | chainguard | eks-distro-1.27 | — |
| eks-distro-1.28 | affected | chainguard | eks-distro-1.28 | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-fips-1.27 | affected | chainguard | eks-distro-fips-1.27 | — |
| eks-distro-fips-1.28 | affected | chainguard | eks-distro-fips-1.28 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| emissary-fips | affected | chainguard | emissary-fips | — |
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| rancher-2.8 | affected | wolfi | rancher-2.8 | — |
| rancher-2.8 | affected | chainguard | rancher-2.8 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.11 | affected | wolfi | rancher-agent-2.11 | — |
| rancher-agent-2.8 | affected | chainguard | rancher-agent-2.8 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-agent-2.9 | affected | wolfi | rancher-agent-2.9 | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.5 | affected | wolfi | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-fips-0.5 | affected | chainguard | rancher-webhook-fips-0.5 | — |
| rancher-webhook-fips-0.6 | affected | chainguard | rancher-webhook-fips-0.6 | — |
Red Hat Security Advisory: gvisor-tap-vsock security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gvisor-tap-vsock | affected | Red Hat:rhel_eus:9.4::appstream | gvisor-tap-vsock | — |
| gvisor-tap-vsock-debuginfo | affected | Red Hat:rhel_eus:9.4::appstream | gvisor-tap-vsock-debuginfo | — |
| gvisor-tap-vsock-debugsource | affected | Red Hat:rhel_eus:9.4::appstream | gvisor-tap-vsock-debugsource | — |
Security update for google-osconfig-agent
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-osconfig-agent | affected | SUSE:Linux Enterprise Micro 5.5 | google-osconfig-agent | — |
| google-osconfig-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | google-osconfig-agent | — |
| google-osconfig-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | google-osconfig-agent | — |
| google-osconfig-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | google-osconfig-agent | — |
| google-osconfig-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | google-osconfig-agent | — |
| google-osconfig-agent | affected | openSUSE:Leap 15.6 | google-osconfig-agent | — |
Security update for google-guest-agent
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-guest-agent | affected | SUSE:Linux Enterprise Micro 5.5 | google-guest-agent | — |
| google-guest-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | google-guest-agent | — |
| google-guest-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | google-guest-agent | — |
| google-guest-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | google-guest-agent | — |
| google-guest-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | google-guest-agent | — |
| google-guest-agent | affected | openSUSE:Leap 15.6 | google-guest-agent | — |
Security update for google-cloud-sap-agent
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-cloud-sap-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | google-cloud-sap-agent | — |
| google-cloud-sap-agent | affected | openSUSE:Leap 15.6 | google-cloud-sap-agent | — |
| google-cloud-sap-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | google-cloud-sap-agent | — |
| google-cloud-sap-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | google-cloud-sap-agent | — |
| google-cloud-sap-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | google-cloud-sap-agent | — |
Security update for google-cloud-sap-agent
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-cloud-sap-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 12 | google-cloud-sap-agent | — |
Security update for google-guest-agent
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-guest-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 12 | google-guest-agent | — |
Security update for google-osconfig-agent
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-osconfig-agent | affected | SUSE:Linux Enterprise Module for Public Cloud 12 | google-osconfig-agent | — |
google-guest-agent-20250116.00-3.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-guest-agent | affected | openSUSE:Tumbleweed | google-guest-agent | — |
google-osconfig-agent-20250115.01-3.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-osconfig-agent | affected | openSUSE:Tumbleweed | google-osconfig-agent | — |
Excessive memory allocation during header parsing in github.com/golang-jwt/jwt
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | wolfi | aactl | — |
| aactl | affected | chainguard | aactl | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller-fips | affected | chainguard | actions-runner-controller-fips | — |
| agentbeat-fips | affected | chainguard | agentbeat-fips | — |
| amazon-cloudwatch-agent | affected | wolfi | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent | affected | chainguard | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent-fips | affected | chainguard | amazon-cloudwatch-agent-fips | — |
| amazon-cloudwatch-agent-operator | affected | wolfi | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator | affected | chainguard | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator-fips | affected | chainguard | amazon-cloudwatch-agent-operator-fips | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-events-fips | affected | chainguard | argo-events-fips | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis | affected | chainguard | atlantis | — |
| atlantis | affected | wolfi | atlantis | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-eks-pod-identity-agent | affected | wolfi | aws-eks-pod-identity-agent | — |
| aws-eks-pod-identity-agent | affected | chainguard | aws-eks-pod-identity-agent | — |
| aws-eks-pod-identity-agent-fips | affected | chainguard | aws-eks-pod-identity-agent-fips | — |
| azcopy | affected | wolfi | azcopy | — |
| azcopy | affected | chainguard | azcopy | — |
| azcopy-fips | affected | chainguard | azcopy-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| azuredisk-csi-1.28 | affected | chainguard | azuredisk-csi-1.28 | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-1.30 | affected | chainguard | azuredisk-csi-1.30 | — |
| azuredisk-csi-1.31 | affected | chainguard | azuredisk-csi-1.31 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| azuredisk-csi-fips-1.30 | affected | chainguard | azuredisk-csi-fips-1.30 | — |
| azuredisk-csi-fips-1.31 | affected | chainguard | azuredisk-csi-fips-1.31 | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd-fips | affected | chainguard | buildkitd-fips | — |
| cert-manager-fips-1.17 | affected | chainguard | cert-manager-fips-1.17 | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum-fips | affected | chainguard | chartmuseum-fips | — |
| chezmoi | affected | wolfi | chezmoi | — |
| chezmoi | affected | chainguard | chezmoi | — |
| cilium-fips-1.15 | affected | chainguard | cilium-fips-1.15 | — |
| cilium-fips-1.16 | affected | chainguard | cilium-fips-1.16 | — |
| cilium-fips-1.17 | affected | chainguard | cilium-fips-1.17 | — |
| cloudbeat-8.17 | affected | chainguard | cloudbeat-8.17 | — |
| cloudbeat-fips-8.17 | affected | chainguard | cloudbeat-fips-8.17 | — |
| cloud-provider-azure-1.27 | affected | chainguard | cloud-provider-azure-1.27 | — |
| cloud-provider-azure-1.28 | affected | chainguard | cloud-provider-azure-1.28 | — |
| cloud-provider-azure-1.29 | affected | chainguard | cloud-provider-azure-1.29 | — |
| cloud-provider-azure-1.30 | affected | chainguard | cloud-provider-azure-1.30 | — |
| cloud-provider-azure-1.31 | affected | chainguard | cloud-provider-azure-1.31 | — |
| cloud-provider-azure-1.32 | affected | chainguard | cloud-provider-azure-1.32 | — |
| cloud-provider-azure-fips-1.27 | affected | chainguard | cloud-provider-azure-fips-1.27 | — |
| cloud-provider-azure-fips-1.28 | affected | chainguard | cloud-provider-azure-fips-1.28 | — |
| cloud-provider-azure-fips-1.29 | affected | chainguard | cloud-provider-azure-fips-1.29 | — |
| cloud-provider-azure-fips-1.30 | affected | chainguard | cloud-provider-azure-fips-1.30 | — |
| cloud-provider-azure-fips-1.31 | affected | chainguard | cloud-provider-azure-fips-1.31 | — |
| cloud-provider-azure-fips-1.32 | affected | chainguard | cloud-provider-azure-fips-1.32 | — |
| cluster-autoscaler-1.31 | affected | chainguard | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-fips-1.31 | affected | chainguard | cluster-autoscaler-fips-1.31 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| consul-1.18 | affected | chainguard | consul-1.18 | — |
| consul-1.19 | affected | chainguard | consul-1.19 | — |
| consul-1.20 | affected | chainguard | consul-1.20 | — |
| consul-fips-1.19 | affected | chainguard | consul-fips-1.19 | — |
| consul-fips-1.20 | affected | chainguard | consul-fips-1.20 | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cortex-fips | affected | chainguard | cortex-fips | — |
| cosign | affected | wolfi | cosign | — |
| cosign | affected | chainguard | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure-authorization | affected | chainguard | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-authorization | affected | wolfi | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-managedidentity | affected | chainguard | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-managedidentity | affected | wolfi | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-sql | affected | wolfi | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-sql | affected | chainguard | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-storage | affected | chainguard | crossplane-provider-azure-storage | — |
| crossplane-provider-azure-storage | affected | wolfi | crossplane-provider-azure-storage | — |
| crossplane-provider-family-azure | affected | wolfi | crossplane-provider-family-azure | — |
| crossplane-provider-family-azure | affected | chainguard | crossplane-provider-family-azure | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| distribution | affected | chainguard | distribution | — |
| distribution | affected | wolfi | distribution | — |
| distribution-fips | affected | chainguard | distribution-fips | — |
| docker | affected | chainguard | docker | — |
| docker | affected | wolfi | docker | — |
| docker-fips | affected | chainguard | docker-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| etcd-3.4 | affected | chainguard | etcd-3.4 | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| etcd-fips-3.4 | affected | chainguard | etcd-fips-3.4 | — |
| etcd-fips-3.5 | affected | chainguard | etcd-fips-3.5 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| falcosidekick | affected | chainguard | falcosidekick | — |
| falcosidekick | affected | wolfi | falcosidekick | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| filebrowser | affected | chainguard | filebrowser | — |
| filebrowser | affected | wolfi | filebrowser | — |
| fluent-bit-plugin-loki | affected | wolfi | fluent-bit-plugin-loki | — |
| fluent-bit-plugin-loki | affected | chainguard | fluent-bit-plugin-loki | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-2.5 | affected | chainguard | flux-2.5 | — |
| flux-fips-2.4 | affected | chainguard | flux-fips-2.4 | — |
| flux-fips-2.5 | affected | chainguard | flux-fips-2.5 | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller-fips | affected | chainguard | flux-image-automation-controller-fips | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller-fips | affected | chainguard | flux-image-reflector-controller-fips | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-kustomize-controller-fips | affected | chainguard | flux-kustomize-controller-fips | — |
| flux-notification-controller | affected | chainguard | flux-notification-controller | — |
| flux-notification-controller | affected | wolfi | flux-notification-controller | — |
| flux-notification-controller-fips | affected | chainguard | flux-notification-controller-fips | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller-fips | affected | chainguard | flux-source-controller-fips | — |
| flyte | affected | chainguard | flyte | — |
| flyte | affected | wolfi | flyte | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| gitea | affected | wolfi | gitea | — |
| gitea | affected | chainguard | gitea | — |
| gitea-fips | affected | chainguard | gitea-fips | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gitsign | affected | wolfi | gitsign | — |
| gitsign | affected | chainguard | gitsign | — |
| git-sync | affected | chainguard | git-sync | — |
| git-sync | affected | wolfi | git-sync | — |
| git-sync-fips | affected | chainguard | git-sync-fips | — |
| glab | affected | wolfi | glab | — |
| glab | affected | chainguard | glab | — |
| golang-jwt/jwt | affected | github.com | github.com/golang-jwt/jwt | — |
| golang-jwt/jwt/v4 | affected | github.com | github.com/golang-jwt/jwt/v4 | — |
| golang-jwt/jwt/v5 | affected | github.com | github.com/golang-jwt/jwt/v5 | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate-fips | affected | chainguard | gomplate-fips | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| grafana-11.3 | affected | chainguard | grafana-11.3 | — |
| grafana-11.4 | affected | chainguard | grafana-11.4 | — |
| grafana-11.5 | affected | chainguard | grafana-11.5 | — |
| grafana-agent-operator | affected | wolfi | grafana-agent-operator | — |
| grafana-agent-operator | affected | chainguard | grafana-agent-operator | — |
| grafana-alloy | affected | wolfi | grafana-alloy | — |
| grafana-alloy | affected | chainguard | grafana-alloy | — |
| grafana-alloy-fips | affected | chainguard | grafana-alloy-fips | — |
| grafana-fips-11.4 | affected | chainguard | grafana-fips-11.4 | — |
| grafana-fips-11.5 | affected | chainguard | grafana-fips-11.5 | — |
| grafana-mimir | affected | chainguard | grafana-mimir | — |
| grafana-mimir | affected | wolfi | grafana-mimir | — |
| guac | affected | wolfi | guac | — |
| guac | affected | chainguard | guac | — |
| harbor-2.11 | affected | chainguard | harbor-2.11 | — |
| harbor-2.12 | affected | chainguard | harbor-2.12 | — |
| harbor-2.9 | affected | chainguard | harbor-2.9 | — |
| harbor-fips-2.11 | affected | chainguard | harbor-fips-2.11 | — |
| harbor-fips-2.12 | affected | chainguard | harbor-fips-2.12 | — |
| harbor-registry | affected | wolfi | harbor-registry | — |
| harbor-registry | affected | chainguard | harbor-registry | — |
| harbor-registry-fips | affected | chainguard | harbor-registry-fips | — |
| hydra | affected | chainguard | hydra | — |
| hydra | affected | wolfi | hydra | — |
| hydra-fips | affected | chainguard | hydra-fips | — |
| influxd-2.7 | affected | chainguard | influxd-2.7 | — |
| jitsucom-bulker | affected | chainguard | jitsucom-bulker | — |
| jitsucom-bulker | affected | wolfi | jitsucom-bulker | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k3s-1.32 | affected | wolfi | k3s-1.32 | — |
| k3s-1.32 | affected | chainguard | k3s-1.32 | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko | affected | chainguard | kaniko | — |
| kaniko-fips | affected | chainguard | kaniko-fips | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| keda-2.16 | affected | chainguard | keda-2.16 | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| ko | affected | wolfi | ko | — |
| ko | affected | chainguard | ko | — |
| ko-fips | affected | chainguard | ko-fips | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| ksops | affected | wolfi | ksops | — |
| ksops | affected | chainguard | ksops | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-metrics-adapter | affected | wolfi | kube-metrics-adapter | — |
| kube-metrics-adapter | affected | chainguard | kube-metrics-adapter | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-dashboard-auth | affected | chainguard | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth | affected | wolfi | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth-fips | affected | chainguard | kubernetes-dashboard-auth-fips | — |
| kubernetes-secret-generator | affected | chainguard | kubernetes-secret-generator | — |
| kubescape | affected | chainguard | kubescape | — |
| kubescape | affected | wolfi | kubescape | — |
| kuma-2.7 | affected | chainguard | kuma-2.7 | — |
| kuma-2.9 | affected | chainguard | kuma-2.9 | — |
| kyverno-1.13 | affected | chainguard | kyverno-1.13 | — |
| kyverno-1.14 | affected | chainguard | kyverno-1.14 | — |
| kyverno-fips-1.13 | affected | chainguard | kyverno-fips-1.13 | — |
| kyverno-fips-1.14 | affected | chainguard | kyverno-fips-1.14 | — |
| kyverno-notation-aws | affected | wolfi | kyverno-notation-aws | — |
| kyverno-notation-aws | affected | chainguard | kyverno-notation-aws | — |
| kyverno-notation-aws-fips | affected | chainguard | kyverno-notation-aws-fips | — |
| kyverno-policy-reporter-ui | affected | chainguard | kyverno-policy-reporter-ui | — |
| kyverno-policy-reporter-ui | affected | wolfi | kyverno-policy-reporter-ui | — |
| kyverno-policy-reporter-ui-fips | affected | chainguard | kyverno-policy-reporter-ui-fips | — |
| loki-3.4 | affected | chainguard | loki-3.4 | — |
| loki-fips-3.4 | affected | chainguard | loki-fips-3.4 | — |
| mc | affected | wolfi | mc | — |
| mc | affected | chainguard | mc | — |
| mc-fips | affected | chainguard | mc-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| minio-operator | affected | chainguard | minio-operator | — |
| minio-operator | affected | wolfi | minio-operator | — |
| minio-operator-fips | affected | chainguard | minio-operator-fips | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| nemo | affected | chainguard | nemo | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| octo-sts | affected | chainguard | octo-sts | — |
| octo-sts | affected | wolfi | octo-sts | — |
| openbao | affected | wolfi | openbao | — |
| openbao | affected | chainguard | openbao | — |
| openbao-fips | affected | chainguard | openbao-fips | — |
| opencost | affected | chainguard | opencost | — |
| opencost | affected | wolfi | opencost | — |
| opencost-fips | affected | chainguard | opencost-fips | — |
| openfga | affected | chainguard | openfga | — |
| openfga | affected | wolfi | openfga | — |
| openfga-fips | affected | chainguard | openfga-fips | — |
| opentelemetry-collector | affected | chainguard | opentelemetry-collector | — |
| opentelemetry-collector | affected | wolfi | opentelemetry-collector | — |
| opentelemetry-collector-contrib | affected | wolfi | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib | affected | chainguard | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib-fips | affected | chainguard | opentelemetry-collector-contrib-fips | — |
| opentelemetry-collector-fips | affected | chainguard | opentelemetry-collector-fips | — |
| opentelemetry-operator | affected | wolfi | opentelemetry-operator | — |
| opentelemetry-operator | affected | chainguard | opentelemetry-operator | — |
| opentelemetry-operator-fips | affected | chainguard | opentelemetry-operator-fips | — |
| opentofu-1.8 | affected | chainguard | opentofu-1.8 | — |
| opentofu-1.9 | affected | chainguard | opentofu-1.9 | — |
| opentofu-1.9 | affected | wolfi | opentofu-1.9 | — |
| opentofu-fips-1.8 | affected | chainguard | opentofu-fips-1.8 | — |
| opentofu-fips-1.9 | affected | chainguard | opentofu-fips-1.9 | — |
| op-geth | affected | chainguard | op-geth | — |
| op-geth | affected | wolfi | op-geth | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| prometheus-2.51 | affected | chainguard | prometheus-2.51 | — |
| prometheus-2.53 | affected | chainguard | prometheus-2.53 | — |
| prometheus-3.2 | affected | chainguard | prometheus-3.2 | — |
| prometheus-3.2 | affected | wolfi | prometheus-3.2 | — |
| promxy | affected | wolfi | promxy | — |
| promxy | affected | chainguard | promxy | — |
| promxy-fips | affected | chainguard | promxy-fips | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-2.12 | affected | chainguard | rancher-2.12 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rclone | affected | chainguard | rclone | — |
| rclone | affected | wolfi | rclone | — |
| rclone-fips | affected | chainguard | rclone-fips | — |
| rekor | affected | wolfi | rekor | — |
| rekor | affected | chainguard | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| restic | affected | chainguard | restic | — |
| restic | affected | wolfi | restic | — |
| restic-fips | affected | chainguard | restic-fips | — |
| rook | affected | wolfi | rook | — |
| rook | affected | chainguard | rook | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| seaweedfs | affected | wolfi | seaweedfs | — |
| seaweedfs | affected | chainguard | seaweedfs | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure-fips | affected | chainguard | secrets-store-csi-driver-provider-azure-fips | — |
| sftpgo-plugin-kms | affected | wolfi | sftpgo-plugin-kms | — |
| sftpgo-plugin-kms | affected | chainguard | sftpgo-plugin-kms | — |
| sftpgo-plugin-pubsub | affected | chainguard | sftpgo-plugin-pubsub | — |
| sftpgo-plugin-pubsub | affected | wolfi | sftpgo-plugin-pubsub | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold-fips | affected | chainguard | skaffold-fips | — |
| sops | affected | wolfi | sops | — |
| sops | affected | chainguard | sops | — |
| sops-fips | affected | chainguard | sops-fips | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
| splunk-otel-collector | affected | wolfi | splunk-otel-collector | — |
| splunk-otel-collector | affected | chainguard | splunk-otel-collector | — |
| splunk-otel-collector-fips | affected | chainguard | splunk-otel-collector-fips | — |
| sql_exporter | affected | chainguard | sql_exporter | — |
| sql_exporter | affected | wolfi | sql_exporter | — |
| sql_exporter-fips | affected | chainguard | sql_exporter-fips | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca-fips | affected | chainguard | step-ca-fips | — |
| step-fips | affected | chainguard | step-fips | — |
| step-kms-plugin | affected | wolfi | step-kms-plugin | — |
| step-kms-plugin | affected | chainguard | step-kms-plugin | — |
| step-kms-plugin-fips | affected | chainguard | step-kms-plugin-fips | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains-fips | affected | chainguard | tekton-chains-fips | — |
| tempo | affected | wolfi | tempo | — |
| tempo | affected | chainguard | tempo | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | chainguard | terraform | — |
| terraform | affected | wolfi | terraform | — |
| terraform-1.10 | affected | chainguard | terraform-1.10 | — |
| terraform-1.11 | affected | chainguard | terraform-1.11 | — |
| terraform-1.9 | affected | chainguard | terraform-1.9 | — |
| terraform-fips-1.11 | affected | chainguard | terraform-fips-1.11 | — |
| terraform-provider-azapi | affected | wolfi | terraform-provider-azapi | — |
| terraform-provider-azapi | affected | chainguard | terraform-provider-azapi | — |
| terraform-provider-azapi-fips | affected | chainguard | terraform-provider-azapi-fips | — |
| terraform-provider-azurerm | affected | wolfi | terraform-provider-azurerm | — |
| terraform-provider-azurerm | affected | chainguard | terraform-provider-azurerm | — |
| terragrunt | affected | wolfi | terragrunt | — |
| terragrunt | affected | chainguard | terragrunt | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-fips | affected | chainguard | thanos-fips | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| tkn | affected | chainguard | tkn | — |
| tkn | affected | wolfi | tkn | — |
| tkn-fips | affected | chainguard | tkn-fips | — |
| traefik-2.11 | affected | chainguard | traefik-2.11 | — |
| traefik-3.3 | affected | chainguard | traefik-3.3 | — |
| traefik-3.3 | affected | wolfi | traefik-3.3 | — |
| traefik-fips-2.11 | affected | chainguard | traefik-fips-2.11 | — |
| trivy | affected | chainguard | trivy | — |
| trivy | affected | wolfi | trivy | — |
| trivy-fips | affected | chainguard | trivy-fips | — |
| trufflehog | affected | chainguard | trufflehog | — |
| trufflehog | affected | wolfi | trufflehog | — |
| trufflehog-fips | affected | chainguard | trufflehog-fips | — |
| vault-1.16 | affected | chainguard | vault-1.16 | — |
| vault-1.17 | affected | chainguard | vault-1.17 | — |
| vault-1.18 | affected | chainguard | vault-1.18 | — |
| vault-1.19 | affected | chainguard | vault-1.19 | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| velero-fips | affected | chainguard | velero-fips | — |
| velero-plugin-for-microsoft-azure | affected | chainguard | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure | affected | wolfi | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure-fips | affected | chainguard | velero-plugin-for-microsoft-azure-fips | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| wal-g | affected | chainguard | wal-g | — |
| wal-g | affected | wolfi | wal-g | — |
| weaviate | affected | wolfi | weaviate | — |
| weaviate | affected | chainguard | weaviate | — |
| xeol | affected | wolfi | xeol | — |
| xeol | affected | chainguard | xeol | — |
| xeol-fips | affected | chainguard | xeol-fips | — |
| zarf | affected | chainguard | zarf | — |
| zarf | affected | wolfi | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-2
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| application-gateway-kubernetes-ingress | affected | Azure Linux:3 | application-gateway-kubernetes-ingress | — |
CVE-2025-30204 affecting package kubernetes for versions less than 1.30.10-4
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:3 | kubernetes | — |
CVE-2025-30204 affecting package kubernetes for versions less than 1.28.4-16
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:2 | kubernetes | — |
CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-27
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| application-gateway-kubernetes-ingress | affected | Azure Linux:2 | application-gateway-kubernetes-ingress | — |
DEBIAN-CVE-2025-30204
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-golang-jwt-jwt | affected | Debian:12 | golang-github-golang-jwt-jwt | — |
| golang-github-golang-jwt-jwt | affected | Debian:13 | golang-github-golang-jwt-jwt | — |
| golang-github-golang-jwt-jwt | affected | Debian:14 | golang-github-golang-jwt-jwt | — |
| golang-github-golang-jwt-jwt-v5 | affected | Debian:13 | golang-github-golang-jwt-jwt-v5 | — |
| golang-github-golang-jwt-jwt-v5 | affected | Debian:14 | golang-github-golang-jwt-jwt-v5 | — |
jwt-go allows excessive memory allocation during header parsing
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | wolfi | aactl | — |
| aactl | affected | chainguard | aactl | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller-fips | affected | chainguard | actions-runner-controller-fips | — |
| agentbeat-fips | affected | chainguard | agentbeat-fips | — |
| amazon-cloudwatch-agent | affected | chainguard | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent | affected | wolfi | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent-fips | affected | chainguard | amazon-cloudwatch-agent-fips | — |
| amazon-cloudwatch-agent-operator | affected | chainguard | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator | affected | wolfi | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator-fips | affected | chainguard | amazon-cloudwatch-agent-operator-fips | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | wolfi | argo-cd-2.14 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-fips-2.13 | affected | chainguard | argo-cd-fips-2.13 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-events-fips | affected | chainguard | argo-events-fips | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis | affected | chainguard | atlantis | — |
| atlantis | affected | wolfi | atlantis | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-eks-pod-identity-agent | affected | wolfi | aws-eks-pod-identity-agent | — |
| aws-eks-pod-identity-agent | affected | chainguard | aws-eks-pod-identity-agent | — |
| aws-eks-pod-identity-agent-fips | affected | chainguard | aws-eks-pod-identity-agent-fips | — |
| azcopy | affected | chainguard | azcopy | — |
| azcopy | affected | wolfi | azcopy | — |
| azcopy-fips | affected | chainguard | azcopy-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| azuredisk-csi-1.28 | affected | chainguard | azuredisk-csi-1.28 | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-1.30 | affected | chainguard | azuredisk-csi-1.30 | — |
| azuredisk-csi-1.31 | affected | wolfi | azuredisk-csi-1.31 | — |
| azuredisk-csi-1.31 | affected | chainguard | azuredisk-csi-1.31 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| azuredisk-csi-fips-1.30 | affected | chainguard | azuredisk-csi-fips-1.30 | — |
| azuredisk-csi-fips-1.31 | affected | chainguard | azuredisk-csi-fips-1.31 | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| beats-8 | affected | chainguard | beats-8 | — |
| beats-fips-8 | affected | chainguard | beats-fips-8 | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd-fips | affected | chainguard | buildkitd-fips | — |
| cert-manager-1.12 | affected | wolfi | cert-manager-1.12 | — |
| cert-manager-1.12 | affected | chainguard | cert-manager-1.12 | — |
| cert-manager-1.16 | affected | wolfi | cert-manager-1.16 | — |
| cert-manager-1.16 | affected | chainguard | cert-manager-1.16 | — |
| cert-manager-1.17 | affected | wolfi | cert-manager-1.17 | — |
| cert-manager-1.17 | affected | chainguard | cert-manager-1.17 | — |
| cert-manager-fips-1.12 | affected | chainguard | cert-manager-fips-1.12 | — |
| cert-manager-fips-1.16 | affected | chainguard | cert-manager-fips-1.16 | — |
| cert-manager-fips-1.17 | affected | chainguard | cert-manager-fips-1.17 | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum-fips | affected | chainguard | chartmuseum-fips | — |
| chezmoi | affected | wolfi | chezmoi | — |
| chezmoi | affected | chainguard | chezmoi | — |
| cilium-fips-1.14 | affected | chainguard | cilium-fips-1.14 | — |
| cilium-fips-1.15 | affected | chainguard | cilium-fips-1.15 | — |
| cilium-fips-1.16 | affected | chainguard | cilium-fips-1.16 | — |
| cilium-fips-1.17 | affected | chainguard | cilium-fips-1.17 | — |
| cloudbeat-8.17 | affected | chainguard | cloudbeat-8.17 | — |
| cloudbeat-fips | affected | chainguard | cloudbeat-fips | — |
| cloudbeat-fips-8.17 | affected | chainguard | cloudbeat-fips-8.17 | — |
| cloud-provider-azure-1.27 | affected | chainguard | cloud-provider-azure-1.27 | — |
| cloud-provider-azure-1.28 | affected | chainguard | cloud-provider-azure-1.28 | — |
| cloud-provider-azure-1.29 | affected | chainguard | cloud-provider-azure-1.29 | — |
| cloud-provider-azure-1.30 | affected | chainguard | cloud-provider-azure-1.30 | — |
| cloud-provider-azure-1.31 | affected | chainguard | cloud-provider-azure-1.31 | — |
| cloud-provider-azure-1.31 | affected | wolfi | cloud-provider-azure-1.31 | — |
| cloud-provider-azure-1.32 | affected | wolfi | cloud-provider-azure-1.32 | — |
| cloud-provider-azure-1.32 | affected | chainguard | cloud-provider-azure-1.32 | — |
| cloud-provider-azure-fips-1.27 | affected | chainguard | cloud-provider-azure-fips-1.27 | — |
| cloud-provider-azure-fips-1.28 | affected | chainguard | cloud-provider-azure-fips-1.28 | — |
| cloud-provider-azure-fips-1.29 | affected | chainguard | cloud-provider-azure-fips-1.29 | — |
| cloud-provider-azure-fips-1.30 | affected | chainguard | cloud-provider-azure-fips-1.30 | — |
| cloud-provider-azure-fips-1.31 | affected | chainguard | cloud-provider-azure-fips-1.31 | — |
| cloud-provider-azure-fips-1.32 | affected | chainguard | cloud-provider-azure-fips-1.32 | — |
| cluster-autoscaler-1.28 | affected | chainguard | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.28 | affected | wolfi | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.30 | affected | chainguard | cluster-autoscaler-1.30 | — |
| cluster-autoscaler-1.30 | affected | wolfi | cluster-autoscaler-1.30 | — |
| cluster-autoscaler-1.31 | affected | chainguard | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.31 | affected | wolfi | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.32 | affected | wolfi | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| cluster-autoscaler-fips-1.29 | affected | chainguard | cluster-autoscaler-fips-1.29 | — |
| cluster-autoscaler-fips-1.30 | affected | chainguard | cluster-autoscaler-fips-1.30 | — |
| cluster-autoscaler-fips-1.31 | affected | chainguard | cluster-autoscaler-fips-1.31 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.18 | affected | chainguard | consul-1.18 | — |
| consul-1.19 | affected | chainguard | consul-1.19 | — |
| consul-1.20 | affected | chainguard | consul-1.20 | — |
| consul-fips-1.17 | affected | chainguard | consul-fips-1.17 | — |
| consul-fips-1.18 | affected | chainguard | consul-fips-1.18 | — |
| consul-fips-1.19 | affected | chainguard | consul-fips-1.19 | — |
| consul-fips-1.20 | affected | chainguard | consul-fips-1.20 | — |
| coredns | affected | wolfi | coredns | — |
| coredns | affected | chainguard | coredns | — |
| coredns-fips | affected | chainguard | coredns-fips | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cortex-fips | affected | chainguard | cortex-fips | — |
| cosign | affected | wolfi | cosign | — |
| cosign | affected | chainguard | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| cosign-fips | affected | wolfi | cosign-fips | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane-fips | affected | chainguard | crossplane-fips | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure-authorization | affected | wolfi | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-authorization | affected | chainguard | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-managedidentity | affected | wolfi | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-managedidentity | affected | chainguard | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-sql | affected | chainguard | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-sql | affected | wolfi | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-storage | affected | wolfi | crossplane-provider-azure-storage | — |
| crossplane-provider-azure-storage | affected | chainguard | crossplane-provider-azure-storage | — |
| crossplane-provider-family-azure | affected | wolfi | crossplane-provider-family-azure | — |
| crossplane-provider-family-azure | affected | chainguard | crossplane-provider-family-azure | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| distribution | affected | wolfi | distribution | — |
| distribution | affected | chainguard | distribution | — |
| distribution-fips | affected | chainguard | distribution-fips | — |
| docker | affected | chainguard | docker | — |
| docker | affected | wolfi | docker | — |
| docker-fips | affected | chainguard | docker-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| eks-distro-1.27 | affected | chainguard | eks-distro-1.27 | — |
| eks-distro-1.28 | affected | chainguard | eks-distro-1.28 | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-fips-1.27 | affected | chainguard | eks-distro-fips-1.27 | — |
| eks-distro-fips-1.28 | affected | chainguard | eks-distro-fips-1.28 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| elastic-agent-fips | affected | chainguard | elastic-agent-fips | — |
| etcd-3.4 | affected | chainguard | etcd-3.4 | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| etcd-3.5 | affected | wolfi | etcd-3.5 | — |
| etcd-fips-3.4 | affected | chainguard | etcd-fips-3.4 | — |
| etcd-fips-3.5 | affected | chainguard | etcd-fips-3.5 | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns | affected | chainguard | external-dns | — |
| external-dns-0.16 | affected | chainguard | external-dns-0.16 | — |
| external-dns-0.16 | affected | wolfi | external-dns-0.16 | — |
| external-dns-fips | affected | chainguard | external-dns-fips | — |
| external-dns-fips-0.16 | affected | chainguard | external-dns-fips-0.16 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| external-secrets-operator | affected | wolfi | external-secrets-operator | — |
| external-secrets-operator | affected | chainguard | external-secrets-operator | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| falcosidekick | affected | wolfi | falcosidekick | — |
| falcosidekick | affected | chainguard | falcosidekick | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| filebrowser | affected | chainguard | filebrowser | — |
| filebrowser | affected | wolfi | filebrowser | — |
| fluent-bit-plugin-loki | affected | wolfi | fluent-bit-plugin-loki | — |
| fluent-bit-plugin-loki | affected | chainguard | fluent-bit-plugin-loki | — |
| flux | affected | chainguard | flux | — |
| flux | affected | wolfi | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-2.4 | affected | chainguard | flux-2.4 | — |
| flux-2.4 | affected | wolfi | flux-2.4 | — |
| flux-2.5 | affected | wolfi | flux-2.5 | — |
| flux-2.5 | affected | chainguard | flux-2.5 | — |
| flux-fips | affected | chainguard | flux-fips | — |
| flux-fips-2.4 | affected | chainguard | flux-fips-2.4 | — |
| flux-fips-2.5 | affected | chainguard | flux-fips-2.5 | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-automation-controller-fips | affected | chainguard | flux-image-automation-controller-fips | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller-fips | affected | chainguard | flux-image-reflector-controller-fips | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller-fips | affected | chainguard | flux-kustomize-controller-fips | — |
| flux-notification-controller | affected | wolfi | flux-notification-controller | — |
| flux-notification-controller | affected | chainguard | flux-notification-controller | — |
| flux-notification-controller-fips | affected | chainguard | flux-notification-controller-fips | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller-fips | affected | chainguard | flux-source-controller-fips | — |
| flyte | affected | chainguard | flyte | — |
| flyte | affected | wolfi | flyte | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| gitaly-17.10 | affected | wolfi | gitaly-17.10 | — |
| gitaly-17.10 | affected | chainguard | gitaly-17.10 | — |
| gitaly-17.8 | affected | chainguard | gitaly-17.8 | — |
| gitaly-17.8 | affected | wolfi | gitaly-17.8 | — |
| gitaly-17.9 | affected | chainguard | gitaly-17.9 | — |
| gitaly-17.9 | affected | wolfi | gitaly-17.9 | — |
| gitaly-fips-17.10 | affected | chainguard | gitaly-fips-17.10 | — |
| gitaly-fips-17.8 | affected | chainguard | gitaly-fips-17.8 | — |
| gitaly-fips-17.9 | affected | chainguard | gitaly-fips-17.9 | — |
| gitea | affected | wolfi | gitea | — |
| gitea | affected | chainguard | gitea | — |
| gitea-fips | affected | chainguard | gitea-fips | — |
| gitlab-cng-17.10 | affected | chainguard | gitlab-cng-17.10 | — |
| gitlab-cng-17.10 | affected | wolfi | gitlab-cng-17.10 | — |
| gitlab-cng-17.8 | affected | wolfi | gitlab-cng-17.8 | — |
| gitlab-cng-17.8 | affected | chainguard | gitlab-cng-17.8 | — |
| gitlab-cng-17.9 | affected | chainguard | gitlab-cng-17.9 | — |
| gitlab-cng-17.9 | affected | wolfi | gitlab-cng-17.9 | — |
| gitlab-cng-fips-17.10 | affected | chainguard | gitlab-cng-fips-17.10 | — |
| gitlab-cng-fips-17.8 | affected | chainguard | gitlab-cng-fips-17.8 | — |
| gitlab-cng-fips-17.9 | affected | chainguard | gitlab-cng-fips-17.9 | — |
| gitlab-ee-17.10 | affected | chainguard | gitlab-ee-17.10 | — |
| gitlab-ee-17.8 | affected | chainguard | gitlab-ee-17.8 | — |
| gitlab-ee-17.9 | affected | chainguard | gitlab-ee-17.9 | — |
| gitlab-ee-fips-17.10 | affected | chainguard | gitlab-ee-fips-17.10 | — |
| gitlab-ee-fips-17.8 | affected | chainguard | gitlab-ee-fips-17.8 | — |
| gitlab-ee-fips-17.9 | affected | chainguard | gitlab-ee-fips-17.9 | — |
| gitlab-kas-17.10 | affected | chainguard | gitlab-kas-17.10 | — |
| gitlab-kas-17.10 | affected | wolfi | gitlab-kas-17.10 | — |
| gitlab-kas-17.7 | affected | chainguard | gitlab-kas-17.7 | — |
| gitlab-kas-17.7 | affected | wolfi | gitlab-kas-17.7 | — |
| gitlab-kas-17.8 | affected | wolfi | gitlab-kas-17.8 | — |
| gitlab-kas-17.8 | affected | chainguard | gitlab-kas-17.8 | — |
| gitlab-kas-17.9 | affected | wolfi | gitlab-kas-17.9 | — |
| gitlab-kas-17.9 | affected | chainguard | gitlab-kas-17.9 | — |
| gitlab-kas-fips-17.10 | affected | chainguard | gitlab-kas-fips-17.10 | — |
| gitlab-kas-fips-17.7 | affected | chainguard | gitlab-kas-fips-17.7 | — |
| gitlab-kas-fips-17.8 | affected | chainguard | gitlab-kas-fips-17.8 | — |
| gitlab-kas-fips-17.9 | affected | chainguard | gitlab-kas-fips-17.9 | — |
| gitlab-pages-17.10 | affected | wolfi | gitlab-pages-17.10 | — |
| gitlab-pages-17.10 | affected | chainguard | gitlab-pages-17.10 | — |
| gitlab-pages-17.8 | affected | chainguard | gitlab-pages-17.8 | — |
| gitlab-pages-17.8 | affected | wolfi | gitlab-pages-17.8 | — |
| gitlab-pages-17.9 | affected | chainguard | gitlab-pages-17.9 | — |
| gitlab-pages-17.9 | affected | wolfi | gitlab-pages-17.9 | — |
| gitlab-pages-fips-17.10 | affected | chainguard | gitlab-pages-fips-17.10 | — |
| gitlab-pages-fips-17.8 | affected | chainguard | gitlab-pages-fips-17.8 | — |
| gitlab-pages-fips-17.9 | affected | chainguard | gitlab-pages-fips-17.9 | — |
| gitlab-runner-17.10 | affected | wolfi | gitlab-runner-17.10 | — |
| gitlab-runner-17.10 | affected | chainguard | gitlab-runner-17.10 | — |
| gitlab-runner-17.8 | affected | wolfi | gitlab-runner-17.8 | — |
| gitlab-runner-17.8 | affected | chainguard | gitlab-runner-17.8 | — |
| gitlab-runner-17.9 | affected | chainguard | gitlab-runner-17.9 | — |
| gitlab-runner-17.9 | affected | wolfi | gitlab-runner-17.9 | — |
| gitlab-runner-fips-17.10 | affected | chainguard | gitlab-runner-fips-17.10 | — |
| gitlab-runner-fips-17.8 | affected | chainguard | gitlab-runner-fips-17.8 | — |
| gitlab-runner-fips-17.9 | affected | chainguard | gitlab-runner-fips-17.9 | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gitsign | affected | wolfi | gitsign | — |
| gitsign | affected | chainguard | gitsign | — |
| git-sync | affected | chainguard | git-sync | — |
| git-sync | affected | wolfi | git-sync | — |
| git-sync-fips | affected | chainguard | git-sync-fips | — |
| glab | affected | wolfi | glab | — |
| glab | affected | chainguard | glab | — |
| golang-jwt/jwt | affected | github.com | github.com/golang-jwt/jwt | — |
| golang-jwt/jwt/v4 | affected | github.com | github.com/golang-jwt/jwt/v4 | — |
| golang-jwt/jwt/v5 | affected | github.com | github.com/golang-jwt/jwt/v5 | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate-fips | affected | chainguard | gomplate-fips | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| grafana-10.4 | affected | wolfi | grafana-10.4 | — |
| grafana-10.4 | affected | chainguard | grafana-10.4 | — |
| grafana-11.0 | affected | chainguard | grafana-11.0 | — |
| grafana-11.0 | affected | wolfi | grafana-11.0 | — |
| grafana-11.1 | affected | chainguard | grafana-11.1 | — |
| grafana-11.1 | affected | wolfi | grafana-11.1 | — |
| grafana-11.2 | affected | chainguard | grafana-11.2 | — |
| grafana-11.2 | affected | wolfi | grafana-11.2 | — |
| grafana-11.3 | affected | chainguard | grafana-11.3 | — |
| grafana-11.3 | affected | wolfi | grafana-11.3 | — |
| grafana-11.4 | affected | chainguard | grafana-11.4 | — |
| grafana-11.4 | affected | wolfi | grafana-11.4 | — |
| grafana-11.5 | affected | wolfi | grafana-11.5 | — |
| grafana-11.5 | affected | chainguard | grafana-11.5 | — |
| grafana-agent-operator | affected | chainguard | grafana-agent-operator | — |
| grafana-agent-operator | affected | wolfi | grafana-agent-operator | — |
| grafana-alloy | affected | wolfi | grafana-alloy | — |
| grafana-alloy | affected | chainguard | grafana-alloy | — |
| grafana-alloy-fips | affected | chainguard | grafana-alloy-fips | — |
| grafana-fips-10.4 | affected | chainguard | grafana-fips-10.4 | — |
| grafana-fips-11.0 | affected | chainguard | grafana-fips-11.0 | — |
| grafana-fips-11.1 | affected | chainguard | grafana-fips-11.1 | — |
| grafana-fips-11.2 | affected | chainguard | grafana-fips-11.2 | — |
| grafana-fips-11.3 | affected | chainguard | grafana-fips-11.3 | — |
| grafana-fips-11.4 | affected | chainguard | grafana-fips-11.4 | — |
| grafana-fips-11.5 | affected | chainguard | grafana-fips-11.5 | — |
| grafana-mimir | affected | wolfi | grafana-mimir | — |
| grafana-mimir | affected | chainguard | grafana-mimir | — |
| grafana-mimir-fips | affected | chainguard | grafana-mimir-fips | — |
| guac | affected | chainguard | guac | — |
| guac | affected | wolfi | guac | — |
| harbor-2.10 | affected | chainguard | harbor-2.10 | — |
| harbor-2.10 | affected | wolfi | harbor-2.10 | — |
| harbor-2.11 | affected | chainguard | harbor-2.11 | — |
| harbor-2.11 | affected | wolfi | harbor-2.11 | — |
| harbor-2.12 | affected | chainguard | harbor-2.12 | — |
| harbor-2.12 | affected | wolfi | harbor-2.12 | — |
| harbor-2.9 | affected | chainguard | harbor-2.9 | — |
| harbor-fips-2.10 | affected | chainguard | harbor-fips-2.10 | — |
| harbor-fips-2.11 | affected | chainguard | harbor-fips-2.11 | — |
| harbor-fips-2.12 | affected | chainguard | harbor-fips-2.12 | — |
| harbor-fips-2.9 | affected | chainguard | harbor-fips-2.9 | — |
| harbor-registry | affected | wolfi | harbor-registry | — |
| harbor-registry | affected | chainguard | harbor-registry | — |
| harbor-registry-fips | affected | chainguard | harbor-registry-fips | — |
| hydra | affected | chainguard | hydra | — |
| hydra | affected | wolfi | hydra | — |
| hydra-fips | affected | chainguard | hydra-fips | — |
| influxd-2.7 | affected | wolfi | influxd-2.7 | — |
| influxd-2.7 | affected | chainguard | influxd-2.7 | — |
| jitsucom-bulker | affected | wolfi | jitsucom-bulker | — |
| jitsucom-bulker | affected | chainguard | jitsucom-bulker | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k3s-1.32 | affected | chainguard | k3s-1.32 | — |
| k3s-1.32 | affected | wolfi | k3s-1.32 | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko | affected | chainguard | kaniko | — |
| kaniko-fips | affected | chainguard | kaniko-fips | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| keda-2.16 | affected | chainguard | keda-2.16 | — |
| keda-2.16 | affected | wolfi | keda-2.16 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| ko | affected | wolfi | ko | — |
| ko | affected | chainguard | ko | — |
| ko-fips | affected | wolfi | ko-fips | — |
| ko-fips | affected | chainguard | ko-fips | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kots-compat | affected | chainguard | kots-compat | — |
| ksops | affected | wolfi | ksops | — |
| ksops | affected | chainguard | ksops | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-metrics-adapter | affected | wolfi | kube-metrics-adapter | — |
| kube-metrics-adapter | affected | chainguard | kube-metrics-adapter | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-dashboard-auth | affected | chainguard | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth | affected | wolfi | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth-fips | affected | chainguard | kubernetes-dashboard-auth-fips | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kubernetes-fips-1.29 | affected | chainguard | kubernetes-fips-1.29 | — |
| kubernetes-secret-generator | affected | chainguard | kubernetes-secret-generator | — |
| kubescape | affected | wolfi | kubescape | — |
| kubescape | affected | chainguard | kubescape | — |
| kuma-2.5 | affected | chainguard | kuma-2.5 | — |
| kuma-2.6 | affected | chainguard | kuma-2.6 | — |
| kuma-2.7 | affected | chainguard | kuma-2.7 | — |
| kuma-2.8 | affected | chainguard | kuma-2.8 | — |
| kuma-2.8 | affected | wolfi | kuma-2.8 | — |
| kuma-2.9 | affected | wolfi | kuma-2.9 | — |
| kuma-2.9 | affected | chainguard | kuma-2.9 | — |
| kyverno-1.11 | affected | chainguard | kyverno-1.11 | — |
| kyverno-1.12 | affected | chainguard | kyverno-1.12 | — |
| kyverno-1.12 | affected | wolfi | kyverno-1.12 | — |
| kyverno-1.13 | affected | chainguard | kyverno-1.13 | — |
| kyverno-1.13 | affected | wolfi | kyverno-1.13 | — |
| kyverno-1.14 | affected | chainguard | kyverno-1.14 | — |
| kyverno-1.14 | affected | wolfi | kyverno-1.14 | — |
| kyverno-fips-1.11 | affected | chainguard | kyverno-fips-1.11 | — |
| kyverno-fips-1.12 | affected | chainguard | kyverno-fips-1.12 | — |
| kyverno-fips-1.13 | affected | chainguard | kyverno-fips-1.13 | — |
| kyverno-fips-1.14 | affected | chainguard | kyverno-fips-1.14 | — |
| kyverno-notation-aws | affected | chainguard | kyverno-notation-aws | — |
| kyverno-notation-aws | affected | wolfi | kyverno-notation-aws | — |
| kyverno-notation-aws-fips | affected | chainguard | kyverno-notation-aws-fips | — |
| kyverno-policy-reporter-ui | affected | wolfi | kyverno-policy-reporter-ui | — |
| kyverno-policy-reporter-ui | affected | chainguard | kyverno-policy-reporter-ui | — |
| kyverno-policy-reporter-ui-fips | affected | chainguard | kyverno-policy-reporter-ui-fips | — |
| loki-3.2 | affected | chainguard | loki-3.2 | — |
| loki-3.2 | affected | wolfi | loki-3.2 | — |
| loki-3.3 | affected | wolfi | loki-3.3 | — |
| loki-3.3 | affected | chainguard | loki-3.3 | — |
| loki-3.4 | affected | chainguard | loki-3.4 | — |
| loki-3.4 | affected | wolfi | loki-3.4 | — |
| loki-fips-3.2 | affected | chainguard | loki-fips-3.2 | — |
| loki-fips-3.3 | affected | chainguard | loki-fips-3.3 | — |
| loki-fips-3.4 | affected | chainguard | loki-fips-3.4 | — |
| mattermost-10.0 | affected | wolfi | mattermost-10.0 | — |
| mattermost-10.0 | affected | chainguard | mattermost-10.0 | — |
| mattermost-10.1 | affected | chainguard | mattermost-10.1 | — |
| mattermost-10.1 | affected | wolfi | mattermost-10.1 | — |
| mattermost-10.3 | affected | chainguard | mattermost-10.3 | — |
| mattermost-10.3 | affected | wolfi | mattermost-10.3 | — |
| mattermost-10.4 | affected | chainguard | mattermost-10.4 | — |
| mattermost-10.4 | affected | wolfi | mattermost-10.4 | — |
| mattermost-10.5 | affected | chainguard | mattermost-10.5 | — |
| mattermost-10.5 | affected | wolfi | mattermost-10.5 | — |
| mattermost-10.6 | affected | wolfi | mattermost-10.6 | — |
| mattermost-10.6 | affected | chainguard | mattermost-10.6 | — |
| mattermost-10.7 | affected | wolfi | mattermost-10.7 | — |
| mattermost-10.7 | affected | chainguard | mattermost-10.7 | — |
| mattermost-9.11 | affected | chainguard | mattermost-9.11 | — |
| mattermost-fips-10.7 | affected | chainguard | mattermost-fips-10.7 | — |
| mc | affected | wolfi | mc | — |
| mc | affected | chainguard | mc | — |
| mc-fips | affected | chainguard | mc-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| minio-operator | affected | wolfi | minio-operator | — |
| minio-operator | affected | chainguard | minio-operator | — |
| minio-operator-fips | affected | chainguard | minio-operator-fips | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| nemo | affected | chainguard | nemo | — |
| neuvector | affected | wolfi | neuvector | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| octo-sts | affected | wolfi | octo-sts | — |
| octo-sts | affected | chainguard | octo-sts | — |
| openbao | affected | chainguard | openbao | — |
| openbao | affected | wolfi | openbao | — |
| openbao-fips | affected | chainguard | openbao-fips | — |
| opencost | affected | chainguard | opencost | — |
| opencost | affected | wolfi | opencost | — |
| opencost-fips | affected | chainguard | opencost-fips | — |
| openfga | affected | wolfi | openfga | — |
| openfga | affected | chainguard | openfga | — |
| openfga-fips | affected | chainguard | openfga-fips | — |
| opentelemetry-collector | affected | chainguard | opentelemetry-collector | — |
| opentelemetry-collector | affected | wolfi | opentelemetry-collector | — |
| opentelemetry-collector-contrib | affected | wolfi | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib | affected | chainguard | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib-fips | affected | chainguard | opentelemetry-collector-contrib-fips | — |
| opentelemetry-collector-fips | affected | chainguard | opentelemetry-collector-fips | — |
| opentelemetry-operator | affected | chainguard | opentelemetry-operator | — |
| opentelemetry-operator | affected | wolfi | opentelemetry-operator | — |
| opentelemetry-operator-fips | affected | chainguard | opentelemetry-operator-fips | — |
| opentofu-1.6 | affected | chainguard | opentofu-1.6 | — |
| opentofu-1.7 | affected | chainguard | opentofu-1.7 | — |
| opentofu-1.7 | affected | wolfi | opentofu-1.7 | — |
| opentofu-1.8 | affected | chainguard | opentofu-1.8 | — |
| opentofu-1.8 | affected | wolfi | opentofu-1.8 | — |
| opentofu-1.9 | affected | wolfi | opentofu-1.9 | — |
| opentofu-1.9 | affected | chainguard | opentofu-1.9 | — |
| opentofu-fips-1.6 | affected | chainguard | opentofu-fips-1.6 | — |
| opentofu-fips-1.7 | affected | chainguard | opentofu-fips-1.7 | — |
| opentofu-fips-1.8 | affected | chainguard | opentofu-fips-1.8 | — |
| opentofu-fips-1.9 | affected | chainguard | opentofu-fips-1.9 | — |
| op-geth | affected | wolfi | op-geth | — |
| op-geth | affected | chainguard | op-geth | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| prometheus-2.51 | affected | chainguard | prometheus-2.51 | — |
| prometheus-2.51 | affected | wolfi | prometheus-2.51 | — |
| prometheus-2.53 | affected | chainguard | prometheus-2.53 | — |
| prometheus-2.53 | affected | wolfi | prometheus-2.53 | — |
| prometheus-2.55 | affected | chainguard | prometheus-2.55 | — |
| prometheus-2.55 | affected | wolfi | prometheus-2.55 | — |
| prometheus-3.0 | affected | wolfi | prometheus-3.0 | — |
| prometheus-3.0 | affected | chainguard | prometheus-3.0 | — |
| prometheus-3.1 | affected | wolfi | prometheus-3.1 | — |
| prometheus-3.1 | affected | chainguard | prometheus-3.1 | — |
| prometheus-3.2 | affected | chainguard | prometheus-3.2 | — |
| prometheus-3.2 | affected | wolfi | prometheus-3.2 | — |
| prometheus-3.3 | affected | wolfi | prometheus-3.3 | — |
| prometheus-3.3 | affected | chainguard | prometheus-3.3 | — |
| prometheus-fips-2.53 | affected | chainguard | prometheus-fips-2.53 | — |
| prometheus-fips-2.55 | affected | chainguard | prometheus-fips-2.55 | — |
| prometheus-fips-3.0 | affected | chainguard | prometheus-fips-3.0 | — |
| prometheus-fips-3.1 | affected | chainguard | prometheus-fips-3.1 | — |
| prometheus-fips-3.2 | affected | chainguard | prometheus-fips-3.2 | — |
| prometheus-fips-3.3 | affected | chainguard | prometheus-fips-3.3 | — |
| promxy | affected | wolfi | promxy | — |
| promxy | affected | chainguard | promxy | — |
| promxy-fips | affected | chainguard | promxy-fips | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.10 | affected | wolfi | rancher-2.10 | — |
| rancher-2.11 | affected | wolfi | rancher-2.11 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-2.12 | affected | wolfi | rancher-2.12 | — |
| rancher-2.12 | affected | chainguard | rancher-2.12 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.11 | affected | wolfi | rancher-agent-2.11 | — |
| rclone | affected | wolfi | rclone | — |
| rclone | affected | chainguard | rclone | — |
| rclone-fips | affected | chainguard | rclone-fips | — |
| redpanda-data-console | affected | chainguard | redpanda-data-console | — |
| rekor | affected | chainguard | rekor | — |
| rekor | affected | wolfi | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| restic | affected | wolfi | restic | — |
| restic | affected | chainguard | restic | — |
| restic-fips | affected | chainguard | restic-fips | — |
| rook | affected | wolfi | rook | — |
| rook | affected | chainguard | rook | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| seaweedfs | affected | wolfi | seaweedfs | — |
| seaweedfs | affected | chainguard | seaweedfs | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure-fips | affected | chainguard | secrets-store-csi-driver-provider-azure-fips | — |
| sftpgo-plugin-kms | affected | chainguard | sftpgo-plugin-kms | — |
| sftpgo-plugin-kms | affected | wolfi | sftpgo-plugin-kms | — |
| sftpgo-plugin-pubsub | affected | wolfi | sftpgo-plugin-pubsub | — |
| sftpgo-plugin-pubsub | affected | chainguard | sftpgo-plugin-pubsub | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold-fips | affected | chainguard | skaffold-fips | — |
| sops | affected | chainguard | sops | — |
| sops | affected | wolfi | sops | — |
| sops-fips | affected | chainguard | sops-fips | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
| splunk-otel-collector | affected | chainguard | splunk-otel-collector | — |
| splunk-otel-collector | affected | wolfi | splunk-otel-collector | — |
| splunk-otel-collector-fips | affected | chainguard | splunk-otel-collector-fips | — |
| sql_exporter | affected | wolfi | sql_exporter | — |
| sql_exporter | affected | chainguard | sql_exporter | — |
| sql_exporter-fips | affected | chainguard | sql_exporter-fips | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca-fips | affected | chainguard | step-ca-fips | — |
| step-fips | affected | chainguard | step-fips | — |
| step-kms-plugin | affected | wolfi | step-kms-plugin | — |
| step-kms-plugin | affected | chainguard | step-kms-plugin | — |
| step-kms-plugin-fips | affected | chainguard | step-kms-plugin-fips | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains-fips | affected | chainguard | tekton-chains-fips | — |
| tekton-pipelines | affected | wolfi | tekton-pipelines | — |
| tekton-pipelines | affected | chainguard | tekton-pipelines | — |
| tekton-pipelines-fips | affected | chainguard | tekton-pipelines-fips | — |
| telegraf-1.31 | affected | chainguard | telegraf-1.31 | — |
| telegraf-1.31 | affected | wolfi | telegraf-1.31 | — |
| telegraf-1.32 | affected | chainguard | telegraf-1.32 | — |
| telegraf-1.32 | affected | wolfi | telegraf-1.32 | — |
| telegraf-1.33 | affected | chainguard | telegraf-1.33 | — |
| telegraf-1.33 | affected | wolfi | telegraf-1.33 | — |
| telegraf-1.34 | affected | wolfi | telegraf-1.34 | — |
| telegraf-1.34 | affected | chainguard | telegraf-1.34 | — |
| teleport | affected | chainguard | teleport | — |
| teleport | affected | wolfi | teleport | — |
| tempo | affected | wolfi | tempo | — |
| tempo | affected | chainguard | tempo | — |
| tempo-fips | affected | chainguard | tempo-fips | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-1.10 | affected | chainguard | terraform-1.10 | — |
| terraform-1.11 | affected | chainguard | terraform-1.11 | — |
| terraform-1.7 | affected | chainguard | terraform-1.7 | — |
| terraform-1.8 | affected | chainguard | terraform-1.8 | — |
| terraform-1.9 | affected | chainguard | terraform-1.9 | — |
| terraform-fips-1.10 | affected | chainguard | terraform-fips-1.10 | — |
| terraform-fips-1.11 | affected | chainguard | terraform-fips-1.11 | — |
| terraform-fips-1.9 | affected | chainguard | terraform-fips-1.9 | — |
| terraform-provider-azapi | affected | wolfi | terraform-provider-azapi | — |
| terraform-provider-azapi | affected | chainguard | terraform-provider-azapi | — |
| terraform-provider-azapi-fips | affected | chainguard | terraform-provider-azapi-fips | — |
| terraform-provider-azurerm | affected | chainguard | terraform-provider-azurerm | — |
| terraform-provider-azurerm | affected | wolfi | terraform-provider-azurerm | — |
| terragrunt | affected | chainguard | terragrunt | — |
| terragrunt | affected | wolfi | terragrunt | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-fips | affected | chainguard | thanos-fips | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| tkn | affected | wolfi | tkn | — |
| tkn | affected | chainguard | tkn | — |
| tkn-fips | affected | chainguard | tkn-fips | — |
| traefik-2.11 | affected | chainguard | traefik-2.11 | — |
| traefik-3.1 | affected | chainguard | traefik-3.1 | — |
| traefik-3.1 | affected | wolfi | traefik-3.1 | — |
| traefik-3.3 | affected | chainguard | traefik-3.3 | — |
| traefik-3.3 | affected | wolfi | traefik-3.3 | — |
| traefik-fips-2.11 | affected | chainguard | traefik-fips-2.11 | — |
| traefik-fips-3.1 | affected | chainguard | traefik-fips-3.1 | — |
| traefik-fips-3.2 | affected | chainguard | traefik-fips-3.2 | — |
| traefik-fips-3.3 | affected | chainguard | traefik-fips-3.3 | — |
| trivy | affected | wolfi | trivy | — |
| trivy | affected | chainguard | trivy | — |
| trivy-fips | affected | chainguard | trivy-fips | — |
| trufflehog | affected | chainguard | trufflehog | — |
| trufflehog | affected | wolfi | trufflehog | — |
| trufflehog-fips | affected | chainguard | trufflehog-fips | — |
| vault-1.16 | affected | chainguard | vault-1.16 | — |
| vault-1.17 | affected | chainguard | vault-1.17 | — |
| vault-1.18 | affected | chainguard | vault-1.18 | — |
| vault-1.19 | affected | chainguard | vault-1.19 | — |
| vault-fips-1.17 | affected | chainguard | vault-fips-1.17 | — |
| vault-fips-1.18 | affected | chainguard | vault-fips-1.18 | — |
| vault-fips-1.19 | affected | chainguard | vault-fips-1.19 | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| velero-fips | affected | chainguard | velero-fips | — |
| velero-plugin-for-microsoft-azure | affected | chainguard | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure | affected | wolfi | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure-fips | affected | chainguard | velero-plugin-for-microsoft-azure-fips | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| wal-g | affected | wolfi | wal-g | — |
| wal-g | affected | chainguard | wal-g | — |
| weaviate | affected | chainguard | weaviate | — |
| weaviate | affected | wolfi | weaviate | — |
| xeol | affected | chainguard | xeol | — |
| xeol | affected | wolfi | xeol | — |
| xeol-fips | affected | chainguard | xeol-fips | — |
| zarf | affected | wolfi | zarf | — |
| zarf | affected | chainguard | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
jwt-go allows excessive memory allocation during header parsing
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-jwt/jwt | affected | github.com | github.com/golang-jwt/jwt | — |
| golang-jwt/jwt/v4 | affected | github.com | github.com/golang-jwt/jwt/v4 | — |
| golang-jwt/jwt/v5 | affected | github.com | github.com/golang-jwt/jwt/v5 | — |
jwt-go allows excessive memory allocation during header parsing
CVEs:CVE-2025-30204
jwt-go allows excessive memory allocation during header parsing
CVEs:CVE-2025-30204
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-jwt/jwt | affected | github.com | github.com/golang-jwt/jwt | — |
| golang-jwt/jwt/v4 | affected | github.com | github.com/golang-jwt/jwt/v4 | — |
| golang-jwt/jwt/v5 | affected | github.com | github.com/golang-jwt/jwt/v5 | — |
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a resul...
CVEs:CVE-2025-30204
Fix CVE(s): CVE-2024-9287
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| idle-python3.5 | affected | TuxCare:Ubuntu:16.04 | idle-python3.5 | — |
| libpython3.5 | affected | TuxCare:Ubuntu:16.04 | libpython3.5 | — |
| libpython3.5-dev | affected | TuxCare:Ubuntu:16.04 | libpython3.5-dev | — |
| libpython3.5-minimal | affected | TuxCare:Ubuntu:16.04 | libpython3.5-minimal | — |
| libpython3.5-stdlib | affected | TuxCare:Ubuntu:16.04 | libpython3.5-stdlib | — |
| libpython3.5-testsuite | affected | TuxCare:Ubuntu:16.04 | libpython3.5-testsuite | — |
| python3.5 | affected | TuxCare:Ubuntu:16.04 | python3.5 | — |
| python3.5-dev | affected | TuxCare:Ubuntu:16.04 | python3.5-dev | — |
| python3.5-doc | affected | TuxCare:Ubuntu:16.04 | python3.5-doc | — |
| python3.5-examples | affected | TuxCare:Ubuntu:16.04 | python3.5-examples | — |
| python3.5-minimal | affected | TuxCare:Ubuntu:16.04 | python3.5-minimal | — |
| python3.5-venv | affected | TuxCare:Ubuntu:16.04 | python3.5-venv | — |
Updated chromium-browser-stable packages fix security vulnerabilities
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium-browser-stable | affected | Mageia:9 | chromium-browser-stable | — |
Memory Exhaustion in Expr Parser with Unrestricted Input in github.com/expr-lang/expr
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| amazon-cloudwatch-agent | affected | chainguard | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent | affected | wolfi | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent-fips | affected | chainguard | amazon-cloudwatch-agent-fips | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-3.0 | affected | chainguard | argo-cd-3.0 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argo-cd-fips-3.0 | affected | chainguard | argo-cd-fips-3.0 | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| expr-lang/expr | affected | github.com | github.com/expr-lang/expr | — |
| grafana-alloy | affected | chainguard | grafana-alloy | — |
| grafana-alloy | affected | wolfi | grafana-alloy | — |
| grafana-alloy-fips | affected | chainguard | grafana-alloy-fips | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| keda-2.16 | affected | chainguard | keda-2.16 | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| nats | affected | chainguard | nats | — |
| nats | affected | wolfi | nats | — |
| opentelemetry-collector | affected | wolfi | opentelemetry-collector | — |
| opentelemetry-collector | affected | chainguard | opentelemetry-collector | — |
| opentelemetry-collector-contrib | affected | wolfi | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib | affected | chainguard | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib-fips | affected | chainguard | opentelemetry-collector-contrib-fips | — |
| opentelemetry-collector-fips | affected | chainguard | opentelemetry-collector-fips | — |
| splunk-otel-collector | affected | chainguard | splunk-otel-collector | — |
| splunk-otel-collector | affected | wolfi | splunk-otel-collector | — |
| splunk-otel-collector-fips | affected | chainguard | splunk-otel-collector-fips | — |
| tempo | affected | chainguard | tempo | — |
| tempo | affected | wolfi | tempo | — |
Memory Exhaustion in Expr Parser with Unrestricted Input
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| amazon-cloudwatch-agent | affected | wolfi | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent | affected | chainguard | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent-fips | affected | chainguard | amazon-cloudwatch-agent-fips | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.13 | affected | wolfi | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-2.14 | affected | wolfi | argo-cd-2.14 | — |
| argo-cd-3.0 | affected | wolfi | argo-cd-3.0 | — |
| argo-cd-3.0 | affected | chainguard | argo-cd-3.0 | — |
| argo-cd-fips-2.13 | affected | chainguard | argo-cd-fips-2.13 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argo-cd-fips-3.0 | affected | chainguard | argo-cd-fips-3.0 | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| coredns | affected | chainguard | coredns | — |
| coredns | affected | wolfi | coredns | — |
| coredns-fips | affected | chainguard | coredns-fips | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| elastic-agent-fips | affected | chainguard | elastic-agent-fips | — |
| expr-lang/expr | affected | github.com | github.com/expr-lang/expr | — |
| grafana-alloy | affected | chainguard | grafana-alloy | — |
| grafana-alloy | affected | wolfi | grafana-alloy | — |
| grafana-alloy-fips | affected | chainguard | grafana-alloy-fips | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| keda-2.14 | affected | chainguard | keda-2.14 | — |
| keda-2.14 | affected | wolfi | keda-2.14 | — |
| keda-2.15 | affected | chainguard | keda-2.15 | — |
| keda-2.15 | affected | wolfi | keda-2.15 | — |
| keda-2.16 | affected | chainguard | keda-2.16 | — |
| keda-2.16 | affected | wolfi | keda-2.16 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| nats | affected | chainguard | nats | — |
| nats | affected | wolfi | nats | — |
| opentelemetry-collector | affected | wolfi | opentelemetry-collector | — |
| opentelemetry-collector | affected | chainguard | opentelemetry-collector | — |
| opentelemetry-collector-contrib | affected | chainguard | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib | affected | wolfi | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib-fips | affected | chainguard | opentelemetry-collector-contrib-fips | — |
| opentelemetry-collector-fips | affected | chainguard | opentelemetry-collector-fips | — |
| splunk-otel-collector | affected | wolfi | splunk-otel-collector | — |
| splunk-otel-collector | affected | chainguard | splunk-otel-collector | — |
| splunk-otel-collector-fips | affected | chainguard | splunk-otel-collector-fips | — |
| tempo | affected | chainguard | tempo | — |
| tempo | affected | wolfi | tempo | — |
| tempo-fips | affected | chainguard | tempo-fips | — |
Memory Exhaustion in Expr Parser with Unrestricted Input
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| expr-lang/expr | affected | github.com | github.com/expr-lang/expr | — |
DEBIAN-CVE-2025-29786
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-antonmedv-expr | affected | Debian:11 | golang-github-antonmedv-expr | — |
| golang-github-antonmedv-expr | affected | Debian:12 | golang-github-antonmedv-expr | — |
| golang-github-antonmedv-expr | affected | Debian:13 | golang-github-antonmedv-expr | — |
| golang-github-antonmedv-expr | affected | Debian:14 | golang-github-antonmedv-expr | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | SUSE:Package Hub 15 SP6 | chromium | — |
| chromium | affected | openSUSE:Leap 15.6 | chromium | — |
chromedriver-134.0.6998.35-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Tumbleweed | chromium | — |
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| x/net | affected | golang.org | golang.org/x/net | — |
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | wolfi | aactl | — |
| aactl | affected | chainguard | aactl | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller-fips | affected | chainguard | actions-runner-controller-fips | — |
| addon-resizer | affected | wolfi | addon-resizer | — |
| addon-resizer | affected | chainguard | addon-resizer | — |
| addon-resizer-fips | affected | chainguard | addon-resizer-fips | — |
| agentbeat-fips | affected | chainguard | agentbeat-fips | — |
| amazon-cloudwatch-agent | affected | chainguard | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent | affected | wolfi | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent-fips | affected | chainguard | amazon-cloudwatch-agent-fips | — |
| amazon-cloudwatch-agent-operator | affected | wolfi | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator | affected | chainguard | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator-fips | affected | chainguard | amazon-cloudwatch-agent-operator-fips | — |
| amazon-eks-ami | affected | chainguard | amazon-eks-ami | — |
| amazon-k8s-cni | affected | wolfi | amazon-k8s-cni | — |
| amazon-k8s-cni | affected | chainguard | amazon-k8s-cni | — |
| amazon-k8s-cni-fips | affected | chainguard | amazon-k8s-cni-fips | — |
| amazon-ssm-agent | affected | chainguard | amazon-ssm-agent | — |
| ansible-operator | affected | wolfi | ansible-operator | — |
| ansible-operator | affected | chainguard | ansible-operator | — |
| apache-beam-java-sdk | affected | chainguard | apache-beam-java-sdk | — |
| apache-beam-python-3.11-sdk | affected | chainguard | apache-beam-python-3.11-sdk | — |
| apko | affected | wolfi | apko | — |
| apko | affected | chainguard | apko | — |
| apm-server | affected | chainguard | apm-server | — |
| apm-server-fips | affected | chainguard | apm-server-fips | — |
| argo-cd-2.10 | affected | wolfi | argo-cd-2.10 | — |
| argo-cd-2.10 | affected | chainguard | argo-cd-2.10 | — |
| argo-cd-2.11 | affected | chainguard | argo-cd-2.11 | — |
| argo-cd-2.11 | affected | wolfi | argo-cd-2.11 | — |
| argo-cd-2.12 | affected | wolfi | argo-cd-2.12 | — |
| argo-cd-2.12 | affected | chainguard | argo-cd-2.12 | — |
| argo-cd-2.13 | affected | wolfi | argo-cd-2.13 | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.11 | affected | chainguard | argo-cd-fips-2.11 | — |
| argo-cd-fips-2.12 | affected | chainguard | argo-cd-fips-2.12 | — |
| argo-cd-fips-2.13 | affected | chainguard | argo-cd-fips-2.13 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argo-events | affected | wolfi | argo-events | — |
| argo-events | affected | chainguard | argo-events | — |
| argo-events-fips | affected | chainguard | argo-events-fips | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis | affected | wolfi | atlantis | — |
| atlantis | affected | chainguard | atlantis | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| authservice-fips | affected | chainguard | authservice-fips | — |
| aws-application-networking-k8s | affected | wolfi | aws-application-networking-k8s | — |
| aws-application-networking-k8s | affected | chainguard | aws-application-networking-k8s | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-iam-authenticator | affected | chainguard | aws-iam-authenticator | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| aws-network-policy-agent | affected | chainguard | aws-network-policy-agent | — |
| aws-network-policy-agent | affected | wolfi | aws-network-policy-agent | — |
| aws-network-policy-agent-fips | affected | chainguard | aws-network-policy-agent-fips | — |
| aws-privateca-issuer-fips | affected | chainguard | aws-privateca-issuer-fips | — |
| aws-s3-controller | affected | wolfi | aws-s3-controller | — |
| aws-s3-controller | affected | chainguard | aws-s3-controller | — |
| azcopy | affected | chainguard | azcopy | — |
| azcopy | affected | wolfi | azcopy | — |
| azcopy-fips | affected | chainguard | azcopy-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-1.30 | affected | chainguard | azuredisk-csi-1.30 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| azuredisk-csi-fips-1.30 | affected | chainguard | azuredisk-csi-fips-1.30 | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| beats-7 | affected | chainguard | beats-7 | — |
| beats-8 | affected | chainguard | beats-8 | — |
| beats-fips-7 | affected | chainguard | beats-fips-7 | — |
| beats-fips-8 | affected | chainguard | beats-fips-8 | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildah | affected | wolfi | buildah | — |
| buildah | affected | chainguard | buildah | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd-fips | affected | chainguard | buildkitd-fips | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor-fips | affected | chainguard | cadvisor-fips | — |
| calico-3.27 | affected | chainguard | calico-3.27 | — |
| calico-3.28 | affected | chainguard | calico-3.28 | — |
| calico-3.28 | affected | wolfi | calico-3.28 | — |
| calico-3.29 | affected | chainguard | calico-3.29 | — |
| calico-3.29 | affected | wolfi | calico-3.29 | — |
| calico-fips-3.27 | affected | chainguard | calico-fips-3.27 | — |
| calico-fips-3.28 | affected | chainguard | calico-fips-3.28 | — |
| calico-fips-3.29 | affected | chainguard | calico-fips-3.29 | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| certificate-transparency | affected | chainguard | certificate-transparency | — |
| certificate-transparency | affected | wolfi | certificate-transparency | — |
| certificate-transparency-fips | affected | chainguard | certificate-transparency-fips | — |
| cert-manager-1.12 | affected | chainguard | cert-manager-1.12 | — |
| cert-manager-1.12 | affected | wolfi | cert-manager-1.12 | — |
| cert-manager-1.15 | affected | wolfi | cert-manager-1.15 | — |
| cert-manager-1.15 | affected | chainguard | cert-manager-1.15 | — |
| cert-manager-1.16 | affected | wolfi | cert-manager-1.16 | — |
| cert-manager-1.16 | affected | chainguard | cert-manager-1.16 | — |
| cert-manager-1.17 | affected | chainguard | cert-manager-1.17 | — |
| cert-manager-1.17 | affected | wolfi | cert-manager-1.17 | — |
| cert-manager-cmctl | affected | chainguard | cert-manager-cmctl | — |
| cert-manager-cmctl | affected | wolfi | cert-manager-cmctl | — |
| cert-manager-cmctl-fips | affected | chainguard | cert-manager-cmctl-fips | — |
| cert-manager-fips-1.12 | affected | chainguard | cert-manager-fips-1.12 | — |
| cert-manager-fips-1.15 | affected | chainguard | cert-manager-fips-1.15 | — |
| cert-manager-fips-1.16 | affected | chainguard | cert-manager-fips-1.16 | — |
| cert-manager-fips-1.17 | affected | chainguard | cert-manager-fips-1.17 | — |
| cert-manager-istio-csr | affected | wolfi | cert-manager-istio-csr | — |
| cert-manager-istio-csr | affected | chainguard | cert-manager-istio-csr | — |
| cert-manager-webhook-pdns | affected | chainguard | cert-manager-webhook-pdns | — |
| cert-manager-webhook-pdns | affected | wolfi | cert-manager-webhook-pdns | — |
| cert-manager-webhook-pdns-fips | affected | chainguard | cert-manager-webhook-pdns-fips | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl-fips | affected | chainguard | cfssl-fips | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum-fips | affected | chainguard | chartmuseum-fips | — |
| cilium-1.14 | affected | wolfi | cilium-1.14 | — |
| cilium-1.14 | affected | chainguard | cilium-1.14 | — |
| cilium-1.15 | affected | chainguard | cilium-1.15 | — |
| cilium-1.15 | affected | wolfi | cilium-1.15 | — |
| cilium-1.16 | affected | wolfi | cilium-1.16 | — |
| cilium-1.16 | affected | chainguard | cilium-1.16 | — |
| cilium-1.17 | affected | wolfi | cilium-1.17 | — |
| cilium-1.17 | affected | chainguard | cilium-1.17 | — |
| cilium-cli | affected | chainguard | cilium-cli | — |
| cilium-cli | affected | wolfi | cilium-cli | — |
| cilium-envoy-1.14 | affected | chainguard | cilium-envoy-1.14 | — |
| cilium-envoy-1.15 | affected | chainguard | cilium-envoy-1.15 | — |
| cilium-envoy-1.16 | affected | chainguard | cilium-envoy-1.16 | — |
| cilium-envoy-1.16 | affected | wolfi | cilium-envoy-1.16 | — |
| cilium-envoy-1.17 | affected | wolfi | cilium-envoy-1.17 | — |
| cilium-envoy-1.17 | affected | chainguard | cilium-envoy-1.17 | — |
| cilium-envoy-fips-1.14 | affected | chainguard | cilium-envoy-fips-1.14 | — |
| cilium-envoy-fips-1.15 | affected | chainguard | cilium-envoy-fips-1.15 | — |
| cilium-envoy-fips-1.16 | affected | chainguard | cilium-envoy-fips-1.16 | — |
| cilium-envoy-fips-1.17 | affected | chainguard | cilium-envoy-fips-1.17 | — |
| cilium-fips-1.14 | affected | chainguard | cilium-fips-1.14 | — |
| cilium-fips-1.15 | affected | chainguard | cilium-fips-1.15 | — |
| cilium-fips-1.16 | affected | chainguard | cilium-fips-1.16 | — |
| cilium-fips-1.17 | affected | chainguard | cilium-fips-1.17 | — |
| cinder-csi-plugin-fips | affected | chainguard | cinder-csi-plugin-fips | — |
| cloudbeat-fips | affected | chainguard | cloudbeat-fips | — |
| cloudflared | affected | chainguard | cloudflared | — |
| cloudflared | affected | wolfi | cloudflared | — |
| cloudnative-pg | affected | chainguard | cloudnative-pg | — |
| cloudnative-pg | affected | wolfi | cloudnative-pg | — |
| cloudnative-pg-fips | affected | chainguard | cloudnative-pg-fips | — |
| cloudprober | affected | wolfi | cloudprober | — |
| cloudprober | affected | chainguard | cloudprober | — |
| cloudprober-fips | affected | chainguard | cloudprober-fips | — |
| cloud-provider-aws-1.28 | affected | chainguard | cloud-provider-aws-1.28 | — |
| cloud-provider-aws-1.29 | affected | chainguard | cloud-provider-aws-1.29 | — |
| cloud-provider-aws-1.30 | affected | chainguard | cloud-provider-aws-1.30 | — |
| cloud-provider-aws-1.31 | affected | chainguard | cloud-provider-aws-1.31 | — |
| cloud-provider-aws-1.31 | affected | wolfi | cloud-provider-aws-1.31 | — |
| cloud-provider-aws-1.32 | affected | chainguard | cloud-provider-aws-1.32 | — |
| cloud-provider-aws-1.32 | affected | wolfi | cloud-provider-aws-1.32 | — |
| cloud-provider-aws-fips-1.28 | affected | chainguard | cloud-provider-aws-fips-1.28 | — |
| cloud-provider-aws-fips-1.29 | affected | chainguard | cloud-provider-aws-fips-1.29 | — |
| cloud-provider-aws-fips-1.30 | affected | chainguard | cloud-provider-aws-fips-1.30 | — |
| cloud-provider-aws-fips-1.31 | affected | chainguard | cloud-provider-aws-fips-1.31 | — |
| cloud-provider-aws-fips-1.32 | affected | chainguard | cloud-provider-aws-fips-1.32 | — |
| cloud-provider-azure-1.27 | affected | chainguard | cloud-provider-azure-1.27 | — |
| cloud-provider-azure-1.28 | affected | chainguard | cloud-provider-azure-1.28 | — |
| cloud-provider-azure-fips-1.27 | affected | chainguard | cloud-provider-azure-fips-1.27 | — |
| cloud-provider-azure-fips-1.28 | affected | chainguard | cloud-provider-azure-fips-1.28 | — |
| cloud-provider-gcp-cloud-controller-manager | affected | chainguard | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager | affected | wolfi | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager-fips | affected | chainguard | cloud-provider-gcp-cloud-controller-manager-fips | — |
| cloud-sql-proxy | affected | chainguard | cloud-sql-proxy | — |
| cloud-sql-proxy | affected | wolfi | cloud-sql-proxy | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-api-aws-controller | affected | chainguard | cluster-api-aws-controller | — |
| cluster-api-aws-controller | affected | wolfi | cluster-api-aws-controller | — |
| cluster-api-aws-controller-fips | affected | chainguard | cluster-api-aws-controller-fips | — |
| cluster-api-controller | affected | chainguard | cluster-api-controller | — |
| cluster-api-controller | affected | wolfi | cluster-api-controller | — |
| cluster-autoscaler-1.28 | affected | wolfi | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.28 | affected | chainguard | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.30 | affected | chainguard | cluster-autoscaler-1.30 | — |
| cluster-autoscaler-1.30 | affected | wolfi | cluster-autoscaler-1.30 | — |
| cluster-autoscaler-1.31 | affected | wolfi | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.31 | affected | chainguard | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.32 | affected | wolfi | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| cluster-autoscaler-fips-1.29 | affected | chainguard | cluster-autoscaler-fips-1.29 | — |
| cluster-autoscaler-fips-1.30 | affected | chainguard | cluster-autoscaler-fips-1.30 | — |
| cluster-autoscaler-fips-1.31 | affected | chainguard | cluster-autoscaler-fips-1.31 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| clusterctl | affected | chainguard | clusterctl | — |
| clusterctl | affected | wolfi | clusterctl | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler-fips | affected | chainguard | cluster-proportional-autoscaler-fips | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| conftest | affected | chainguard | conftest | — |
| conftest | affected | wolfi | conftest | — |
| conftest-fips | affected | chainguard | conftest-fips | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.18 | affected | chainguard | consul-1.18 | — |
| consul-1.19 | affected | chainguard | consul-1.19 | — |
| consul-fips-1.17 | affected | chainguard | consul-fips-1.17 | — |
| consul-fips-1.18 | affected | chainguard | consul-fips-1.18 | — |
| consul-fips-1.19 | affected | chainguard | consul-fips-1.19 | — |
| consul-fips-1.20 | affected | chainguard | consul-fips-1.20 | — |
| consul-k8s-1.1 | affected | chainguard | consul-k8s-1.1 | — |
| consul-k8s-1.3 | affected | chainguard | consul-k8s-1.3 | — |
| consul-k8s-1.4 | affected | chainguard | consul-k8s-1.4 | — |
| consul-k8s-1.5 | affected | wolfi | consul-k8s-1.5 | — |
| consul-k8s-1.5 | affected | chainguard | consul-k8s-1.5 | — |
| consul-k8s-1.6 | affected | wolfi | consul-k8s-1.6 | — |
| consul-k8s-1.6 | affected | chainguard | consul-k8s-1.6 | — |
| consul-k8s-fips-1.1 | affected | chainguard | consul-k8s-fips-1.1 | — |
| consul-k8s-fips-1.3 | affected | chainguard | consul-k8s-fips-1.3 | — |
| consul-k8s-fips-1.5 | affected | chainguard | consul-k8s-fips-1.5 | — |
| consul-k8s-fips-1.6 | affected | chainguard | consul-k8s-fips-1.6 | — |
| containerd-1 | affected | chainguard | containerd-1 | — |
| containerd-1 | affected | wolfi | containerd-1 | — |
| containerd-2 | affected | chainguard | containerd-2 | — |
| containerd-2 | affected | wolfi | containerd-2 | — |
| containerd-fips | affected | chainguard | containerd-fips | — |
| contour-1.28 | affected | wolfi | contour-1.28 | — |
| contour-1.28 | affected | chainguard | contour-1.28 | — |
| contour-1.29 | affected | chainguard | contour-1.29 | — |
| contour-1.29 | affected | wolfi | contour-1.29 | — |
| contour-1.30 | affected | chainguard | contour-1.30 | — |
| contour-1.30 | affected | wolfi | contour-1.30 | — |
| contour-fips-1.28 | affected | chainguard | contour-fips-1.28 | — |
| contour-fips-1.29 | affected | chainguard | contour-fips-1.29 | — |
| contour-fips-1.30 | affected | chainguard | contour-fips-1.30 | — |
| controller-gen | affected | chainguard | controller-gen | — |
| controller-gen | affected | wolfi | controller-gen | — |
| coredns | affected | wolfi | coredns | — |
| coredns | affected | chainguard | coredns | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cosign | affected | wolfi | cosign | — |
| cosign | affected | chainguard | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| cosign-fips | affected | wolfi | cosign-fips | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| croc | affected | wolfi | croc | — |
| croc | affected | chainguard | croc | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane-fips | affected | chainguard | crossplane-fips | — |
| crossplane-provider-aws | affected | chainguard | crossplane-provider-aws | — |
| crossplane-provider-aws | affected | wolfi | crossplane-provider-aws | — |
| crossplane-provider-aws-cloudformation | affected | chainguard | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudformation | affected | wolfi | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudfront | affected | chainguard | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudfront | affected | wolfi | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudwatchlogs | affected | wolfi | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-cloudwatchlogs | affected | chainguard | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-dynamodb | affected | wolfi | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-dynamodb | affected | chainguard | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-ec2 | affected | wolfi | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-ec2 | affected | chainguard | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-eks | affected | wolfi | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-eks | affected | chainguard | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-elasticache | affected | chainguard | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-elasticache | affected | wolfi | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-firehose | affected | chainguard | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-firehose | affected | wolfi | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-iam | affected | wolfi | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-iam | affected | chainguard | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-kinesis | affected | chainguard | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kinesis | affected | wolfi | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kms | affected | wolfi | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-kms | affected | chainguard | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-lambda | affected | chainguard | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-lambda | affected | wolfi | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-memorydb | affected | wolfi | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-memorydb | affected | chainguard | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-rds | affected | chainguard | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-rds | affected | wolfi | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-route53 | affected | chainguard | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-route53 | affected | wolfi | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-s3 | affected | wolfi | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-s3 | affected | chainguard | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-sns | affected | chainguard | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sns | affected | wolfi | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sqs | affected | chainguard | crossplane-provider-aws-sqs | — |
| crossplane-provider-aws-sqs | affected | wolfi | crossplane-provider-aws-sqs | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure-authorization | affected | chainguard | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-authorization | affected | wolfi | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-managedidentity | affected | chainguard | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-managedidentity | affected | wolfi | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-sql | affected | chainguard | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-sql | affected | wolfi | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-storage | affected | wolfi | crossplane-provider-azure-storage | — |
| crossplane-provider-azure-storage | affected | chainguard | crossplane-provider-azure-storage | — |
| crossplane-provider-family-aws | affected | chainguard | crossplane-provider-family-aws | — |
| crossplane-provider-family-aws | affected | wolfi | crossplane-provider-family-aws | — |
| crossplane-provider-family-azure | affected | wolfi | crossplane-provider-family-azure | — |
| crossplane-provider-family-azure | affected | chainguard | crossplane-provider-family-azure | — |
| crossplane-provider-gcp | affected | chainguard | crossplane-provider-gcp | — |
| crossplane-provider-gcp | affected | wolfi | crossplane-provider-gcp | — |
| crossplane-provider-keycloak | affected | chainguard | crossplane-provider-keycloak | — |
| crossplane-provider-keycloak | affected | wolfi | crossplane-provider-keycloak | — |
| crossplane-provider-keycloak-fips | affected | chainguard | crossplane-provider-keycloak-fips | — |
| crossplane-provider-sql | affected | chainguard | crossplane-provider-sql | — |
| crossplane-provider-sql | affected | wolfi | crossplane-provider-sql | — |
| crossplane-provider-sql-fips | affected | chainguard | crossplane-provider-sql-fips | — |
| cue | affected | wolfi | cue | — |
| cue | affected | chainguard | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagdotdev | affected | chainguard | dagdotdev | — |
| dagdotdev | affected | wolfi | dagdotdev | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| dbmate | affected | wolfi | dbmate | — |
| dbmate | affected | chainguard | dbmate | — |
| dcgm-exporter | affected | chainguard | dcgm-exporter | — |
| dcgm-exporter-fips | affected | chainguard | dcgm-exporter-fips | — |
| descheduler | affected | wolfi | descheduler | — |
| descheduler | affected | chainguard | descheduler | — |
| descheduler-fips | affected | chainguard | descheduler-fips | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-fips | affected | chainguard | dex-fips | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| distribution | affected | wolfi | distribution | — |
| distribution | affected | chainguard | distribution | — |
| distribution-fips | affected | chainguard | distribution-fips | — |
| dive | affected | wolfi | dive | — |
| dive | affected | chainguard | dive | — |
| docker | affected | chainguard | docker | — |
| docker | affected | wolfi | docker | — |
| docker-cli-buildx | affected | wolfi | docker-cli-buildx | — |
| docker-cli-buildx | affected | chainguard | docker-cli-buildx | — |
| docker-cli-buildx-fips | affected | chainguard | docker-cli-buildx-fips | — |
| docker-compose | affected | chainguard | docker-compose | — |
| docker-compose | affected | wolfi | docker-compose | — |
| docker-compose-fips | affected | chainguard | docker-compose-fips | — |
| docker-fips | affected | chainguard | docker-fips | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eck-operator | affected | chainguard | eck-operator | — |
| eck-operator-fips | affected | chainguard | eck-operator-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| eks-distro-1.27 | affected | chainguard | eks-distro-1.27 | — |
| eks-distro-1.28 | affected | chainguard | eks-distro-1.28 | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-fips-1.27 | affected | chainguard | eks-distro-fips-1.27 | — |
| eks-distro-fips-1.28 | affected | chainguard | eks-distro-fips-1.28 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| elastic-agent-fips | affected | chainguard | elastic-agent-fips | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| emissary-fips | affected | chainguard | emissary-fips | — |
| envoy-gateway | affected | wolfi | envoy-gateway | — |
| envoy-gateway | affected | chainguard | envoy-gateway | — |
| envoy-gateway-fips | affected | chainguard | envoy-gateway-fips | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| etcd-fips-3.4 | affected | chainguard | etcd-fips-3.4 | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns | affected | chainguard | external-dns | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| falco-exporter | affected | chainguard | falco-exporter | — |
| falco-exporter | affected | wolfi | falco-exporter | — |
| falco-exporter-fips | affected | chainguard | falco-exporter-fips | — |
| falcosidekick | affected | wolfi | falcosidekick | — |
| falcosidekick | affected | chainguard | falcosidekick | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| filebrowser | affected | chainguard | filebrowser | — |
| filebrowser | affected | wolfi | filebrowser | — |
| flannel | affected | wolfi | flannel | — |
| flannel | affected | chainguard | flannel | — |
| fleet-server-fips | affected | chainguard | fleet-server-fips | — |
| fluent-bit-plugin-loki | affected | wolfi | fluent-bit-plugin-loki | — |
| fluent-bit-plugin-loki | affected | chainguard | fluent-bit-plugin-loki | — |
| fluent-operator | affected | chainguard | fluent-operator | — |
| fluent-operator | affected | wolfi | fluent-operator | — |
| fluent-operator-fips | affected | chainguard | fluent-operator-fips | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-2.4 | affected | wolfi | flux-2.4 | — |
| flux-2.4 | affected | chainguard | flux-2.4 | — |
| flux-2.5 | affected | chainguard | flux-2.5 | — |
| flux-2.5 | affected | wolfi | flux-2.5 | — |
| flux-fips | affected | chainguard | flux-fips | — |
| flux-fips-2.4 | affected | chainguard | flux-fips-2.4 | — |
| flux-fips-2.5 | affected | chainguard | flux-fips-2.5 | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller-0.37 | affected | chainguard | flux-helm-controller-0.37 | — |
| flux-helm-controller-fips | affected | chainguard | flux-helm-controller-fips | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-automation-controller-fips | affected | chainguard | flux-image-automation-controller-fips | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller-fips | affected | chainguard | flux-image-reflector-controller-fips | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller-fips | affected | chainguard | flux-kustomize-controller-fips | — |
| flux-notification-controller | affected | wolfi | flux-notification-controller | — |
| flux-notification-controller | affected | chainguard | flux-notification-controller | — |
| flux-notification-controller-fips | affected | chainguard | flux-notification-controller-fips | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller-fips | affected | chainguard | flux-source-controller-fips | — |
| flyte | affected | wolfi | flyte | — |
| flyte | affected | chainguard | flyte | — |
| fq | affected | chainguard | fq | — |
| fq | affected | wolfi | fq | — |
| frp | affected | wolfi | frp | — |
| frp | affected | chainguard | frp | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| function-environment-configs | affected | chainguard | function-environment-configs | — |
| function-environment-configs-fips | affected | chainguard | function-environment-configs-fips | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.16 | affected | wolfi | gatekeeper-3.16 | — |
| gatekeeper-3.16 | affected | chainguard | gatekeeper-3.16 | — |
| gatekeeper-3.17 | affected | chainguard | gatekeeper-3.17 | — |
| gatekeeper-3.17 | affected | wolfi | gatekeeper-3.17 | — |
| gatekeeper-3.18 | affected | wolfi | gatekeeper-3.18 | — |
| gatekeeper-3.18 | affected | chainguard | gatekeeper-3.18 | — |
| gatekeeper-fips-3.16 | affected | chainguard | gatekeeper-fips-3.16 | — |
| gatekeeper-fips-3.17 | affected | chainguard | gatekeeper-fips-3.17 | — |
| gatekeeper-fips-3.18 | affected | chainguard | gatekeeper-fips-3.18 | — |
| gatus | affected | chainguard | gatus | — |
| gatus | affected | wolfi | gatus | — |
| gcp-compute-persistent-disk-csi-driver-1.12 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.12 | — |
| gcp-compute-persistent-disk-csi-driver-1.13 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.13 | — |
| gcp-compute-persistent-disk-csi-driver-1.14 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.14 | — |
| gcp-compute-persistent-disk-csi-driver-1.15 | affected | wolfi | gcp-compute-persistent-disk-csi-driver-1.15 | — |
| gcp-compute-persistent-disk-csi-driver-1.15 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.15 | — |
| gcp-compute-persistent-disk-csi-driver-1.16 | affected | wolfi | gcp-compute-persistent-disk-csi-driver-1.16 | — |
| gcp-compute-persistent-disk-csi-driver-1.16 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.16 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.12 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.12 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.13 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.13 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.14 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.14 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.15 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.15 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.16 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.16 | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gh | affected | wolfi | gh | — |
| gh | affected | chainguard | gh | — |
| gitaly-17.10 | affected | wolfi | gitaly-17.10 | — |
| gitaly-17.10 | affected | chainguard | gitaly-17.10 | — |
| gitaly-17.7 | affected | wolfi | gitaly-17.7 | — |
| gitaly-17.7 | affected | chainguard | gitaly-17.7 | — |
| gitaly-17.8 | affected | wolfi | gitaly-17.8 | — |
| gitaly-17.8 | affected | chainguard | gitaly-17.8 | — |
| gitaly-17.9 | affected | wolfi | gitaly-17.9 | — |
| gitaly-17.9 | affected | chainguard | gitaly-17.9 | — |
| gitaly-fips-17.10 | affected | chainguard | gitaly-fips-17.10 | — |
| gitaly-fips-17.8 | affected | chainguard | gitaly-fips-17.8 | — |
| gitaly-fips-17.9 | affected | chainguard | gitaly-fips-17.9 | — |
| gitlab-cng-17.7 | affected | wolfi | gitlab-cng-17.7 | — |
| gitlab-cng-17.7 | affected | chainguard | gitlab-cng-17.7 | — |
| gitlab-cng-17.8 | affected | chainguard | gitlab-cng-17.8 | — |
| gitlab-cng-17.8 | affected | wolfi | gitlab-cng-17.8 | — |
| gitlab-cng-17.9 | affected | chainguard | gitlab-cng-17.9 | — |
| gitlab-cng-17.9 | affected | wolfi | gitlab-cng-17.9 | — |
| gitlab-cng-fips-17.7 | affected | chainguard | gitlab-cng-fips-17.7 | — |
| gitlab-cng-fips-17.8 | affected | chainguard | gitlab-cng-fips-17.8 | — |
| gitlab-cng-fips-17.9 | affected | chainguard | gitlab-cng-fips-17.9 | — |
| gitlab-ee-17.10 | affected | chainguard | gitlab-ee-17.10 | — |
| gitlab-ee-17.7 | affected | chainguard | gitlab-ee-17.7 | — |
| gitlab-ee-17.8 | affected | chainguard | gitlab-ee-17.8 | — |
| gitlab-ee-17.9 | affected | chainguard | gitlab-ee-17.9 | — |
| gitlab-ee-fips-17.10 | affected | chainguard | gitlab-ee-fips-17.10 | — |
| gitlab-ee-fips-17.7 | affected | chainguard | gitlab-ee-fips-17.7 | — |
| gitlab-ee-fips-17.8 | affected | chainguard | gitlab-ee-fips-17.8 | — |
| gitlab-ee-fips-17.9 | affected | chainguard | gitlab-ee-fips-17.9 | — |
| gitlab-kas-17.7 | affected | chainguard | gitlab-kas-17.7 | — |
| gitlab-kas-17.7 | affected | wolfi | gitlab-kas-17.7 | — |
| gitlab-kas-17.8 | affected | chainguard | gitlab-kas-17.8 | — |
| gitlab-kas-17.8 | affected | wolfi | gitlab-kas-17.8 | — |
| gitlab-kas-17.9 | affected | chainguard | gitlab-kas-17.9 | — |
| gitlab-kas-17.9 | affected | wolfi | gitlab-kas-17.9 | — |
| gitlab-kas-fips-17.7 | affected | chainguard | gitlab-kas-fips-17.7 | — |
| gitlab-kas-fips-17.8 | affected | chainguard | gitlab-kas-fips-17.8 | — |
| gitlab-kas-fips-17.9 | affected | chainguard | gitlab-kas-fips-17.9 | — |
| gitlab-pages-17.10 | affected | chainguard | gitlab-pages-17.10 | — |
| gitlab-pages-17.10 | affected | wolfi | gitlab-pages-17.10 | — |
| gitlab-pages-17.7 | affected | wolfi | gitlab-pages-17.7 | — |
| gitlab-pages-17.7 | affected | chainguard | gitlab-pages-17.7 | — |
| gitlab-pages-17.8 | affected | chainguard | gitlab-pages-17.8 | — |
| gitlab-pages-17.8 | affected | wolfi | gitlab-pages-17.8 | — |
| gitlab-pages-17.9 | affected | chainguard | gitlab-pages-17.9 | — |
| gitlab-pages-17.9 | affected | wolfi | gitlab-pages-17.9 | — |
| gitlab-pages-fips-17.10 | affected | chainguard | gitlab-pages-fips-17.10 | — |
| gitlab-pages-fips-17.7 | affected | chainguard | gitlab-pages-fips-17.7 | — |
| gitlab-pages-fips-17.8 | affected | chainguard | gitlab-pages-fips-17.8 | — |
| gitlab-pages-fips-17.9 | affected | chainguard | gitlab-pages-fips-17.9 | — |
| gitlab-rails-ee-17.7 | affected | chainguard | gitlab-rails-ee-17.7 | — |
| gitlab-rails-ee-17.8 | affected | chainguard | gitlab-rails-ee-17.8 | — |
| gitlab-rails-ee-17.9 | affected | chainguard | gitlab-rails-ee-17.9 | — |
| gitlab-rails-ee-fips-17.7 | affected | chainguard | gitlab-rails-ee-fips-17.7 | — |
| gitlab-rails-ee-fips-17.8 | affected | chainguard | gitlab-rails-ee-fips-17.8 | — |
| gitlab-rails-ee-fips-17.9 | affected | chainguard | gitlab-rails-ee-fips-17.9 | — |
| gitlab-runner-17.7 | affected | chainguard | gitlab-runner-17.7 | — |
| gitlab-runner-17.7 | affected | wolfi | gitlab-runner-17.7 | — |
| gitlab-runner-17.8 | affected | wolfi | gitlab-runner-17.8 | — |
| gitlab-runner-17.8 | affected | chainguard | gitlab-runner-17.8 | — |
| gitlab-runner-17.9 | affected | chainguard | gitlab-runner-17.9 | — |
| gitlab-runner-17.9 | affected | wolfi | gitlab-runner-17.9 | — |
| gitlab-runner-fips-17.7 | affected | chainguard | gitlab-runner-fips-17.7 | — |
| gitlab-runner-fips-17.8 | affected | chainguard | gitlab-runner-fips-17.8 | — |
| gitlab-runner-fips-17.9 | affected | chainguard | gitlab-runner-fips-17.9 | — |
| git-lfs | affected | wolfi | git-lfs | — |
| git-lfs | affected | chainguard | git-lfs | — |
| git-lfs-fips | affected | chainguard | git-lfs-fips | — |
| gitness | affected | chainguard | gitness | — |
| gitness | affected | wolfi | gitness | — |
| gitsign | affected | chainguard | gitsign | — |
| gitsign | affected | wolfi | gitsign | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| glab | affected | wolfi | glab | — |
| glab | affected | chainguard | glab | — |
| glow | affected | chainguard | glow | — |
| glow | affected | wolfi | glow | — |
| go-discover | affected | wolfi | go-discover | — |
| go-discover | affected | chainguard | go-discover | — |
| go-discover-fips | affected | chainguard | go-discover-fips | — |
| go-fips-1.24 | affected | chainguard | go-fips-1.24 | — |
| go-ipfs-fips | affected | chainguard | go-ipfs-fips | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| google-guest-agent | affected | chainguard | google-guest-agent | — |
| google-guest-agent-manager | affected | chainguard | google-guest-agent-manager | — |
| google-osconfig-agent | affected | chainguard | google-osconfig-agent | — |
| gptscript | affected | chainguard | gptscript | — |
| gptscript | affected | wolfi | gptscript | — |
| gpu-feature-discovery | affected | chainguard | gpu-feature-discovery | — |
| gpu-operator | affected | chainguard | gpu-operator | — |
| grafana-10.4 | affected | chainguard | grafana-10.4 | — |
| grafana-10.4 | affected | wolfi | grafana-10.4 | — |
| grafana-11.0 | affected | chainguard | grafana-11.0 | — |
| grafana-11.0 | affected | wolfi | grafana-11.0 | — |
| grafana-11.1 | affected | wolfi | grafana-11.1 | — |
| grafana-11.1 | affected | chainguard | grafana-11.1 | — |
| grafana-11.2 | affected | chainguard | grafana-11.2 | — |
| grafana-11.2 | affected | wolfi | grafana-11.2 | — |
| grafana-11.3 | affected | wolfi | grafana-11.3 | — |
| grafana-11.3 | affected | chainguard | grafana-11.3 | — |
| grafana-11.4 | affected | chainguard | grafana-11.4 | — |
| grafana-11.4 | affected | wolfi | grafana-11.4 | — |
| grafana-agent-operator | affected | wolfi | grafana-agent-operator | — |
| grafana-agent-operator | affected | chainguard | grafana-agent-operator | — |
| grafana-alloy | affected | chainguard | grafana-alloy | — |
| grafana-alloy | affected | wolfi | grafana-alloy | — |
| grafana-alloy-fips | affected | chainguard | grafana-alloy-fips | — |
| grafana-fips-10.4 | affected | chainguard | grafana-fips-10.4 | — |
| grafana-fips-11.0 | affected | chainguard | grafana-fips-11.0 | — |
| grafana-fips-11.1 | affected | chainguard | grafana-fips-11.1 | — |
| grafana-fips-11.2 | affected | chainguard | grafana-fips-11.2 | — |
| grafana-fips-11.3 | affected | chainguard | grafana-fips-11.3 | — |
| grafana-fips-11.4 | affected | chainguard | grafana-fips-11.4 | — |
| grafana-fips-11.5 | affected | chainguard | grafana-fips-11.5 | — |
| grafana-mimir-fips | affected | chainguard | grafana-mimir-fips | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grafana-rollout-operator | affected | wolfi | grafana-rollout-operator | — |
| grafana-rollout-operator | affected | chainguard | grafana-rollout-operator | — |
| grafana-rollout-operator-fips | affected | chainguard | grafana-rollout-operator-fips | — |
| grpc-health-probe | affected | wolfi | grpc-health-probe | — |
| grpc-health-probe | affected | chainguard | grpc-health-probe | — |
| grpc-health-probe-fips | affected | chainguard | grpc-health-probe-fips | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grpcurl | affected | chainguard | grpcurl | — |
| guac | affected | wolfi | guac | — |
| guac | affected | chainguard | guac | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| harbor-2.10 | affected | wolfi | harbor-2.10 | — |
| harbor-2.10 | affected | chainguard | harbor-2.10 | — |
| harbor-2.11 | affected | wolfi | harbor-2.11 | — |
| harbor-2.11 | affected | chainguard | harbor-2.11 | — |
| harbor-2.12 | affected | wolfi | harbor-2.12 | — |
| harbor-2.12 | affected | chainguard | harbor-2.12 | — |
| harbor-2.9 | affected | chainguard | harbor-2.9 | — |
| harbor-fips-2.10 | affected | chainguard | harbor-fips-2.10 | — |
| harbor-fips-2.11 | affected | chainguard | harbor-fips-2.11 | — |
| harbor-fips-2.12 | affected | chainguard | harbor-fips-2.12 | — |
| harbor-fips-2.9 | affected | chainguard | harbor-fips-2.9 | — |
| harbor-registry | affected | chainguard | harbor-registry | — |
| harbor-registry | affected | wolfi | harbor-registry | — |
| harbor-registry-fips | affected | chainguard | harbor-registry-fips | — |
| harbor-scanner-trivy | affected | chainguard | harbor-scanner-trivy | — |
| harbor-scanner-trivy | affected | wolfi | harbor-scanner-trivy | — |
| harbor-scanner-trivy-fips | affected | chainguard | harbor-scanner-trivy-fips | — |
| hcloud | affected | chainguard | hcloud | — |
| hcloud | affected | wolfi | hcloud | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-operator-fips-1.33 | affected | chainguard | helm-operator-fips-1.33 | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | wolfi | hey | — |
| hey | affected | chainguard | hey | — |
| hubble | affected | chainguard | hubble | — |
| hubble | affected | wolfi | hubble | — |
| hubble-fips | affected | chainguard | hubble-fips | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui-backend | affected | chainguard | hubble-ui-backend | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| hugo | affected | wolfi | hugo | — |
| hugo | affected | chainguard | hugo | — |
| hugo-extended | affected | wolfi | hugo-extended | — |
| hugo-extended | affected | chainguard | hugo-extended | — |
| hugo-fips | affected | chainguard | hugo-fips | — |
| hydra | affected | wolfi | hydra | — |
| hydra | affected | chainguard | hydra | — |
| hydra-fips | affected | chainguard | hydra-fips | — |
| influxd | affected | chainguard | influxd | — |
| influxd | affected | wolfi | influxd | — |
| ingress-nginx-controller-1.10 | affected | chainguard | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.10 | affected | wolfi | ingress-nginx-controller-1.10 | — |
| ingress-nginx-controller-1.11 | affected | wolfi | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.11 | affected | chainguard | ingress-nginx-controller-1.11 | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-fips-1.10 | affected | chainguard | ingress-nginx-controller-fips-1.10 | — |
| ingress-nginx-controller-fips-1.11 | affected | chainguard | ingress-nginx-controller-fips-1.11 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ipfs | affected | wolfi | ipfs | — |
| ipfs | affected | chainguard | ipfs | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| istio-1.23 | affected | chainguard | istio-1.23 | — |
| istio-1.23 | affected | wolfi | istio-1.23 | — |
| istio-1.24 | affected | wolfi | istio-1.24 | — |
| istio-1.24 | affected | chainguard | istio-1.24 | — |
| istio-cni-1.21 | affected | chainguard | istio-cni-1.21 | — |
| istio-cni-1.21 | affected | wolfi | istio-cni-1.21 | — |
| istio-cni-1.22 | affected | wolfi | istio-cni-1.22 | — |
| istio-cni-1.22 | affected | chainguard | istio-cni-1.22 | — |
| istio-cni-1.23 | affected | chainguard | istio-cni-1.23 | — |
| istio-cni-1.23 | affected | wolfi | istio-cni-1.23 | — |
| istio-fips-1.21 | affected | chainguard | istio-fips-1.21 | — |
| istio-fips-1.22 | affected | chainguard | istio-fips-1.22 | — |
| istio-fips-1.23 | affected | chainguard | istio-fips-1.23 | — |
| istio-fips-1.24 | affected | chainguard | istio-fips-1.24 | — |
| istio-operator-1.21 | affected | chainguard | istio-operator-1.21 | — |
| istio-operator-1.21 | affected | wolfi | istio-operator-1.21 | — |
| istio-operator-1.22 | affected | chainguard | istio-operator-1.22 | — |
| istio-operator-1.22 | affected | wolfi | istio-operator-1.22 | — |
| istio-pilot-agent-1.21 | affected | wolfi | istio-pilot-agent-1.21 | — |
| istio-pilot-agent-1.21 | affected | chainguard | istio-pilot-agent-1.21 | — |
| istio-pilot-discovery-1.21 | affected | wolfi | istio-pilot-discovery-1.21 | — |
| istio-pilot-discovery-1.21 | affected | chainguard | istio-pilot-discovery-1.21 | — |
| istio-pilot-discovery-1.22 | affected | chainguard | istio-pilot-discovery-1.22 | — |
| istio-pilot-discovery-1.22 | affected | wolfi | istio-pilot-discovery-1.22 | — |
| istio-pilot-discovery-1.23 | affected | chainguard | istio-pilot-discovery-1.23 | — |
| istio-pilot-discovery-1.23 | affected | wolfi | istio-pilot-discovery-1.23 | — |
| jaeger-operator | affected | wolfi | jaeger-operator | — |
| jaeger-operator | affected | chainguard | jaeger-operator | — |
| jaeger-operator-fips | affected | chainguard | jaeger-operator-fips | — |
| jitsucom-bulker | affected | chainguard | jitsucom-bulker | — |
| jitsucom-bulker | affected | wolfi | jitsucom-bulker | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k3s-1.32 | affected | chainguard | k3s-1.32 | — |
| k3s-1.32 | affected | wolfi | k3s-1.32 | — |
| k6 | affected | chainguard | k6 | — |
| k6 | affected | wolfi | k6 | — |
| k8s-device-plugin | affected | chainguard | k8s-device-plugin | — |
| k8s-device-plugin | affected | wolfi | k8s-device-plugin | — |
| k8s-device-plugin-fips | affected | chainguard | k8s-device-plugin-fips | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| k9s | affected | wolfi | k9s | — |
| k9s | affected | chainguard | k9s | — |
| kaf | affected | wolfi | kaf | — |
| kaf | affected | chainguard | kaf | — |
| kafka_exporter | affected | wolfi | kafka_exporter | — |
| kafka_exporter | affected | chainguard | kafka_exporter | — |
| kafka_exporter-fips | affected | chainguard | kafka_exporter-fips | — |
| kafka-proxy | affected | wolfi | kafka-proxy | — |
| kafka-proxy | affected | chainguard | kafka-proxy | — |
| kaniko | affected | chainguard | kaniko | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko-fips | affected | chainguard | kaniko-fips | — |
| kapp | affected | chainguard | kapp | — |
| kapp | affected | wolfi | kapp | — |
| kapp-controller | affected | chainguard | kapp-controller | — |
| kapp-controller | affected | wolfi | kapp-controller | — |
| kapp-controller-fips | affected | chainguard | kapp-controller-fips | — |
| kapp-fips | affected | chainguard | kapp-fips | — |
| kargo | affected | wolfi | kargo | — |
| kargo | affected | chainguard | kargo | — |
| karpenter-0.23 | affected | chainguard | karpenter-0.23 | — |
| karpenter-0.33 | affected | chainguard | karpenter-0.33 | — |
| karpenter-0.34 | affected | chainguard | karpenter-0.34 | — |
| karpenter-0.35 | affected | chainguard | karpenter-0.35 | — |
| karpenter-0.36 | affected | chainguard | karpenter-0.36 | — |
| karpenter-0.37 | affected | chainguard | karpenter-0.37 | — |
| karpenter-1.0 | affected | chainguard | karpenter-1.0 | — |
| karpenter-1.0 | affected | wolfi | karpenter-1.0 | — |
| karpenter-1.1 | affected | wolfi | karpenter-1.1 | — |
| karpenter-1.1 | affected | chainguard | karpenter-1.1 | — |
| karpenter-1.2 | affected | wolfi | karpenter-1.2 | — |
| karpenter-1.2 | affected | chainguard | karpenter-1.2 | — |
| karpenter-1.3 | affected | chainguard | karpenter-1.3 | — |
| karpenter-1.3 | affected | wolfi | karpenter-1.3 | — |
| karpenter-fips-0.33 | affected | chainguard | karpenter-fips-0.33 | — |
| karpenter-fips-0.34 | affected | chainguard | karpenter-fips-0.34 | — |
| karpenter-fips-0.35 | affected | chainguard | karpenter-fips-0.35 | — |
| karpenter-fips-0.36 | affected | chainguard | karpenter-fips-0.36 | — |
| karpenter-fips-0.37 | affected | chainguard | karpenter-fips-0.37 | — |
| karpenter-fips-1.0 | affected | chainguard | karpenter-fips-1.0 | — |
| karpenter-fips-1.1 | affected | chainguard | karpenter-fips-1.1 | — |
| karpenter-fips-1.2 | affected | chainguard | karpenter-fips-1.2 | — |
| kbld | affected | chainguard | kbld | — |
| kbld | affected | wolfi | kbld | — |
| kbld-fips | affected | chainguard | kbld-fips | — |
| keda-2.15 | affected | chainguard | keda-2.15 | — |
| keda-2.15 | affected | wolfi | keda-2.15 | — |
| keda-2.16 | affected | wolfi | keda-2.16 | — |
| keda-2.16 | affected | chainguard | keda-2.16 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kepler | affected | chainguard | kepler | — |
| kiali | affected | wolfi | kiali | — |
| kiali | affected | chainguard | kiali | — |
| kiali-fips | affected | chainguard | kiali-fips | — |
| kiam | affected | chainguard | kiam | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| knative-client | affected | wolfi | knative-client | — |
| knative-client | affected | chainguard | knative-client | — |
| knative-serving-1.15 | affected | chainguard | knative-serving-1.15 | — |
| knative-serving-1.16 | affected | wolfi | knative-serving-1.16 | — |
| knative-serving-1.16 | affected | chainguard | knative-serving-1.16 | — |
| knative-serving-1.17 | affected | wolfi | knative-serving-1.17 | — |
| knative-serving-1.17 | affected | chainguard | knative-serving-1.17 | — |
| ko | affected | wolfi | ko | — |
| ko | affected | chainguard | ko | — |
| ko-fips | affected | wolfi | ko-fips | — |
| ko-fips | affected | chainguard | ko-fips | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kots-compat | affected | chainguard | kots-compat | — |
| kpt | affected | chainguard | kpt | — |
| kpt | affected | wolfi | kpt | — |
| kserve | affected | chainguard | kserve | — |
| kserve | affected | wolfi | kserve | — |
| kserve-modelmesh-serving | affected | chainguard | kserve-modelmesh-serving | — |
| kserve-modelmesh-serving | affected | wolfi | kserve-modelmesh-serving | — |
| ksops | affected | chainguard | ksops | — |
| ksops | affected | wolfi | ksops | — |
| kubeadm-bootstrap-controller | affected | chainguard | kubeadm-bootstrap-controller | — |
| kubeadm-bootstrap-controller | affected | wolfi | kubeadm-bootstrap-controller | — |
| kubeadm-controlplane-controller | affected | wolfi | kubeadm-controlplane-controller | — |
| kubeadm-controlplane-controller | affected | chainguard | kubeadm-controlplane-controller | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench-fips | affected | chainguard | kube-bench-fips | — |
| kubeflow | affected | chainguard | kubeflow | — |
| kubeflow | affected | wolfi | kubeflow | — |
| kubeflow-fips | affected | chainguard | kubeflow-fips | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-fluentd-operator | affected | wolfi | kube-fluentd-operator | — |
| kube-fluentd-operator | affected | chainguard | kube-fluentd-operator | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-metrics-adapter | affected | chainguard | kube-metrics-adapter | — |
| kube-metrics-adapter | affected | wolfi | kube-metrics-adapter | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator-fips | affected | chainguard | kuberay-operator-fips | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kuberlr | affected | wolfi | kuberlr | — |
| kuberlr | affected | chainguard | kuberlr | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.30 | affected | wolfi | kubernetes-1.30 | — |
| kubernetes-1.30 | affected | chainguard | kubernetes-1.30 | — |
| kubernetes-1.31 | affected | chainguard | kubernetes-1.31 | — |
| kubernetes-1.31 | affected | wolfi | kubernetes-1.31 | — |
| kubernetes-1.32 | affected | wolfi | kubernetes-1.32 | — |
| kubernetes-1.32 | affected | chainguard | kubernetes-1.32 | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-csi-external-attacher | affected | wolfi | kubernetes-csi-external-attacher | — |
| kubernetes-csi-external-attacher | affected | chainguard | kubernetes-csi-external-attacher | — |
| kubernetes-csi-external-attacher-fips | affected | chainguard | kubernetes-csi-external-attacher-fips | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner-fips | affected | chainguard | kubernetes-csi-external-provisioner-fips | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-fips | affected | chainguard | kubernetes-csi-external-resizer-fips | — |
| kubernetes-csi-external-snapshotter-6.3 | affected | chainguard | kubernetes-csi-external-snapshotter-6.3 | — |
| kubernetes-csi-external-snapshotter-7.0 | affected | chainguard | kubernetes-csi-external-snapshotter-7.0 | — |
| kubernetes-csi-external-snapshotter-8.0 | affected | chainguard | kubernetes-csi-external-snapshotter-8.0 | — |
| kubernetes-csi-external-snapshotter-8.0 | affected | wolfi | kubernetes-csi-external-snapshotter-8.0 | — |
| kubernetes-csi-external-snapshotter-8.1 | affected | wolfi | kubernetes-csi-external-snapshotter-8.1 | — |
| kubernetes-csi-external-snapshotter-8.1 | affected | chainguard | kubernetes-csi-external-snapshotter-8.1 | — |
| kubernetes-csi-external-snapshotter-8.2 | affected | chainguard | kubernetes-csi-external-snapshotter-8.2 | — |
| kubernetes-csi-external-snapshotter-8.2 | affected | wolfi | kubernetes-csi-external-snapshotter-8.2 | — |
| kubernetes-csi-external-snapshotter-fips-6.3 | affected | chainguard | kubernetes-csi-external-snapshotter-fips-6.3 | — |
| kubernetes-csi-external-snapshotter-fips-7.0 | affected | chainguard | kubernetes-csi-external-snapshotter-fips-7.0 | — |
| kubernetes-csi-external-snapshotter-fips-8.0 | affected | chainguard | kubernetes-csi-external-snapshotter-fips-8.0 | — |
| kubernetes-csi-external-snapshotter-fips-8.1 | affected | chainguard | kubernetes-csi-external-snapshotter-fips-8.1 | — |
| kubernetes-csi-external-snapshotter-fips-8.2 | affected | chainguard | kubernetes-csi-external-snapshotter-fips-8.2 | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.10 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.10 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.11 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.11 | — |
| kubernetes-csi-node-driver-registrar-2.11 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.11 | — |
| kubernetes-csi-node-driver-registrar-2.12 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.12 | — |
| kubernetes-csi-node-driver-registrar-2.12 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.12 | — |
| kubernetes-csi-node-driver-registrar-2.13 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.13 | — |
| kubernetes-csi-node-driver-registrar-2.13 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.13 | — |
| kubernetes-csi-node-driver-registrar-2.6 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.6 | — |
| kubernetes-csi-node-driver-registrar-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.8 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-fips-2.10 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-fips-2.11 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.11 | — |
| kubernetes-csi-node-driver-registrar-fips-2.12 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.12 | — |
| kubernetes-csi-node-driver-registrar-fips-2.13 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.13 | — |
| kubernetes-csi-node-driver-registrar-fips-2.7 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.7 | — |
| kubernetes-csi-node-driver-registrar-fips-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.8 | — |
| kubernetes-dashboard-api | affected | chainguard | kubernetes-dashboard-api | — |
| kubernetes-dashboard-api | affected | wolfi | kubernetes-dashboard-api | — |
| kubernetes-dashboard-auth | affected | chainguard | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth | affected | wolfi | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth-fips | affected | chainguard | kubernetes-dashboard-auth-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dashboard-web | affected | chainguard | kubernetes-dashboard-web | — |
| kubernetes-dashboard-web | affected | wolfi | kubernetes-dashboard-web | — |
| kubernetes-dashboard-web-fips | affected | chainguard | kubernetes-dashboard-web-fips | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache-fips | affected | chainguard | kubernetes-dns-node-cache-fips | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-event-exporter-fips | affected | chainguard | kubernetes-event-exporter-fips | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kubernetes-fips-1.29 | affected | chainguard | kubernetes-fips-1.29 | — |
| kubernetes-fips-1.30 | affected | chainguard | kubernetes-fips-1.30 | — |
| kubernetes-fips-1.31 | affected | chainguard | kubernetes-fips-1.31 | — |
| kubernetes-fips-1.32 | affected | chainguard | kubernetes-fips-1.32 | — |
| kubescape | affected | wolfi | kubescape | — |
| kubescape | affected | chainguard | kubescape | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-2.6 | affected | chainguard | kube-state-metrics-2.6 | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kube-vip | affected | chainguard | kube-vip | — |
| kube-vip | affected | wolfi | kube-vip | — |
| kube-vip-fips | affected | chainguard | kube-vip-fips | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kuma-2.5 | affected | chainguard | kuma-2.5 | — |
| kuma-2.6 | affected | chainguard | kuma-2.6 | — |
| kuma-2.7 | affected | chainguard | kuma-2.7 | — |
| kuma-2.8 | affected | wolfi | kuma-2.8 | — |
| kuma-2.8 | affected | chainguard | kuma-2.8 | — |
| kuma-2.9 | affected | chainguard | kuma-2.9 | — |
| kuma-2.9 | affected | wolfi | kuma-2.9 | — |
| kwok | affected | wolfi | kwok | — |
| kwok | affected | chainguard | kwok | — |
| kyverno-1.11 | affected | chainguard | kyverno-1.11 | — |
| kyverno-1.12 | affected | chainguard | kyverno-1.12 | — |
| kyverno-1.12 | affected | wolfi | kyverno-1.12 | — |
| kyverno-1.13 | affected | chainguard | kyverno-1.13 | — |
| kyverno-1.13 | affected | wolfi | kyverno-1.13 | — |
| kyverno-fips-1.11 | affected | chainguard | kyverno-fips-1.11 | — |
| kyverno-fips-1.12 | affected | chainguard | kyverno-fips-1.12 | — |
| kyverno-fips-1.13 | affected | chainguard | kyverno-fips-1.13 | — |
| kyverno-notation-aws | affected | chainguard | kyverno-notation-aws | — |
| kyverno-notation-aws | affected | wolfi | kyverno-notation-aws | — |
| kyverno-notation-aws-fips | affected | chainguard | kyverno-notation-aws-fips | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-fips | affected | chainguard | kyverno-policy-reporter-fips | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-fips | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-fips | — |
| kyverno-policy-reporter-ui-fips | affected | chainguard | kyverno-policy-reporter-ui-fips | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | wolfi | litefs | — |
| litefs | affected | chainguard | litefs | — |
| litestream | affected | wolfi | litestream | — |
| litestream | affected | chainguard | litestream | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner-fips | affected | chainguard | local-path-provisioner-fips | — |
| local-static-provisioner | affected | wolfi | local-static-provisioner | — |
| local-static-provisioner | affected | chainguard | local-static-provisioner | — |
| local-static-provisioner-fips | affected | chainguard | local-static-provisioner-fips | — |
| loki-3.2 | affected | wolfi | loki-3.2 | — |
| loki-3.2 | affected | chainguard | loki-3.2 | — |
| loki-3.3 | affected | chainguard | loki-3.3 | — |
| loki-3.3 | affected | wolfi | loki-3.3 | — |
| loki-3.4 | affected | chainguard | loki-3.4 | — |
| loki-3.4 | affected | wolfi | loki-3.4 | — |
| loki-fips-3.2 | affected | chainguard | loki-fips-3.2 | — |
| loki-fips-3.3 | affected | chainguard | loki-fips-3.3 | — |
| loki-fips-3.4 | affected | chainguard | loki-fips-3.4 | — |
| longhorn-share-manager-1.8 | affected | chainguard | longhorn-share-manager-1.8 | — |
| longhorn-share-manager-fips-1.8 | affected | chainguard | longhorn-share-manager-fips-1.8 | — |
| lvm-driver | affected | wolfi | lvm-driver | — |
| lvm-driver | affected | chainguard | lvm-driver | — |
| malcontent | affected | chainguard | malcontent | — |
| malcontent | affected | wolfi | malcontent | — |
| mattermost-10.0 | affected | wolfi | mattermost-10.0 | — |
| mattermost-10.0 | affected | chainguard | mattermost-10.0 | — |
| mattermost-10.1 | affected | chainguard | mattermost-10.1 | — |
| mattermost-10.1 | affected | wolfi | mattermost-10.1 | — |
| mattermost-10.2 | affected | chainguard | mattermost-10.2 | — |
| mattermost-10.2 | affected | wolfi | mattermost-10.2 | — |
| mattermost-10.3 | affected | chainguard | mattermost-10.3 | — |
| mattermost-10.3 | affected | wolfi | mattermost-10.3 | — |
| mattermost-10.4 | affected | chainguard | mattermost-10.4 | — |
| mattermost-10.4 | affected | wolfi | mattermost-10.4 | — |
| mattermost-10.5 | affected | wolfi | mattermost-10.5 | — |
| mattermost-10.5 | affected | chainguard | mattermost-10.5 | — |
| mattermost-9.11 | affected | chainguard | mattermost-9.11 | — |
| mattmoor-chainit | affected | chainguard | mattmoor-chainit | — |
| melange | affected | chainguard | melange | — |
| melange | affected | wolfi | melange | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| memcached-exporter-fips | affected | chainguard | memcached-exporter-fips | — |
| metacontroller | affected | chainguard | metacontroller | — |
| metacontroller | affected | wolfi | metacontroller | — |
| metallb | affected | chainguard | metallb | — |
| metallb | affected | wolfi | metallb | — |
| metallb-fips | affected | chainguard | metallb-fips | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| minio-operator | affected | wolfi | minio-operator | — |
| minio-operator | affected | chainguard | minio-operator | — |
| minio-operator-fips | affected | chainguard | minio-operator-fips | — |
| mkcert | affected | chainguard | mkcert | — |
| mkcert | affected | wolfi | mkcert | — |
| mods | affected | chainguard | mods | — |
| mods | affected | wolfi | mods | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| mountpoint-s3-csi-driver | affected | wolfi | mountpoint-s3-csi-driver | — |
| mountpoint-s3-csi-driver | affected | chainguard | mountpoint-s3-csi-driver | — |
| multus-cni | affected | wolfi | multus-cni | — |
| multus-cni | affected | chainguard | multus-cni | — |
| multus-cni-4.0.2 | affected | chainguard | multus-cni-4.0.2 | — |
| multus-cni-fips | affected | chainguard | multus-cni-fips | — |
| multus-cni-fips-4.0.2 | affected | chainguard | multus-cni-fips-4.0.2 | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nemo | affected | chainguard | nemo | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| net-kourier-fips-1.16 | affected | chainguard | net-kourier-fips-1.16 | — |
| neuvector | affected | wolfi | neuvector | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| neuvector-scanner | affected | chainguard | neuvector-scanner | — |
| neuvector-scanner | affected | wolfi | neuvector-scanner | — |
| neuvector-scanner-fips | affected | chainguard | neuvector-scanner-fips | — |
| neuvector-sigstore-interface | affected | wolfi | neuvector-sigstore-interface | — |
| neuvector-sigstore-interface | affected | chainguard | neuvector-sigstore-interface | — |
| neuvector-sigstore-interface-fips | affected | chainguard | neuvector-sigstore-interface-fips | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent-1.43 | affected | chainguard | newrelic-infrastructure-agent-1.43 | — |
| newrelic-nri-kube-events | affected | wolfi | newrelic-nri-kube-events | — |
| newrelic-nri-kube-events | affected | chainguard | newrelic-nri-kube-events | — |
| newrelic-nri-kube-events-1.9 | affected | chainguard | newrelic-nri-kube-events-1.9 | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nginx-prometheus-exporter | affected | chainguard | nginx-prometheus-exporter | — |
| nginx-prometheus-exporter | affected | wolfi | nginx-prometheus-exporter | — |
| nginx-prometheus-exporter-fips | affected | chainguard | nginx-prometheus-exporter-fips | — |
| node-feature-discovery-0.16 | affected | wolfi | node-feature-discovery-0.16 | — |
| node-feature-discovery-0.16 | affected | chainguard | node-feature-discovery-0.16 | — |
| node-feature-discovery-0.17 | affected | wolfi | node-feature-discovery-0.17 | — |
| node-feature-discovery-0.17 | affected | chainguard | node-feature-discovery-0.17 | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| node-problem-detector-0.8 | affected | wolfi | node-problem-detector-0.8 | — |
| node-problem-detector-fips-0.8 | affected | chainguard | node-problem-detector-fips-0.8 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kubernetes | affected | wolfi | nri-kubernetes | — |
| nri-kubernetes | affected | chainguard | nri-kubernetes | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nsc | affected | wolfi | nsc | — |
| nsc | affected | chainguard | nsc | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| nvidia-gpu-operator-validator-24.3 | affected | chainguard | nvidia-gpu-operator-validator-24.3 | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| octo-sts | affected | wolfi | octo-sts | — |
| octo-sts | affected | chainguard | octo-sts | — |
| ollama | affected | wolfi | ollama | — |
| ollama | affected | chainguard | ollama | — |
| opa | affected | wolfi | opa | — |
| opa | affected | chainguard | opa | — |
| opa-envoy | affected | chainguard | opa-envoy | — |
| opa-envoy | affected | wolfi | opa-envoy | — |
| opa-fips | affected | chainguard | opa-fips | — |
| opa-fips-envoy | affected | chainguard | opa-fips-envoy | — |
| openbao | affected | wolfi | openbao | — |
| openbao | affected | chainguard | openbao | — |
| openbao-fips | affected | chainguard | openbao-fips | — |
| openbao-k8s | affected | wolfi | openbao-k8s | — |
| openbao-k8s | affected | chainguard | openbao-k8s | — |
| openbao-k8s-fips | affected | chainguard | openbao-k8s-fips | — |
| opencost | affected | wolfi | opencost | — |
| opencost | affected | chainguard | opencost | — |
| opencost-fips | affected | chainguard | opencost-fips | — |
| openfga | affected | wolfi | openfga | — |
| openfga | affected | chainguard | openfga | — |
| opensearch-k8s-operator | affected | chainguard | opensearch-k8s-operator | — |
| opensearch-k8s-operator | affected | wolfi | opensearch-k8s-operator | — |
| opentelemetry-collector | affected | chainguard | opentelemetry-collector | — |
| opentelemetry-collector | affected | wolfi | opentelemetry-collector | — |
| opentelemetry-collector-contrib | affected | chainguard | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib | affected | wolfi | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib-fips | affected | chainguard | opentelemetry-collector-contrib-fips | — |
| opentelemetry-collector-fips | affected | chainguard | opentelemetry-collector-fips | — |
| opentelemetry-operator | affected | chainguard | opentelemetry-operator | — |
| opentelemetry-operator | affected | wolfi | opentelemetry-operator | — |
| opentelemetry-operator-fips | affected | chainguard | opentelemetry-operator-fips | — |
| opentofu-1.6 | affected | chainguard | opentofu-1.6 | — |
| opentofu-1.7 | affected | chainguard | opentofu-1.7 | — |
| opentofu-1.7 | affected | wolfi | opentofu-1.7 | — |
| opentofu-1.8 | affected | chainguard | opentofu-1.8 | — |
| opentofu-1.8 | affected | wolfi | opentofu-1.8 | — |
| opentofu-1.9 | affected | wolfi | opentofu-1.9 | — |
| opentofu-1.9 | affected | chainguard | opentofu-1.9 | — |
| opentofu-fips-1.6 | affected | chainguard | opentofu-fips-1.6 | — |
| opentofu-fips-1.7 | affected | chainguard | opentofu-fips-1.7 | — |
| opentofu-fips-1.8 | affected | chainguard | opentofu-fips-1.8 | — |
| opentofu-fips-1.9 | affected | chainguard | opentofu-fips-1.9 | — |
| op-geth | affected | wolfi | op-geth | — |
| op-geth | affected | chainguard | op-geth | — |
| osv-scanner | affected | wolfi | osv-scanner | — |
| osv-scanner | affected | chainguard | osv-scanner | — |
| otel-cli | affected | chainguard | otel-cli | — |
| otel-cli | affected | wolfi | otel-cli | — |
| packer-fips | affected | chainguard | packer-fips | — |
| pluto | affected | chainguard | pluto | — |
| pluto | affected | wolfi | pluto | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| portieris | affected | chainguard | portieris | — |
| portieris | affected | wolfi | portieris | — |
| portieris-fips | affected | chainguard | portieris-fips | — |
| postgres-operator | affected | wolfi | postgres-operator | — |
| postgres-operator | affected | chainguard | postgres-operator | — |
| postgres-operator-fips | affected | chainguard | postgres-operator-fips | — |
| prometheus-2.51 | affected | wolfi | prometheus-2.51 | — |
| prometheus-2.51 | affected | chainguard | prometheus-2.51 | — |
| prometheus-2.53 | affected | chainguard | prometheus-2.53 | — |
| prometheus-2.53 | affected | wolfi | prometheus-2.53 | — |
| prometheus-2.54 | affected | chainguard | prometheus-2.54 | — |
| prometheus-2.54 | affected | wolfi | prometheus-2.54 | — |
| prometheus-2.55 | affected | wolfi | prometheus-2.55 | — |
| prometheus-2.55 | affected | chainguard | prometheus-2.55 | — |
| prometheus-3.0 | affected | wolfi | prometheus-3.0 | — |
| prometheus-3.0 | affected | chainguard | prometheus-3.0 | — |
| prometheus-3.1 | affected | chainguard | prometheus-3.1 | — |
| prometheus-3.1 | affected | wolfi | prometheus-3.1 | — |
| prometheus-3.2 | affected | wolfi | prometheus-3.2 | — |
| prometheus-3.2 | affected | chainguard | prometheus-3.2 | — |
| prometheus-3.3 | affected | chainguard | prometheus-3.3 | — |
| prometheus-3.3 | affected | wolfi | prometheus-3.3 | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-bind-exporter | affected | wolfi | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | wolfi | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter-fips | affected | chainguard | prometheus-blackbox-exporter-fips | — |
| prometheus-elasticsearch-exporter | affected | wolfi | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-fips-2.53 | affected | chainguard | prometheus-fips-2.53 | — |
| prometheus-fips-2.54 | affected | chainguard | prometheus-fips-2.54 | — |
| prometheus-fips-2.55 | affected | chainguard | prometheus-fips-2.55 | — |
| prometheus-fips-3.0 | affected | chainguard | prometheus-fips-3.0 | — |
| prometheus-fips-3.1 | affected | chainguard | prometheus-fips-3.1 | — |
| prometheus-fips-3.2 | affected | chainguard | prometheus-fips-3.2 | — |
| prometheus-fips-3.3 | affected | chainguard | prometheus-fips-3.3 | — |
| prometheus-mongodb-exporter | affected | wolfi | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-mysqld-exporter | affected | wolfi | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter | affected | wolfi | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-podman-exporter | affected | chainguard | prometheus-podman-exporter | — |
| prometheus-podman-exporter | affected | wolfi | prometheus-podman-exporter | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter | affected | wolfi | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-stackdriver-exporter | affected | wolfi | prometheus-stackdriver-exporter | — |
| prometheus-stackdriver-exporter | affected | chainguard | prometheus-stackdriver-exporter | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter | affected | wolfi | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| promxy | affected | chainguard | promxy | — |
| promxy | affected | wolfi | promxy | — |
| promxy-fips | affected | chainguard | promxy-fips | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-language-dotnet | affected | wolfi | pulumi-language-dotnet | — |
| pulumi-language-dotnet | affected | chainguard | pulumi-language-dotnet | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator-fips | affected | chainguard | rabbitmq-cluster-operator-fips | — |
| rabbitmq-messaging-topology-operator | affected | chainguard | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator | affected | wolfi | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator-fips | affected | chainguard | rabbitmq-messaging-topology-operator-fips | — |
| rancher-2.8 | affected | wolfi | rancher-2.8 | — |
| rancher-2.8 | affected | chainguard | rancher-2.8 | — |
| rancher-agent-2.10 | affected | wolfi | rancher-agent-2.10 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.8 | affected | chainguard | rancher-agent-2.8 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-agent-2.9 | affected | wolfi | rancher-agent-2.9 | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.5 | affected | wolfi | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-fips-0.4 | affected | chainguard | rancher-webhook-fips-0.4 | — |
| rclone | affected | wolfi | rclone | — |
| rclone | affected | chainguard | rclone | — |
| rclone-fips | affected | chainguard | rclone-fips | — |
| redis-operator | affected | wolfi | redis-operator | — |
| redis-operator | affected | chainguard | redis-operator | — |
| redis-operator-fips | affected | chainguard | redis-operator-fips | — |
| redpanda-data-console | affected | chainguard | redpanda-data-console | — |
| rekor | affected | chainguard | rekor | — |
| rekor | affected | wolfi | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| request-1279 | affected | chainguard | request-1279 | — |
| request-1279-1-14 | affected | chainguard | request-1279-1-14 | — |
| restic | affected | chainguard | restic | — |
| restic | affected | wolfi | restic | — |
| restic-fips | affected | chainguard | restic-fips | — |
| rke2-runtime-1.32 | affected | chainguard | rke2-runtime-1.32 | — |
| rook | affected | wolfi | rook | — |
| rook | affected | chainguard | rook | — |
| rootlesskit | affected | wolfi | rootlesskit | — |
| rootlesskit | affected | chainguard | rootlesskit | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| runc-fips | affected | chainguard | runc-fips | — |
| scanner-test-golang-vulnerability-unfixed | affected | chainguard | scanner-test-golang-vulnerability-unfixed | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| seaweedfs | affected | wolfi | seaweedfs | — |
| seaweedfs | affected | chainguard | seaweedfs | — |
| secrets-store-csi-driver | affected | wolfi | secrets-store-csi-driver | — |
| secrets-store-csi-driver | affected | chainguard | secrets-store-csi-driver | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws-fips | affected | chainguard | secrets-store-csi-driver-provider-aws-fips | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure-fips | affected | chainguard | secrets-store-csi-driver-provider-azure-fips | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp-fips | affected | chainguard | secrets-store-csi-driver-provider-gcp-fips | — |
| sftpgo | affected | chainguard | sftpgo | — |
| sftpgo | affected | wolfi | sftpgo | — |
| sftpgo-plugin-auth | affected | wolfi | sftpgo-plugin-auth | — |
| sftpgo-plugin-auth | affected | chainguard | sftpgo-plugin-auth | — |
| sftpgo-plugin-eventsearch | affected | chainguard | sftpgo-plugin-eventsearch | — |
| sftpgo-plugin-eventsearch | affected | wolfi | sftpgo-plugin-eventsearch | — |
| sftpgo-plugin-eventstore | affected | wolfi | sftpgo-plugin-eventstore | — |
| sftpgo-plugin-eventstore | affected | chainguard | sftpgo-plugin-eventstore | — |
| sftpgo-plugin-geoipfilter | affected | wolfi | sftpgo-plugin-geoipfilter | — |
| sftpgo-plugin-geoipfilter | affected | chainguard | sftpgo-plugin-geoipfilter | — |
| sftpgo-plugin-kms | affected | wolfi | sftpgo-plugin-kms | — |
| sftpgo-plugin-kms | affected | chainguard | sftpgo-plugin-kms | — |
| sftpgo-plugin-pubsub | affected | wolfi | sftpgo-plugin-pubsub | — |
| sftpgo-plugin-pubsub | affected | chainguard | sftpgo-plugin-pubsub | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| skopeo | affected | chainguard | skopeo | — |
| skopeo | affected | wolfi | skopeo | — |
| skopeo-fips | affected | chainguard | skopeo-fips | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| snyk-cli | affected | wolfi | snyk-cli | — |
| snyk-cli | affected | chainguard | snyk-cli | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sops | affected | wolfi | sops | — |
| sops | affected | chainguard | sops | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator-fips | affected | chainguard | spark-operator-fips | — |
| spegel | affected | chainguard | spegel | — |
| spegel | affected | wolfi | spegel | — |
| spicedb | affected | wolfi | spicedb | — |
| spicedb | affected | chainguard | spicedb | — |
| spiffe-helper | affected | chainguard | spiffe-helper | — |
| spiffe-helper | affected | wolfi | spiffe-helper | — |
| spiffe-helper-fips | affected | chainguard | spiffe-helper-fips | — |
| spire-controller-manager | affected | chainguard | spire-controller-manager | — |
| spire-controller-manager | affected | wolfi | spire-controller-manager | — |
| spire-controller-manager-fips | affected | chainguard | spire-controller-manager-fips | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server | affected | chainguard | spire-server | — |
| splunk-otel-collector | affected | chainguard | splunk-otel-collector | — |
| splunk-otel-collector | affected | wolfi | splunk-otel-collector | — |
| splunk-otel-collector-fips | affected | chainguard | splunk-otel-collector-fips | — |
| spqr | affected | wolfi | spqr | — |
| spqr | affected | chainguard | spqr | — |
| sql_exporter | affected | wolfi | sql_exporter | — |
| sql_exporter | affected | chainguard | sql_exporter | — |
| sql_exporter-fips | affected | chainguard | sql_exporter-fips | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| src-fingerprint-fips | affected | chainguard | src-fingerprint-fips | — |
| sriov-network-device-plugin | affected | chainguard | sriov-network-device-plugin | — |
| sriov-network-device-plugin | affected | wolfi | sriov-network-device-plugin | — |
| sriov-network-device-plugin-fips | affected | chainguard | sriov-network-device-plugin-fips | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| stakater-reloader-fips | affected | chainguard | stakater-reloader-fips | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca-fips | affected | chainguard | step-ca-fips | — |
| step-fips | affected | chainguard | step-fips | — |
| step-issuer | affected | wolfi | step-issuer | — |
| step-issuer | affected | chainguard | step-issuer | — |
| step-issuer-fips | affected | chainguard | step-issuer-fips | — |
| step-kms-plugin | affected | chainguard | step-kms-plugin | — |
| step-kms-plugin | affected | wolfi | step-kms-plugin | — |
| step-kms-plugin-fips | affected | chainguard | step-kms-plugin-fips | — |
| stern | affected | chainguard | stern | — |
| stern | affected | wolfi | stern | — |
| syft | affected | chainguard | syft | — |
| syft | affected | wolfi | syft | — |
| syft-fips | affected | chainguard | syft-fips | — |
| tailscale | affected | chainguard | tailscale | — |
| tailscale | affected | wolfi | tailscale | — |
| task | affected | chainguard | task | — |
| task | affected | wolfi | task | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains-fips | affected | chainguard | tekton-chains-fips | — |
| tekton-pipelines | affected | chainguard | tekton-pipelines | — |
| tekton-pipelines | affected | wolfi | tekton-pipelines | — |
| telegraf-1.31 | affected | wolfi | telegraf-1.31 | — |
| telegraf-1.31 | affected | chainguard | telegraf-1.31 | — |
| telegraf-1.32 | affected | wolfi | telegraf-1.32 | — |
| telegraf-1.32 | affected | chainguard | telegraf-1.32 | — |
| telegraf-1.33 | affected | chainguard | telegraf-1.33 | — |
| telegraf-1.33 | affected | wolfi | telegraf-1.33 | — |
| telegraf-1.34 | affected | wolfi | telegraf-1.34 | — |
| telegraf-1.34 | affected | chainguard | telegraf-1.34 | — |
| teleport | affected | chainguard | teleport | — |
| teleport | affected | wolfi | teleport | — |
| tempo | affected | chainguard | tempo | — |
| tempo | affected | wolfi | tempo | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | chainguard | terraform | — |
| terraform | affected | wolfi | terraform | — |
| terraform-1.10 | affected | chainguard | terraform-1.10 | — |
| terraform-1.11 | affected | chainguard | terraform-1.11 | — |
| terraform-1.7 | affected | chainguard | terraform-1.7 | — |
| terraform-1.8 | affected | chainguard | terraform-1.8 | — |
| terraform-1.9 | affected | chainguard | terraform-1.9 | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-fips-1.10 | affected | chainguard | terraform-fips-1.10 | — |
| terraform-fips-1.11 | affected | chainguard | terraform-fips-1.11 | — |
| terraform-fips-1.9 | affected | chainguard | terraform-fips-1.9 | — |
| terraform-provider-azapi | affected | wolfi | terraform-provider-azapi | — |
| terraform-provider-azapi | affected | chainguard | terraform-provider-azapi | — |
| terraform-provider-azapi-fips | affected | chainguard | terraform-provider-azapi-fips | — |
| terraform-provider-azuread | affected | chainguard | terraform-provider-azuread | — |
| terraform-provider-azuread | affected | wolfi | terraform-provider-azuread | — |
| terraform-provider-azuread-fips | affected | chainguard | terraform-provider-azuread-fips | — |
| terraform-provider-azurerm | affected | chainguard | terraform-provider-azurerm | — |
| terraform-provider-azurerm | affected | wolfi | terraform-provider-azurerm | — |
| terraform-provider-google | affected | wolfi | terraform-provider-google | — |
| terraform-provider-google | affected | chainguard | terraform-provider-google | — |
| terraform-provider-grafana | affected | chainguard | terraform-provider-grafana | — |
| terraform-provider-grafana | affected | wolfi | terraform-provider-grafana | — |
| terraform-provider-grafana-fips | affected | chainguard | terraform-provider-grafana-fips | — |
| terraform-provider-kubernetes | affected | wolfi | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes | affected | chainguard | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes-fips | affected | chainguard | terraform-provider-kubernetes-fips | — |
| terraform-provider-pagerduty | affected | chainguard | terraform-provider-pagerduty | — |
| terraform-provider-pagerduty | affected | wolfi | terraform-provider-pagerduty | — |
| terraform-provider-pagerduty-fips | affected | chainguard | terraform-provider-pagerduty-fips | — |
| terraform-provider-random | affected | chainguard | terraform-provider-random | — |
| terraform-provider-random | affected | wolfi | terraform-provider-random | — |
| terraform-provider-random-fips | affected | chainguard | terraform-provider-random-fips | — |
| terraform-provider-sendgrid | affected | wolfi | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid | affected | chainguard | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid-fips | affected | chainguard | terraform-provider-sendgrid-fips | — |
| terraform-provider-time | affected | wolfi | terraform-provider-time | — |
| terraform-provider-time | affected | chainguard | terraform-provider-time | — |
| terraform-provider-time-fips | affected | chainguard | terraform-provider-time-fips | — |
| terraform-provider-tls | affected | chainguard | terraform-provider-tls | — |
| terraform-provider-tls | affected | wolfi | terraform-provider-tls | — |
| terraform-provider-tls-fips | affected | chainguard | terraform-provider-tls-fips | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| tfsec | affected | chainguard | tfsec | — |
| tfsec | affected | wolfi | tfsec | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-fips | affected | chainguard | thanos-fips | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator-fips | affected | chainguard | thanos-operator-fips | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.30 | affected | wolfi | tigera-operator-1.30 | — |
| tigera-operator-1.30 | affected | chainguard | tigera-operator-1.30 | — |
| tigera-operator-1.31 | affected | wolfi | tigera-operator-1.31 | — |
| tigera-operator-1.31 | affected | chainguard | tigera-operator-1.31 | — |
| tigera-operator-1.32 | affected | chainguard | tigera-operator-1.32 | — |
| tigera-operator-1.32 | affected | wolfi | tigera-operator-1.32 | — |
| tigera-operator-1.33 | affected | chainguard | tigera-operator-1.33 | — |
| tigera-operator-1.33 | affected | wolfi | tigera-operator-1.33 | — |
| tigera-operator-1.34 | affected | chainguard | tigera-operator-1.34 | — |
| tigera-operator-1.34 | affected | wolfi | tigera-operator-1.34 | — |
| tigera-operator-1.35 | affected | wolfi | tigera-operator-1.35 | — |
| tigera-operator-1.35 | affected | chainguard | tigera-operator-1.35 | — |
| tigera-operator-1.36 | affected | wolfi | tigera-operator-1.36 | — |
| tigera-operator-1.36 | affected | chainguard | tigera-operator-1.36 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| tigera-operator-fips-1.30 | affected | chainguard | tigera-operator-fips-1.30 | — |
| tigera-operator-fips-1.31 | affected | chainguard | tigera-operator-fips-1.31 | — |
| tigera-operator-fips-1.32 | affected | chainguard | tigera-operator-fips-1.32 | — |
| tigera-operator-fips-1.33 | affected | chainguard | tigera-operator-fips-1.33 | — |
| tigera-operator-fips-1.34 | affected | chainguard | tigera-operator-fips-1.34 | — |
| tigera-operator-fips-1.35 | affected | chainguard | tigera-operator-fips-1.35 | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| tkn | affected | chainguard | tkn | — |
| tkn | affected | wolfi | tkn | — |
| tkn-fips | affected | chainguard | tkn-fips | — |
| traefik-2.11 | affected | chainguard | traefik-2.11 | — |
| traefik-3.2 | affected | wolfi | traefik-3.2 | — |
| traefik-3.2 | affected | chainguard | traefik-3.2 | — |
| traefik-3.3 | affected | chainguard | traefik-3.3 | — |
| traefik-3.3 | affected | wolfi | traefik-3.3 | — |
| traefik-fips-2.11 | affected | chainguard | traefik-fips-2.11 | — |
| traefik-fips-3.2 | affected | chainguard | traefik-fips-3.2 | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| trivy | affected | wolfi | trivy | — |
| trivy | affected | chainguard | trivy | — |
| trivy-fips | affected | chainguard | trivy-fips | — |
| trufflehog-fips | affected | chainguard | trufflehog-fips | — |
| trust-manager | affected | chainguard | trust-manager | — |
| trust-manager | affected | wolfi | trust-manager | — |
| trust-manager-fips | affected | chainguard | trust-manager-fips | — |
| undock | affected | wolfi | undock | — |
| undock | affected | chainguard | undock | — |
| vault-1.16 | affected | chainguard | vault-1.16 | — |
| vault-1.17 | affected | chainguard | vault-1.17 | — |
| vault-1.18 | affected | chainguard | vault-1.18 | — |
| vault-1.19 | affected | chainguard | vault-1.19 | — |
| vault-benchmark | affected | wolfi | vault-benchmark | — |
| vault-benchmark | affected | chainguard | vault-benchmark | — |
| vault-csi-provider | affected | wolfi | vault-csi-provider | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-fips-1.17 | affected | chainguard | vault-fips-1.17 | — |
| vault-fips-1.18 | affected | chainguard | vault-fips-1.18 | — |
| vault-fips-1.19 | affected | chainguard | vault-fips-1.19 | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| vault-secrets-operator | affected | chainguard | vault-secrets-operator | — |
| vcluster | affected | wolfi | vcluster | — |
| vcluster | affected | chainguard | vcluster | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| velero-fips | affected | chainguard | velero-fips | — |
| velero-plugin-for-aws | affected | wolfi | velero-plugin-for-aws | — |
| velero-plugin-for-aws | affected | chainguard | velero-plugin-for-aws | — |
| velero-plugin-for-aws-fips | affected | chainguard | velero-plugin-for-aws-fips | — |
| velero-plugin-for-csi | affected | wolfi | velero-plugin-for-csi | — |
| velero-plugin-for-csi | affected | chainguard | velero-plugin-for-csi | — |
| velero-plugin-for-csi-fips | affected | chainguard | velero-plugin-for-csi-fips | — |
| velero-plugin-for-microsoft-azure | affected | chainguard | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure | affected | wolfi | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure-fips | affected | chainguard | velero-plugin-for-microsoft-azure-fips | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler-fips | affected | chainguard | vertical-pod-autoscaler-fips | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| victoriametrics | affected | wolfi | victoriametrics | — |
| victoriametrics | affected | chainguard | victoriametrics | — |
| victoriametrics-cluster | affected | chainguard | victoriametrics-cluster | — |
| victoriametrics-cluster | affected | wolfi | victoriametrics-cluster | — |
| victoriametrics-cluster-fips | affected | chainguard | victoriametrics-cluster-fips | — |
| victoriametrics-fips | affected | chainguard | victoriametrics-fips | — |
| victoriametrics-operator-fips | affected | chainguard | victoriametrics-operator-fips | — |
| vitess-18.0 | affected | chainguard | vitess-18.0 | — |
| vitess-20.0 | affected | wolfi | vitess-20.0 | — |
| vitess-20.0 | affected | chainguard | vitess-20.0 | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| wal-g | affected | chainguard | wal-g | — |
| wal-g | affected | wolfi | wal-g | — |
| wave | affected | chainguard | wave | — |
| wave | affected | wolfi | wave | — |
| wave-fips | affected | chainguard | wave-fips | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| weaviate | affected | chainguard | weaviate | — |
| weaviate | affected | wolfi | weaviate | — |
| whereabouts | affected | wolfi | whereabouts | — |
| whereabouts | affected | chainguard | whereabouts | — |
| whereabouts-fips | affected | chainguard | whereabouts-fips | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| wuzz | affected | wolfi | wuzz | — |
| wuzz | affected | chainguard | wuzz | — |
| x509-certificate-exporter | affected | wolfi | x509-certificate-exporter | — |
| x509-certificate-exporter | affected | chainguard | x509-certificate-exporter | — |
| x509-certificate-exporter-fips | affected | chainguard | x509-certificate-exporter-fips | — |
| xeol | affected | wolfi | xeol | — |
| xeol | affected | chainguard | xeol | — |
| xeol-fips | affected | chainguard | xeol-fips | — |
| x/net | affected | golang.org | golang.org/x/net | — |
| x/net | affected | golang.org | — | — |
| yq | affected | chainguard | yq | — |
| yq | affected | wolfi | yq | — |
| yq-fips | affected | chainguard | yq-fips | — |
| yunikorn-k8shim | affected | wolfi | yunikorn-k8shim | — |
| yunikorn-k8shim | affected | chainguard | yunikorn-k8shim | — |
| yunikorn-k8shim-fips | affected | chainguard | yunikorn-k8shim-fips | — |
| zarf | affected | wolfi | zarf | — |
| zarf | affected | chainguard | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
CVE-2025-22870 affecting package golang for versions less than 1.22.7-4
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2025-22870 affecting package golang for versions less than 1.18.8-8
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2025-22870 affecting package golang 1.25.7-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:3 | golang | — |
DEBIAN-CVE-2025-22870
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-1.15 | affected | Debian:11 | golang-1.15 | — |
| golang-1.19 | affected | Debian:12 | golang-1.19 | — |
| golang-1.24 | affected | Debian:13 | golang-1.24 | — |
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | wolfi | aactl | — |
| aactl | affected | chainguard | aactl | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller-fips | affected | chainguard | actions-runner-controller-fips | — |
| addon-resizer | affected | wolfi | addon-resizer | — |
| addon-resizer | affected | chainguard | addon-resizer | — |
| addon-resizer-fips | affected | chainguard | addon-resizer-fips | — |
| agentbeat-fips | affected | chainguard | agentbeat-fips | — |
| amazon-cloudwatch-agent | affected | wolfi | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent | affected | chainguard | amazon-cloudwatch-agent | — |
| amazon-cloudwatch-agent-fips | affected | chainguard | amazon-cloudwatch-agent-fips | — |
| amazon-cloudwatch-agent-operator | affected | chainguard | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator | affected | wolfi | amazon-cloudwatch-agent-operator | — |
| amazon-cloudwatch-agent-operator-fips | affected | chainguard | amazon-cloudwatch-agent-operator-fips | — |
| amazon-eks-ami | affected | chainguard | amazon-eks-ami | — |
| amazon-k8s-cni | affected | wolfi | amazon-k8s-cni | — |
| amazon-k8s-cni | affected | chainguard | amazon-k8s-cni | — |
| amazon-k8s-cni-fips | affected | chainguard | amazon-k8s-cni-fips | — |
| amazon-ssm-agent | affected | chainguard | amazon-ssm-agent | — |
| ansible-operator | affected | chainguard | ansible-operator | — |
| apache-beam-java-sdk | affected | chainguard | apache-beam-java-sdk | — |
| apache-beam-python-3.11-sdk | affected | chainguard | apache-beam-python-3.11-sdk | — |
| apko | affected | chainguard | apko | — |
| apko | affected | wolfi | apko | — |
| argo-cd-2.11 | affected | chainguard | argo-cd-2.11 | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argo-events | affected | chainguard | argo-events | — |
| argo-events | affected | wolfi | argo-events | — |
| argo-events-fips | affected | chainguard | argo-events-fips | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis | affected | wolfi | atlantis | — |
| atlantis | affected | chainguard | atlantis | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| authservice-fips | affected | chainguard | authservice-fips | — |
| aws-application-networking-k8s | affected | wolfi | aws-application-networking-k8s | — |
| aws-application-networking-k8s | affected | chainguard | aws-application-networking-k8s | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-iam-authenticator | affected | chainguard | aws-iam-authenticator | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| aws-network-policy-agent | affected | chainguard | aws-network-policy-agent | — |
| aws-network-policy-agent | affected | wolfi | aws-network-policy-agent | — |
| aws-network-policy-agent-fips | affected | chainguard | aws-network-policy-agent-fips | — |
| aws-privateca-issuer-fips | affected | chainguard | aws-privateca-issuer-fips | — |
| aws-s3-controller | affected | wolfi | aws-s3-controller | — |
| aws-s3-controller | affected | chainguard | aws-s3-controller | — |
| azcopy | affected | chainguard | azcopy | — |
| azcopy | affected | wolfi | azcopy | — |
| azcopy-fips | affected | chainguard | azcopy-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-1.30 | affected | chainguard | azuredisk-csi-1.30 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| azuredisk-csi-fips-1.30 | affected | chainguard | azuredisk-csi-fips-1.30 | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| beats-7 | affected | chainguard | beats-7 | — |
| beats-fips-7 | affected | chainguard | beats-fips-7 | — |
| bom | affected | chainguard | bom | — |
| bom | affected | wolfi | bom | — |
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildah | affected | chainguard | buildah | — |
| buildah | affected | wolfi | buildah | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd-fips | affected | chainguard | buildkitd-fips | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor-fips | affected | chainguard | cadvisor-fips | — |
| calico-3.29 | affected | chainguard | calico-3.29 | — |
| calico-fips-3.29 | affected | chainguard | calico-fips-3.29 | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| certificate-transparency | affected | chainguard | certificate-transparency | — |
| certificate-transparency | affected | wolfi | certificate-transparency | — |
| certificate-transparency-fips | affected | chainguard | certificate-transparency-fips | — |
| cert-manager-cmctl | affected | wolfi | cert-manager-cmctl | — |
| cert-manager-cmctl | affected | chainguard | cert-manager-cmctl | — |
| cert-manager-cmctl-fips | affected | chainguard | cert-manager-cmctl-fips | — |
| cert-manager-fips-1.17 | affected | chainguard | cert-manager-fips-1.17 | — |
| cert-manager-istio-csr | affected | wolfi | cert-manager-istio-csr | — |
| cert-manager-istio-csr | affected | chainguard | cert-manager-istio-csr | — |
| cert-manager-webhook-pdns | affected | wolfi | cert-manager-webhook-pdns | — |
| cert-manager-webhook-pdns | affected | chainguard | cert-manager-webhook-pdns | — |
| cert-manager-webhook-pdns-fips | affected | chainguard | cert-manager-webhook-pdns-fips | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl-fips | affected | chainguard | cfssl-fips | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum-fips | affected | chainguard | chartmuseum-fips | — |
| cilium-1.15 | affected | chainguard | cilium-1.15 | — |
| cilium-1.16 | affected | chainguard | cilium-1.16 | — |
| cilium-1.17 | affected | chainguard | cilium-1.17 | — |
| cilium-cli | affected | wolfi | cilium-cli | — |
| cilium-cli | affected | chainguard | cilium-cli | — |
| cilium-envoy-1.16 | affected | chainguard | cilium-envoy-1.16 | — |
| cilium-envoy-1.17 | affected | chainguard | cilium-envoy-1.17 | — |
| cilium-envoy-fips-1.15 | affected | chainguard | cilium-envoy-fips-1.15 | — |
| cilium-envoy-fips-1.16 | affected | chainguard | cilium-envoy-fips-1.16 | — |
| cilium-envoy-fips-1.17 | affected | chainguard | cilium-envoy-fips-1.17 | — |
| cilium-fips-1.15 | affected | chainguard | cilium-fips-1.15 | — |
| cilium-fips-1.16 | affected | chainguard | cilium-fips-1.16 | — |
| cilium-fips-1.17 | affected | chainguard | cilium-fips-1.17 | — |
| cinder-csi-plugin-fips | affected | chainguard | cinder-csi-plugin-fips | — |
| cloudflared | affected | wolfi | cloudflared | — |
| cloudflared | affected | chainguard | cloudflared | — |
| cloudnative-pg | affected | chainguard | cloudnative-pg | — |
| cloudnative-pg | affected | wolfi | cloudnative-pg | — |
| cloudnative-pg-fips | affected | chainguard | cloudnative-pg-fips | — |
| cloudprober | affected | wolfi | cloudprober | — |
| cloudprober | affected | chainguard | cloudprober | — |
| cloudprober-fips | affected | chainguard | cloudprober-fips | — |
| cloud-provider-aws-1.28 | affected | chainguard | cloud-provider-aws-1.28 | — |
| cloud-provider-aws-1.29 | affected | chainguard | cloud-provider-aws-1.29 | — |
| cloud-provider-aws-1.30 | affected | chainguard | cloud-provider-aws-1.30 | — |
| cloud-provider-aws-1.31 | affected | chainguard | cloud-provider-aws-1.31 | — |
| cloud-provider-aws-1.31 | affected | wolfi | cloud-provider-aws-1.31 | — |
| cloud-provider-aws-1.32 | affected | chainguard | cloud-provider-aws-1.32 | — |
| cloud-provider-aws-fips-1.28 | affected | chainguard | cloud-provider-aws-fips-1.28 | — |
| cloud-provider-aws-fips-1.29 | affected | chainguard | cloud-provider-aws-fips-1.29 | — |
| cloud-provider-aws-fips-1.30 | affected | chainguard | cloud-provider-aws-fips-1.30 | — |
| cloud-provider-aws-fips-1.31 | affected | chainguard | cloud-provider-aws-fips-1.31 | — |
| cloud-provider-aws-fips-1.32 | affected | chainguard | cloud-provider-aws-fips-1.32 | — |
| cloud-provider-azure-1.27 | affected | chainguard | cloud-provider-azure-1.27 | — |
| cloud-provider-azure-1.28 | affected | chainguard | cloud-provider-azure-1.28 | — |
| cloud-provider-azure-fips-1.27 | affected | chainguard | cloud-provider-azure-fips-1.27 | — |
| cloud-provider-azure-fips-1.28 | affected | chainguard | cloud-provider-azure-fips-1.28 | — |
| cloud-provider-gcp-cloud-controller-manager | affected | wolfi | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager | affected | chainguard | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager-fips | affected | chainguard | cloud-provider-gcp-cloud-controller-manager-fips | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-api-aws-controller | affected | chainguard | cluster-api-aws-controller | — |
| cluster-api-aws-controller | affected | wolfi | cluster-api-aws-controller | — |
| cluster-api-aws-controller-fips | affected | chainguard | cluster-api-aws-controller-fips | — |
| cluster-autoscaler-1.31 | affected | chainguard | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-fips-1.31 | affected | chainguard | cluster-autoscaler-fips-1.31 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler-fips | affected | chainguard | cluster-proportional-autoscaler-fips | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| conftest | affected | wolfi | conftest | — |
| conftest | affected | chainguard | conftest | — |
| conftest-fips | affected | chainguard | conftest-fips | — |
| consul-1.18 | affected | chainguard | consul-1.18 | — |
| consul-1.19 | affected | chainguard | consul-1.19 | — |
| consul-fips-1.19 | affected | chainguard | consul-fips-1.19 | — |
| consul-fips-1.20 | affected | chainguard | consul-fips-1.20 | — |
| consul-k8s-1.1 | affected | chainguard | consul-k8s-1.1 | — |
| consul-k8s-1.3 | affected | chainguard | consul-k8s-1.3 | — |
| consul-k8s-1.4 | affected | chainguard | consul-k8s-1.4 | — |
| consul-k8s-1.5 | affected | chainguard | consul-k8s-1.5 | — |
| consul-k8s-1.6 | affected | chainguard | consul-k8s-1.6 | — |
| consul-k8s-fips-1.1 | affected | chainguard | consul-k8s-fips-1.1 | — |
| consul-k8s-fips-1.3 | affected | chainguard | consul-k8s-fips-1.3 | — |
| consul-k8s-fips-1.5 | affected | chainguard | consul-k8s-fips-1.5 | — |
| consul-k8s-fips-1.6 | affected | chainguard | consul-k8s-fips-1.6 | — |
| containerd-1 | affected | wolfi | containerd-1 | — |
| containerd-1 | affected | chainguard | containerd-1 | — |
| containerd-2 | affected | chainguard | containerd-2 | — |
| containerd-2 | affected | wolfi | containerd-2 | — |
| containerd-fips | affected | chainguard | containerd-fips | — |
| contour-fips-1.30 | affected | chainguard | contour-fips-1.30 | — |
| controller-gen | affected | chainguard | controller-gen | — |
| controller-gen | affected | wolfi | controller-gen | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cosign | affected | chainguard | cosign | — |
| cosign | affected | wolfi | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| croc | affected | chainguard | croc | — |
| croc | affected | wolfi | croc | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane-provider-aws | affected | wolfi | crossplane-provider-aws | — |
| crossplane-provider-aws | affected | chainguard | crossplane-provider-aws | — |
| crossplane-provider-aws-cloudformation | affected | wolfi | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudformation | affected | chainguard | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudfront | affected | chainguard | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudfront | affected | wolfi | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudwatchlogs | affected | wolfi | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-cloudwatchlogs | affected | chainguard | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-dynamodb | affected | wolfi | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-dynamodb | affected | chainguard | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-ec2 | affected | chainguard | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-ec2 | affected | wolfi | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-eks | affected | wolfi | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-eks | affected | chainguard | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-elasticache | affected | wolfi | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-elasticache | affected | chainguard | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-firehose | affected | chainguard | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-firehose | affected | wolfi | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-iam | affected | chainguard | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-iam | affected | wolfi | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-kinesis | affected | chainguard | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kinesis | affected | wolfi | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kms | affected | wolfi | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-kms | affected | chainguard | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-lambda | affected | wolfi | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-lambda | affected | chainguard | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-memorydb | affected | wolfi | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-memorydb | affected | chainguard | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-rds | affected | wolfi | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-rds | affected | chainguard | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-route53 | affected | chainguard | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-route53 | affected | wolfi | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-s3 | affected | chainguard | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-s3 | affected | wolfi | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-sns | affected | wolfi | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sns | affected | chainguard | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sqs | affected | chainguard | crossplane-provider-aws-sqs | — |
| crossplane-provider-aws-sqs | affected | wolfi | crossplane-provider-aws-sqs | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure-authorization | affected | wolfi | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-authorization | affected | chainguard | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-managedidentity | affected | chainguard | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-managedidentity | affected | wolfi | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-sql | affected | wolfi | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-sql | affected | chainguard | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-storage | affected | wolfi | crossplane-provider-azure-storage | — |
| crossplane-provider-azure-storage | affected | chainguard | crossplane-provider-azure-storage | — |
| crossplane-provider-family-aws | affected | chainguard | crossplane-provider-family-aws | — |
| crossplane-provider-family-aws | affected | wolfi | crossplane-provider-family-aws | — |
| crossplane-provider-family-azure | affected | wolfi | crossplane-provider-family-azure | — |
| crossplane-provider-family-azure | affected | chainguard | crossplane-provider-family-azure | — |
| crossplane-provider-gcp | affected | chainguard | crossplane-provider-gcp | — |
| crossplane-provider-keycloak | affected | chainguard | crossplane-provider-keycloak | — |
| crossplane-provider-keycloak | affected | wolfi | crossplane-provider-keycloak | — |
| crossplane-provider-keycloak-fips | affected | chainguard | crossplane-provider-keycloak-fips | — |
| crossplane-provider-sql | affected | chainguard | crossplane-provider-sql | — |
| crossplane-provider-sql | affected | wolfi | crossplane-provider-sql | — |
| crossplane-provider-sql-fips | affected | chainguard | crossplane-provider-sql-fips | — |
| cue | affected | chainguard | cue | — |
| cue | affected | wolfi | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagdotdev | affected | chainguard | dagdotdev | — |
| dagdotdev | affected | wolfi | dagdotdev | — |
| dbmate | affected | chainguard | dbmate | — |
| dbmate | affected | wolfi | dbmate | — |
| dcgm-exporter | affected | chainguard | dcgm-exporter | — |
| dcgm-exporter-fips | affected | chainguard | dcgm-exporter-fips | — |
| descheduler | affected | chainguard | descheduler | — |
| descheduler | affected | wolfi | descheduler | — |
| descheduler-fips | affected | chainguard | descheduler-fips | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-fips | affected | chainguard | dex-fips | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | chainguard | dgraph | — |
| dgraph | affected | wolfi | dgraph | — |
| distribution | affected | wolfi | distribution | — |
| distribution | affected | chainguard | distribution | — |
| distribution-fips | affected | chainguard | distribution-fips | — |
| dive | affected | wolfi | dive | — |
| dive | affected | chainguard | dive | — |
| docker | affected | chainguard | docker | — |
| docker | affected | wolfi | docker | — |
| docker-cli-buildx | affected | wolfi | docker-cli-buildx | — |
| docker-cli-buildx | affected | chainguard | docker-cli-buildx | — |
| docker-cli-buildx-fips | affected | chainguard | docker-cli-buildx-fips | — |
| docker-compose | affected | chainguard | docker-compose | — |
| docker-compose | affected | wolfi | docker-compose | — |
| docker-compose-fips | affected | chainguard | docker-compose-fips | — |
| docker-fips | affected | chainguard | docker-fips | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eck-operator | affected | chainguard | eck-operator | — |
| eck-operator-fips | affected | chainguard | eck-operator-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| eks-distro-1.29 | affected | chainguard | eks-distro-1.29 | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-fips-1.29 | affected | chainguard | eks-distro-fips-1.29 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| envoy-gateway | affected | chainguard | envoy-gateway | — |
| envoy-gateway | affected | wolfi | envoy-gateway | — |
| envoy-gateway-fips | affected | chainguard | envoy-gateway-fips | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| etcd-fips-3.4 | affected | chainguard | etcd-fips-3.4 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| falco-exporter | affected | chainguard | falco-exporter | — |
| falco-exporter | affected | wolfi | falco-exporter | — |
| falco-exporter-fips | affected | chainguard | falco-exporter-fips | — |
| falcosidekick | affected | wolfi | falcosidekick | — |
| falcosidekick | affected | chainguard | falcosidekick | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| filebrowser | affected | wolfi | filebrowser | — |
| filebrowser | affected | chainguard | filebrowser | — |
| flannel | affected | chainguard | flannel | — |
| flannel | affected | wolfi | flannel | — |
| fluent-bit-plugin-loki | affected | chainguard | fluent-bit-plugin-loki | — |
| fluent-bit-plugin-loki | affected | wolfi | fluent-bit-plugin-loki | — |
| fluent-operator | affected | chainguard | fluent-operator | — |
| fluent-operator | affected | wolfi | fluent-operator | — |
| fluent-operator-fips | affected | chainguard | fluent-operator-fips | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-2.5 | affected | chainguard | flux-2.5 | — |
| flux-fips-2.4 | affected | chainguard | flux-fips-2.4 | — |
| flux-fips-2.5 | affected | chainguard | flux-fips-2.5 | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller-fips | affected | chainguard | flux-helm-controller-fips | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller-fips | affected | chainguard | flux-image-automation-controller-fips | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller-fips | affected | chainguard | flux-image-reflector-controller-fips | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-kustomize-controller-fips | affected | chainguard | flux-kustomize-controller-fips | — |
| flux-notification-controller | affected | chainguard | flux-notification-controller | — |
| flux-notification-controller | affected | wolfi | flux-notification-controller | — |
| flux-notification-controller-fips | affected | chainguard | flux-notification-controller-fips | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller-fips | affected | chainguard | flux-source-controller-fips | — |
| flyte | affected | wolfi | flyte | — |
| flyte | affected | chainguard | flyte | — |
| fq | affected | wolfi | fq | — |
| fq | affected | chainguard | fq | — |
| frp | affected | wolfi | frp | — |
| frp | affected | chainguard | frp | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gatus | affected | chainguard | gatus | — |
| gatus | affected | wolfi | gatus | — |
| gcp-compute-persistent-disk-csi-driver-1.12 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.12 | — |
| gcp-compute-persistent-disk-csi-driver-1.13 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.13 | — |
| gcp-compute-persistent-disk-csi-driver-1.14 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.14 | — |
| gcp-compute-persistent-disk-csi-driver-1.15 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.15 | — |
| gcp-compute-persistent-disk-csi-driver-1.16 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-1.16 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.12 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.12 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.13 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.13 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.14 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.14 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.15 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.15 | — |
| gcp-compute-persistent-disk-csi-driver-fips-1.16 | affected | chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.16 | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | wolfi | gh | — |
| gh | affected | chainguard | gh | — |
| git-lfs | affected | chainguard | git-lfs | — |
| git-lfs | affected | wolfi | git-lfs | — |
| git-lfs-fips | affected | chainguard | git-lfs-fips | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gitsign | affected | wolfi | gitsign | — |
| gitsign | affected | chainguard | gitsign | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| glab | affected | wolfi | glab | — |
| glab | affected | chainguard | glab | — |
| glow | affected | wolfi | glow | — |
| glow | affected | chainguard | glow | — |
| go-discover | affected | chainguard | go-discover | — |
| go-discover | affected | wolfi | go-discover | — |
| go-discover-fips | affected | chainguard | go-discover-fips | — |
| go-fips-1.24 | affected | chainguard | go-fips-1.24 | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-licenses | affected | wolfi | go-licenses | — |
| google-guest-agent | affected | chainguard | google-guest-agent | — |
| google-guest-agent-manager | affected | chainguard | google-guest-agent-manager | — |
| google-osconfig-agent | affected | chainguard | google-osconfig-agent | — |
| gptscript | affected | chainguard | gptscript | — |
| gptscript | affected | wolfi | gptscript | — |
| grafana-11.3 | affected | chainguard | grafana-11.3 | — |
| grafana-11.4 | affected | chainguard | grafana-11.4 | — |
| grafana-agent-operator | affected | wolfi | grafana-agent-operator | — |
| grafana-agent-operator | affected | chainguard | grafana-agent-operator | — |
| grafana-alloy | affected | wolfi | grafana-alloy | — |
| grafana-alloy | affected | chainguard | grafana-alloy | — |
| grafana-alloy-fips | affected | chainguard | grafana-alloy-fips | — |
| grafana-fips-11.4 | affected | chainguard | grafana-fips-11.4 | — |
| grafana-fips-11.5 | affected | chainguard | grafana-fips-11.5 | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grafana-rollout-operator | affected | wolfi | grafana-rollout-operator | — |
| grafana-rollout-operator | affected | chainguard | grafana-rollout-operator | — |
| grafana-rollout-operator-fips | affected | chainguard | grafana-rollout-operator-fips | — |
| grpc-health-probe | affected | wolfi | grpc-health-probe | — |
| grpc-health-probe | affected | chainguard | grpc-health-probe | — |
| grpc-health-probe-fips | affected | chainguard | grpc-health-probe-fips | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grpcurl | affected | wolfi | grpcurl | — |
| guac | affected | chainguard | guac | — |
| guac | affected | wolfi | guac | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| harbor-2.11 | affected | chainguard | harbor-2.11 | — |
| harbor-2.12 | affected | chainguard | harbor-2.12 | — |
| harbor-2.9 | affected | chainguard | harbor-2.9 | — |
| harbor-fips-2.11 | affected | chainguard | harbor-fips-2.11 | — |
| harbor-fips-2.12 | affected | chainguard | harbor-fips-2.12 | — |
| harbor-registry | affected | chainguard | harbor-registry | — |
| harbor-registry | affected | wolfi | harbor-registry | — |
| harbor-registry-fips | affected | chainguard | harbor-registry-fips | — |
| harbor-scanner-trivy | affected | chainguard | harbor-scanner-trivy | — |
| harbor-scanner-trivy | affected | wolfi | harbor-scanner-trivy | — |
| harbor-scanner-trivy-fips | affected | chainguard | harbor-scanner-trivy-fips | — |
| hcloud | affected | wolfi | hcloud | — |
| hcloud | affected | chainguard | hcloud | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | wolfi | helm-push | — |
| helm-push | affected | chainguard | helm-push | — |
| hey | affected | chainguard | hey | — |
| hey | affected | wolfi | hey | — |
| hubble | affected | chainguard | hubble | — |
| hubble | affected | wolfi | hubble | — |
| hubble-fips | affected | chainguard | hubble-fips | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| hugo | affected | wolfi | hugo | — |
| hugo | affected | chainguard | hugo | — |
| hugo-extended | affected | wolfi | hugo-extended | — |
| hugo-extended | affected | chainguard | hugo-extended | — |
| hugo-fips | affected | chainguard | hugo-fips | — |
| hydra | affected | chainguard | hydra | — |
| hydra | affected | wolfi | hydra | — |
| hydra-fips | affected | chainguard | hydra-fips | — |
| ingress-nginx-controller-1.12 | affected | chainguard | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-1.12 | affected | wolfi | ingress-nginx-controller-1.12 | — |
| ingress-nginx-controller-fips-1.12 | affected | chainguard | ingress-nginx-controller-fips-1.12 | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| istio-pilot-discovery-1.22 | affected | chainguard | istio-pilot-discovery-1.22 | — |
| jaeger-operator | affected | wolfi | jaeger-operator | — |
| jaeger-operator | affected | chainguard | jaeger-operator | — |
| jaeger-operator-fips | affected | chainguard | jaeger-operator-fips | — |
| jitsucom-bulker | affected | chainguard | jitsucom-bulker | — |
| jitsucom-bulker | affected | wolfi | jitsucom-bulker | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k3s-1.32 | affected | wolfi | k3s-1.32 | — |
| k3s-1.32 | affected | chainguard | k3s-1.32 | — |
| k6 | affected | wolfi | k6 | — |
| k6 | affected | chainguard | k6 | — |
| k8s-device-plugin | affected | wolfi | k8s-device-plugin | — |
| k8s-device-plugin | affected | chainguard | k8s-device-plugin | — |
| k8s-device-plugin-fips | affected | chainguard | k8s-device-plugin-fips | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| k9s | affected | chainguard | k9s | — |
| k9s | affected | wolfi | k9s | — |
| kaf | affected | chainguard | kaf | — |
| kaf | affected | wolfi | kaf | — |
| kafka_exporter | affected | chainguard | kafka_exporter | — |
| kafka_exporter | affected | wolfi | kafka_exporter | — |
| kafka_exporter-fips | affected | chainguard | kafka_exporter-fips | — |
| kafka-proxy | affected | wolfi | kafka-proxy | — |
| kafka-proxy | affected | chainguard | kafka-proxy | — |
| kaniko | affected | chainguard | kaniko | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko-fips | affected | chainguard | kaniko-fips | — |
| kapp | affected | chainguard | kapp | — |
| kapp | affected | wolfi | kapp | — |
| kapp-controller | affected | chainguard | kapp-controller | — |
| kapp-controller | affected | wolfi | kapp-controller | — |
| kapp-controller-fips | affected | chainguard | kapp-controller-fips | — |
| kapp-fips | affected | chainguard | kapp-fips | — |
| kargo | affected | wolfi | kargo | — |
| kargo | affected | chainguard | kargo | — |
| karpenter-0.33 | affected | chainguard | karpenter-0.33 | — |
| karpenter-0.34 | affected | chainguard | karpenter-0.34 | — |
| karpenter-0.35 | affected | chainguard | karpenter-0.35 | — |
| karpenter-0.36 | affected | chainguard | karpenter-0.36 | — |
| karpenter-0.37 | affected | chainguard | karpenter-0.37 | — |
| karpenter-1.0 | affected | chainguard | karpenter-1.0 | — |
| karpenter-1.1 | affected | chainguard | karpenter-1.1 | — |
| karpenter-1.2 | affected | chainguard | karpenter-1.2 | — |
| karpenter-1.3 | affected | chainguard | karpenter-1.3 | — |
| karpenter-fips-0.33 | affected | chainguard | karpenter-fips-0.33 | — |
| karpenter-fips-0.34 | affected | chainguard | karpenter-fips-0.34 | — |
| karpenter-fips-0.35 | affected | chainguard | karpenter-fips-0.35 | — |
| karpenter-fips-0.36 | affected | chainguard | karpenter-fips-0.36 | — |
| karpenter-fips-0.37 | affected | chainguard | karpenter-fips-0.37 | — |
| karpenter-fips-1.0 | affected | chainguard | karpenter-fips-1.0 | — |
| karpenter-fips-1.1 | affected | chainguard | karpenter-fips-1.1 | — |
| karpenter-fips-1.2 | affected | chainguard | karpenter-fips-1.2 | — |
| kbld | affected | wolfi | kbld | — |
| kbld | affected | chainguard | kbld | — |
| kbld-fips | affected | chainguard | kbld-fips | — |
| keda-2.16 | affected | chainguard | keda-2.16 | — |
| kepler | affected | chainguard | kepler | — |
| kiali | affected | chainguard | kiali | — |
| kiali | affected | wolfi | kiali | — |
| kiali-fips | affected | chainguard | kiali-fips | — |
| kiam | affected | chainguard | kiam | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| knative-client | affected | chainguard | knative-client | — |
| knative-client | affected | wolfi | knative-client | — |
| knative-serving-1.17 | affected | chainguard | knative-serving-1.17 | — |
| ko | affected | wolfi | ko | — |
| ko | affected | chainguard | ko | — |
| ko-fips | affected | chainguard | ko-fips | — |
| kor | affected | wolfi | kor | — |
| kor | affected | chainguard | kor | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kserve | affected | chainguard | kserve | — |
| kserve | affected | wolfi | kserve | — |
| kserve-modelmesh-serving | affected | wolfi | kserve-modelmesh-serving | — |
| kserve-modelmesh-serving | affected | chainguard | kserve-modelmesh-serving | — |
| ksops | affected | wolfi | ksops | — |
| ksops | affected | chainguard | ksops | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench-fips | affected | chainguard | kube-bench-fips | — |
| kubeflow | affected | chainguard | kubeflow | — |
| kubeflow | affected | wolfi | kubeflow | — |
| kubeflow-fips | affected | chainguard | kubeflow-fips | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kube-fluentd-operator | affected | wolfi | kube-fluentd-operator | — |
| kube-fluentd-operator | affected | chainguard | kube-fluentd-operator | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-metrics-adapter | affected | chainguard | kube-metrics-adapter | — |
| kube-metrics-adapter | affected | wolfi | kube-metrics-adapter | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator-fips | affected | chainguard | kuberay-operator-fips | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kuberlr | affected | wolfi | kuberlr | — |
| kuberlr | affected | chainguard | kuberlr | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-1.30 | affected | wolfi | kubernetes-1.30 | — |
| kubernetes-1.30 | affected | chainguard | kubernetes-1.30 | — |
| kubernetes-1.31 | affected | chainguard | kubernetes-1.31 | — |
| kubernetes-1.31 | affected | wolfi | kubernetes-1.31 | — |
| kubernetes-1.32 | affected | wolfi | kubernetes-1.32 | — |
| kubernetes-1.32 | affected | chainguard | kubernetes-1.32 | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-csi-external-attacher | affected | wolfi | kubernetes-csi-external-attacher | — |
| kubernetes-csi-external-attacher | affected | chainguard | kubernetes-csi-external-attacher | — |
| kubernetes-csi-external-attacher-fips | affected | chainguard | kubernetes-csi-external-attacher-fips | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner-fips | affected | chainguard | kubernetes-csi-external-provisioner-fips | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-fips | affected | chainguard | kubernetes-csi-external-resizer-fips | — |
| kubernetes-csi-external-snapshotter-8.2 | affected | chainguard | kubernetes-csi-external-snapshotter-8.2 | — |
| kubernetes-csi-external-snapshotter-fips-8.2 | affected | chainguard | kubernetes-csi-external-snapshotter-fips-8.2 | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-dashboard-api | affected | chainguard | kubernetes-dashboard-api | — |
| kubernetes-dashboard-api | affected | wolfi | kubernetes-dashboard-api | — |
| kubernetes-dashboard-auth | affected | wolfi | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth | affected | chainguard | kubernetes-dashboard-auth | — |
| kubernetes-dashboard-auth-fips | affected | chainguard | kubernetes-dashboard-auth-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dashboard-web | affected | wolfi | kubernetes-dashboard-web | — |
| kubernetes-dashboard-web | affected | chainguard | kubernetes-dashboard-web | — |
| kubernetes-dashboard-web-fips | affected | chainguard | kubernetes-dashboard-web-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache-fips | affected | chainguard | kubernetes-dns-node-cache-fips | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-event-exporter-fips | affected | chainguard | kubernetes-event-exporter-fips | — |
| kubernetes-fips-1.31 | affected | chainguard | kubernetes-fips-1.31 | — |
| kubernetes-fips-1.32 | affected | chainguard | kubernetes-fips-1.32 | — |
| kubescape | affected | chainguard | kubescape | — |
| kubescape | affected | wolfi | kubescape | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics-2.6 | affected | chainguard | kube-state-metrics-2.6 | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kube-vip | affected | wolfi | kube-vip | — |
| kube-vip | affected | chainguard | kube-vip | — |
| kube-vip-fips | affected | chainguard | kube-vip-fips | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kuma-2.7 | affected | chainguard | kuma-2.7 | — |
| kuma-2.9 | affected | chainguard | kuma-2.9 | — |
| kwok | affected | wolfi | kwok | — |
| kwok | affected | chainguard | kwok | — |
| kyverno-1.13 | affected | chainguard | kyverno-1.13 | — |
| kyverno-fips-1.13 | affected | chainguard | kyverno-fips-1.13 | — |
| kyverno-notation-aws | affected | chainguard | kyverno-notation-aws | — |
| kyverno-notation-aws | affected | wolfi | kyverno-notation-aws | — |
| kyverno-notation-aws-fips | affected | chainguard | kyverno-notation-aws-fips | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter-fips | affected | chainguard | kyverno-policy-reporter-fips | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-fips | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-fips | — |
| kyverno-policy-reporter-ui-fips | affected | chainguard | kyverno-policy-reporter-ui-fips | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| litestream | affected | chainguard | litestream | — |
| litestream | affected | wolfi | litestream | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| local-path-provisioner-fips | affected | chainguard | local-path-provisioner-fips | — |
| local-static-provisioner | affected | wolfi | local-static-provisioner | — |
| local-static-provisioner | affected | chainguard | local-static-provisioner | — |
| local-static-provisioner-fips | affected | chainguard | local-static-provisioner-fips | — |
| loki-3.4 | affected | chainguard | loki-3.4 | — |
| loki-fips-3.4 | affected | chainguard | loki-fips-3.4 | — |
| longhorn-share-manager-1.8 | affected | chainguard | longhorn-share-manager-1.8 | — |
| longhorn-share-manager-fips-1.8 | affected | chainguard | longhorn-share-manager-fips-1.8 | — |
| lvm-driver | affected | chainguard | lvm-driver | — |
| lvm-driver | affected | wolfi | lvm-driver | — |
| malcontent | affected | chainguard | malcontent | — |
| malcontent | affected | wolfi | malcontent | — |
| mattmoor-chainit | affected | chainguard | mattmoor-chainit | — |
| melange | affected | chainguard | melange | — |
| melange | affected | wolfi | melange | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter-fips | affected | chainguard | memcached-exporter-fips | — |
| metacontroller | affected | wolfi | metacontroller | — |
| metacontroller | affected | chainguard | metacontroller | — |
| metallb | affected | chainguard | metallb | — |
| metallb | affected | wolfi | metallb | — |
| metallb-fips | affected | chainguard | metallb-fips | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| minio-operator | affected | chainguard | minio-operator | — |
| minio-operator | affected | wolfi | minio-operator | — |
| minio-operator-fips | affected | chainguard | minio-operator-fips | — |
| mkcert | affected | wolfi | mkcert | — |
| mkcert | affected | chainguard | mkcert | — |
| mods | affected | chainguard | mods | — |
| mods | affected | wolfi | mods | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| multus-cni | affected | wolfi | multus-cni | — |
| multus-cni | affected | chainguard | multus-cni | — |
| multus-cni-4.0.2 | affected | chainguard | multus-cni-4.0.2 | — |
| multus-cni-fips | affected | chainguard | multus-cni-fips | — |
| multus-cni-fips-4.0.2 | affected | chainguard | multus-cni-fips-4.0.2 | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nemo | affected | chainguard | nemo | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| net-kourier-fips-1.16 | affected | chainguard | net-kourier-fips-1.16 | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| neuvector-scanner | affected | wolfi | neuvector-scanner | — |
| neuvector-scanner | affected | chainguard | neuvector-scanner | — |
| neuvector-scanner-fips | affected | chainguard | neuvector-scanner-fips | — |
| neuvector-sigstore-interface | affected | chainguard | neuvector-sigstore-interface | — |
| neuvector-sigstore-interface | affected | wolfi | neuvector-sigstore-interface | — |
| neuvector-sigstore-interface-fips | affected | chainguard | neuvector-sigstore-interface-fips | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-nri-kube-events | affected | chainguard | newrelic-nri-kube-events | — |
| newrelic-nri-kube-events | affected | wolfi | newrelic-nri-kube-events | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nginx-prometheus-exporter | affected | chainguard | nginx-prometheus-exporter | — |
| nginx-prometheus-exporter | affected | wolfi | nginx-prometheus-exporter | — |
| nginx-prometheus-exporter-fips | affected | chainguard | nginx-prometheus-exporter-fips | — |
| node-feature-discovery-0.16 | affected | chainguard | node-feature-discovery-0.16 | — |
| node-feature-discovery-0.17 | affected | chainguard | node-feature-discovery-0.17 | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| node-problem-detector-fips-0.8 | affected | chainguard | node-problem-detector-fips-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kubernetes | affected | wolfi | nri-kubernetes | — |
| nri-kubernetes | affected | chainguard | nri-kubernetes | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nsc | affected | chainguard | nsc | — |
| nsc | affected | wolfi | nsc | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| nvidia-gpu-operator-validator-24.3 | affected | chainguard | nvidia-gpu-operator-validator-24.3 | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| octo-sts | affected | chainguard | octo-sts | — |
| octo-sts | affected | wolfi | octo-sts | — |
| ollama | affected | chainguard | ollama | — |
| ollama | affected | wolfi | ollama | — |
| opa | affected | wolfi | opa | — |
| opa | affected | chainguard | opa | — |
| opa-envoy | affected | wolfi | opa-envoy | — |
| opa-envoy | affected | chainguard | opa-envoy | — |
| opa-fips | affected | chainguard | opa-fips | — |
| opa-fips-envoy | affected | chainguard | opa-fips-envoy | — |
| openbao | affected | wolfi | openbao | — |
| openbao | affected | chainguard | openbao | — |
| openbao-fips | affected | chainguard | openbao-fips | — |
| openbao-k8s | affected | wolfi | openbao-k8s | — |
| openbao-k8s | affected | chainguard | openbao-k8s | — |
| openbao-k8s-fips | affected | chainguard | openbao-k8s-fips | — |
| opencost | affected | chainguard | opencost | — |
| opencost | affected | wolfi | opencost | — |
| opencost-fips | affected | chainguard | opencost-fips | — |
| openfga | affected | wolfi | openfga | — |
| openfga | affected | chainguard | openfga | — |
| opensearch-k8s-operator | affected | wolfi | opensearch-k8s-operator | — |
| opensearch-k8s-operator | affected | chainguard | opensearch-k8s-operator | — |
| opentelemetry-collector | affected | chainguard | opentelemetry-collector | — |
| opentelemetry-collector | affected | wolfi | opentelemetry-collector | — |
| opentelemetry-collector-contrib | affected | wolfi | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib | affected | chainguard | opentelemetry-collector-contrib | — |
| opentelemetry-collector-contrib-fips | affected | chainguard | opentelemetry-collector-contrib-fips | — |
| opentelemetry-collector-fips | affected | chainguard | opentelemetry-collector-fips | — |
| opentelemetry-operator | affected | chainguard | opentelemetry-operator | — |
| opentelemetry-operator | affected | wolfi | opentelemetry-operator | — |
| opentelemetry-operator-fips | affected | chainguard | opentelemetry-operator-fips | — |
| opentofu-1.8 | affected | chainguard | opentofu-1.8 | — |
| opentofu-1.9 | affected | chainguard | opentofu-1.9 | — |
| opentofu-1.9 | affected | wolfi | opentofu-1.9 | — |
| opentofu-fips-1.8 | affected | chainguard | opentofu-fips-1.8 | — |
| opentofu-fips-1.9 | affected | chainguard | opentofu-fips-1.9 | — |
| op-geth | affected | wolfi | op-geth | — |
| op-geth | affected | chainguard | op-geth | — |
| osv-scanner | affected | chainguard | osv-scanner | — |
| osv-scanner | affected | wolfi | osv-scanner | — |
| otel-cli | affected | chainguard | otel-cli | — |
| otel-cli | affected | wolfi | otel-cli | — |
| packer-fips | affected | chainguard | packer-fips | — |
| pluto | affected | wolfi | pluto | — |
| pluto | affected | chainguard | pluto | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| portieris | affected | chainguard | portieris | — |
| portieris | affected | wolfi | portieris | — |
| portieris-fips | affected | chainguard | portieris-fips | — |
| postgres-operator | affected | wolfi | postgres-operator | — |
| postgres-operator | affected | chainguard | postgres-operator | — |
| postgres-operator-fips | affected | chainguard | postgres-operator-fips | — |
| prometheus-2.51 | affected | chainguard | prometheus-2.51 | — |
| prometheus-2.53 | affected | chainguard | prometheus-2.53 | — |
| prometheus-3.2 | affected | chainguard | prometheus-3.2 | — |
| prometheus-3.2 | affected | wolfi | prometheus-3.2 | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter-fips | affected | chainguard | prometheus-blackbox-exporter-fips | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-podman-exporter | affected | chainguard | prometheus-podman-exporter | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-stackdriver-exporter | affected | chainguard | prometheus-stackdriver-exporter | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| promxy | affected | chainguard | promxy | — |
| promxy | affected | wolfi | promxy | — |
| promxy-fips | affected | chainguard | promxy-fips | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-language-dotnet | affected | wolfi | pulumi-language-dotnet | — |
| pulumi-language-dotnet | affected | chainguard | pulumi-language-dotnet | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator-fips | affected | chainguard | rabbitmq-cluster-operator-fips | — |
| rabbitmq-messaging-topology-operator | affected | chainguard | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator | affected | wolfi | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator-fips | affected | chainguard | rabbitmq-messaging-topology-operator-fips | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-fips-0.4 | affected | chainguard | rancher-webhook-fips-0.4 | — |
| rclone | affected | chainguard | rclone | — |
| rclone | affected | wolfi | rclone | — |
| rclone-fips | affected | chainguard | rclone-fips | — |
| redis-operator | affected | wolfi | redis-operator | — |
| redis-operator | affected | chainguard | redis-operator | — |
| redis-operator-fips | affected | chainguard | redis-operator-fips | — |
| rekor | affected | wolfi | rekor | — |
| rekor | affected | chainguard | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| request-1279 | affected | chainguard | request-1279 | — |
| request-1279-1-14 | affected | chainguard | request-1279-1-14 | — |
| restic | affected | chainguard | restic | — |
| restic | affected | wolfi | restic | — |
| restic-fips | affected | chainguard | restic-fips | — |
| rke2-runtime-1.32 | affected | chainguard | rke2-runtime-1.32 | — |
| rook | affected | wolfi | rook | — |
| rook | affected | chainguard | rook | — |
| rootlesskit | affected | chainguard | rootlesskit | — |
| rootlesskit | affected | wolfi | rootlesskit | — |
| rqlite | affected | wolfi | rqlite | — |
| rqlite | affected | chainguard | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| runc-fips | affected | chainguard | runc-fips | — |
| scanner-test-golang-vulnerability-unfixed | affected | chainguard | scanner-test-golang-vulnerability-unfixed | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| seaweedfs | affected | chainguard | seaweedfs | — |
| seaweedfs | affected | wolfi | seaweedfs | — |
| secrets-store-csi-driver | affected | chainguard | secrets-store-csi-driver | — |
| secrets-store-csi-driver | affected | wolfi | secrets-store-csi-driver | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws-fips | affected | chainguard | secrets-store-csi-driver-provider-aws-fips | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure-fips | affected | chainguard | secrets-store-csi-driver-provider-azure-fips | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp-fips | affected | chainguard | secrets-store-csi-driver-provider-gcp-fips | — |
| sftpgo | affected | chainguard | sftpgo | — |
| sftpgo | affected | wolfi | sftpgo | — |
| sftpgo-plugin-auth | affected | chainguard | sftpgo-plugin-auth | — |
| sftpgo-plugin-auth | affected | wolfi | sftpgo-plugin-auth | — |
| sftpgo-plugin-eventsearch | affected | chainguard | sftpgo-plugin-eventsearch | — |
| sftpgo-plugin-eventsearch | affected | wolfi | sftpgo-plugin-eventsearch | — |
| sftpgo-plugin-eventstore | affected | wolfi | sftpgo-plugin-eventstore | — |
| sftpgo-plugin-eventstore | affected | chainguard | sftpgo-plugin-eventstore | — |
| sftpgo-plugin-geoipfilter | affected | wolfi | sftpgo-plugin-geoipfilter | — |
| sftpgo-plugin-geoipfilter | affected | chainguard | sftpgo-plugin-geoipfilter | — |
| sftpgo-plugin-kms | affected | wolfi | sftpgo-plugin-kms | — |
| sftpgo-plugin-kms | affected | chainguard | sftpgo-plugin-kms | — |
| sftpgo-plugin-pubsub | affected | chainguard | sftpgo-plugin-pubsub | — |
| sftpgo-plugin-pubsub | affected | wolfi | sftpgo-plugin-pubsub | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| skopeo | affected | wolfi | skopeo | — |
| skopeo | affected | chainguard | skopeo | — |
| skopeo-fips | affected | chainguard | skopeo-fips | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| snyk-cli | affected | chainguard | snyk-cli | — |
| snyk-cli | affected | wolfi | snyk-cli | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| sops | affected | chainguard | sops | — |
| sops | affected | wolfi | sops | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator-fips | affected | chainguard | spark-operator-fips | — |
| spegel | affected | wolfi | spegel | — |
| spegel | affected | chainguard | spegel | — |
| spicedb | affected | chainguard | spicedb | — |
| spicedb | affected | wolfi | spicedb | — |
| spiffe-helper | affected | wolfi | spiffe-helper | — |
| spiffe-helper | affected | chainguard | spiffe-helper | — |
| spiffe-helper-fips | affected | chainguard | spiffe-helper-fips | — |
| spire-controller-manager | affected | wolfi | spire-controller-manager | — |
| spire-controller-manager | affected | chainguard | spire-controller-manager | — |
| spire-controller-manager-fips | affected | chainguard | spire-controller-manager-fips | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server | affected | wolfi | spire-server | — |
| splunk-otel-collector | affected | wolfi | splunk-otel-collector | — |
| splunk-otel-collector | affected | chainguard | splunk-otel-collector | — |
| splunk-otel-collector-fips | affected | chainguard | splunk-otel-collector-fips | — |
| spqr | affected | wolfi | spqr | — |
| spqr | affected | chainguard | spqr | — |
| sql_exporter | affected | chainguard | sql_exporter | — |
| sql_exporter | affected | wolfi | sql_exporter | — |
| sql_exporter-fips | affected | chainguard | sql_exporter-fips | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| src-fingerprint-fips | affected | chainguard | src-fingerprint-fips | — |
| sriov-network-device-plugin | affected | wolfi | sriov-network-device-plugin | — |
| sriov-network-device-plugin | affected | chainguard | sriov-network-device-plugin | — |
| sriov-network-device-plugin-fips | affected | chainguard | sriov-network-device-plugin-fips | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| stakater-reloader-fips | affected | chainguard | stakater-reloader-fips | — |
| stdlib | affected | Go | stdlib | — |
| step | affected | chainguard | step | — |
| step | affected | wolfi | step | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca-fips | affected | chainguard | step-ca-fips | — |
| step-fips | affected | chainguard | step-fips | — |
| step-issuer | affected | wolfi | step-issuer | — |
| step-issuer | affected | chainguard | step-issuer | — |
| step-issuer-fips | affected | chainguard | step-issuer-fips | — |
| step-kms-plugin | affected | chainguard | step-kms-plugin | — |
| step-kms-plugin | affected | wolfi | step-kms-plugin | — |
| step-kms-plugin-fips | affected | chainguard | step-kms-plugin-fips | — |
| stern | affected | wolfi | stern | — |
| stern | affected | chainguard | stern | — |
| syft | affected | wolfi | syft | — |
| syft | affected | chainguard | syft | — |
| syft-fips | affected | chainguard | syft-fips | — |
| tailscale | affected | wolfi | tailscale | — |
| tailscale | affected | chainguard | tailscale | — |
| task | affected | wolfi | task | — |
| task | affected | chainguard | task | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| tekton-chains-fips | affected | chainguard | tekton-chains-fips | — |
| tempo | affected | wolfi | tempo | — |
| tempo | affected | chainguard | tempo | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-1.10 | affected | chainguard | terraform-1.10 | — |
| terraform-1.11 | affected | chainguard | terraform-1.11 | — |
| terraform-1.9 | affected | chainguard | terraform-1.9 | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-fips-1.11 | affected | chainguard | terraform-fips-1.11 | — |
| terraform-provider-azapi | affected | wolfi | terraform-provider-azapi | — |
| terraform-provider-azapi | affected | chainguard | terraform-provider-azapi | — |
| terraform-provider-azapi-fips | affected | chainguard | terraform-provider-azapi-fips | — |
| terraform-provider-azuread | affected | chainguard | terraform-provider-azuread | — |
| terraform-provider-azuread | affected | wolfi | terraform-provider-azuread | — |
| terraform-provider-azuread-fips | affected | chainguard | terraform-provider-azuread-fips | — |
| terraform-provider-azurerm | affected | chainguard | terraform-provider-azurerm | — |
| terraform-provider-azurerm | affected | wolfi | terraform-provider-azurerm | — |
| terraform-provider-google | affected | chainguard | terraform-provider-google | — |
| terraform-provider-google | affected | wolfi | terraform-provider-google | — |
| terraform-provider-grafana | affected | chainguard | terraform-provider-grafana | — |
| terraform-provider-grafana | affected | wolfi | terraform-provider-grafana | — |
| terraform-provider-grafana-fips | affected | chainguard | terraform-provider-grafana-fips | — |
| terraform-provider-kubernetes | affected | chainguard | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes | affected | wolfi | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes-fips | affected | chainguard | terraform-provider-kubernetes-fips | — |
| terraform-provider-pagerduty | affected | wolfi | terraform-provider-pagerduty | — |
| terraform-provider-pagerduty | affected | chainguard | terraform-provider-pagerduty | — |
| terraform-provider-pagerduty-fips | affected | chainguard | terraform-provider-pagerduty-fips | — |
| terraform-provider-random | affected | chainguard | terraform-provider-random | — |
| terraform-provider-random | affected | wolfi | terraform-provider-random | — |
| terraform-provider-random-fips | affected | chainguard | terraform-provider-random-fips | — |
| terraform-provider-sendgrid | affected | wolfi | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid | affected | chainguard | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid-fips | affected | chainguard | terraform-provider-sendgrid-fips | — |
| terraform-provider-time | affected | wolfi | terraform-provider-time | — |
| terraform-provider-time | affected | chainguard | terraform-provider-time | — |
| terraform-provider-time-fips | affected | chainguard | terraform-provider-time-fips | — |
| terraform-provider-tls | affected | chainguard | terraform-provider-tls | — |
| terraform-provider-tls | affected | wolfi | terraform-provider-tls | — |
| terraform-provider-tls-fips | affected | chainguard | terraform-provider-tls-fips | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| tfsec | affected | chainguard | tfsec | — |
| tfsec | affected | wolfi | tfsec | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-fips | affected | chainguard | thanos-fips | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator-fips | affected | chainguard | thanos-operator-fips | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.34 | affected | chainguard | tigera-operator-1.34 | — |
| tigera-operator-1.36 | affected | chainguard | tigera-operator-1.36 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| tigera-operator-fips-1.34 | affected | chainguard | tigera-operator-fips-1.34 | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| tkn | affected | wolfi | tkn | — |
| tkn | affected | chainguard | tkn | — |
| tkn-fips | affected | chainguard | tkn-fips | — |
| traefik-2.11 | affected | chainguard | traefik-2.11 | — |
| traefik-3.3 | affected | chainguard | traefik-3.3 | — |
| traefik-3.3 | affected | wolfi | traefik-3.3 | — |
| traefik-fips-2.11 | affected | chainguard | traefik-fips-2.11 | — |
| trillian | affected | chainguard | trillian | — |
| trillian | affected | wolfi | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| trivy | affected | wolfi | trivy | — |
| trivy | affected | chainguard | trivy | — |
| trivy-fips | affected | chainguard | trivy-fips | — |
| trufflehog-fips | affected | chainguard | trufflehog-fips | — |
| trust-manager | affected | chainguard | trust-manager | — |
| trust-manager | affected | wolfi | trust-manager | — |
| trust-manager-fips | affected | chainguard | trust-manager-fips | — |
| undock | affected | wolfi | undock | — |
| undock | affected | chainguard | undock | — |
| vault-1.16 | affected | chainguard | vault-1.16 | — |
| vault-1.17 | affected | chainguard | vault-1.17 | — |
| vault-1.18 | affected | chainguard | vault-1.18 | — |
| vault-1.19 | affected | chainguard | vault-1.19 | — |
| vault-benchmark | affected | wolfi | vault-benchmark | — |
| vault-benchmark | affected | chainguard | vault-benchmark | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| vault-secrets-operator | affected | chainguard | vault-secrets-operator | — |
| vcluster | affected | wolfi | vcluster | — |
| vcluster | affected | chainguard | vcluster | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| velero-fips | affected | chainguard | velero-fips | — |
| velero-plugin-for-aws | affected | chainguard | velero-plugin-for-aws | — |
| velero-plugin-for-aws | affected | wolfi | velero-plugin-for-aws | — |
| velero-plugin-for-aws-fips | affected | chainguard | velero-plugin-for-aws-fips | — |
| velero-plugin-for-csi | affected | chainguard | velero-plugin-for-csi | — |
| velero-plugin-for-csi | affected | wolfi | velero-plugin-for-csi | — |
| velero-plugin-for-csi-fips | affected | chainguard | velero-plugin-for-csi-fips | — |
| velero-plugin-for-microsoft-azure | affected | wolfi | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure | affected | chainguard | velero-plugin-for-microsoft-azure | — |
| velero-plugin-for-microsoft-azure-fips | affected | chainguard | velero-plugin-for-microsoft-azure-fips | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler-fips | affected | chainguard | vertical-pod-autoscaler-fips | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| victoriametrics | affected | chainguard | victoriametrics | — |
| victoriametrics | affected | wolfi | victoriametrics | — |
| victoriametrics-cluster | affected | chainguard | victoriametrics-cluster | — |
| victoriametrics-cluster | affected | wolfi | victoriametrics-cluster | — |
| victoriametrics-cluster-fips | affected | chainguard | victoriametrics-cluster-fips | — |
| victoriametrics-fips | affected | chainguard | victoriametrics-fips | — |
| victoriametrics-operator-fips | affected | chainguard | victoriametrics-operator-fips | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| wal-g | affected | wolfi | wal-g | — |
| wal-g | affected | chainguard | wal-g | — |
| wave | affected | wolfi | wave | — |
| wave | affected | chainguard | wave | — |
| wave-fips | affected | chainguard | wave-fips | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| weaviate | affected | chainguard | weaviate | — |
| weaviate | affected | wolfi | weaviate | — |
| whereabouts | affected | wolfi | whereabouts | — |
| whereabouts | affected | chainguard | whereabouts | — |
| whereabouts-fips | affected | chainguard | whereabouts-fips | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wuzz | affected | wolfi | wuzz | — |
| wuzz | affected | chainguard | wuzz | — |
| x509-certificate-exporter | affected | wolfi | x509-certificate-exporter | — |
| x509-certificate-exporter | affected | chainguard | x509-certificate-exporter | — |
| x509-certificate-exporter-fips | affected | chainguard | x509-certificate-exporter-fips | — |
| xeol | affected | chainguard | xeol | — |
| xeol | affected | wolfi | xeol | — |
| xeol-fips | affected | chainguard | xeol-fips | — |
| x/net | affected | golang.org | golang.org/x/net | — |
| yq | affected | chainguard | yq | — |
| yq | affected | wolfi | yq | — |
| yq-fips | affected | chainguard | yq-fips | — |
| yunikorn-k8shim | affected | chainguard | yunikorn-k8shim | — |
| yunikorn-k8shim | affected | wolfi | yunikorn-k8shim | — |
| yunikorn-k8shim-fips | affected | chainguard | yunikorn-k8shim-fips | — |
| zarf | affected | wolfi | zarf | — |
| zarf | affected | chainguard | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.
CVEs:CVE-2025-22870
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVEs:CVE-2025-22870
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| x/net | affected | golang.org | golang.org/x/net | — |
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not ...
CVEs:CVE-2025-22870
GHSA-jxvq-qf85-7whf
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2025-1918
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)
CVEs:CVE-2025-1918
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)
CVEs:CVE-2025-1918
CVEs:CVE-2025-1918
GHSA-69cm-jm55-39mv
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
GHSA-gmc4-5rff-2xrj
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2025-1919
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2025-1914
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2025-1914
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2025-1914
CVEs:CVE-2025-1914
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1919
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2025-1919
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1919
GHSA-ghrx-ww4x-q83j
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2025-1917
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1917
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1917
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2025-1917
GHSA-fhwv-7gx3-h767
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2025-1920
CVEs:CVE-2025-1920
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2025-1920
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
DEBIAN-CVE-2025-1920
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
GHSA-2448-7fj5-7v9w
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2025-1921
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2025-1921
Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1921
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1921
CVEs:CVE-2025-26417
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileg...
CVEs:CVE-2025-26417
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
containerd has an integer overflow in User ID handling in github.com/containerd/containerd
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| beats-7 | affected | chainguard | beats-7 | — |
| beats-fips-7 | affected | chainguard | beats-fips-7 | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd-fips | affected | chainguard | buildkitd-fips | — |
| cert-manager-cmctl | affected | wolfi | cert-manager-cmctl | — |
| cert-manager-cmctl | affected | chainguard | cert-manager-cmctl | — |
| cert-manager-cmctl-fips | affected | chainguard | cert-manager-cmctl-fips | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| cilium-cli | affected | wolfi | cilium-cli | — |
| cilium-cli | affected | chainguard | cilium-cli | — |
| cluster-api-helm-controller | affected | chainguard | cluster-api-helm-controller | — |
| cluster-api-helm-controller | affected | wolfi | cluster-api-helm-controller | — |
| cluster-api-helm-controller-fips | affected | chainguard | cluster-api-helm-controller-fips | — |
| consul-k8s-1.1 | affected | chainguard | consul-k8s-1.1 | — |
| consul-k8s-1.3 | affected | chainguard | consul-k8s-1.3 | — |
| consul-k8s-1.4 | affected | chainguard | consul-k8s-1.4 | — |
| consul-k8s-1.5 | affected | chainguard | consul-k8s-1.5 | — |
| consul-k8s-1.6 | affected | chainguard | consul-k8s-1.6 | — |
| consul-k8s-fips-1.1 | affected | chainguard | consul-k8s-fips-1.1 | — |
| consul-k8s-fips-1.3 | affected | chainguard | consul-k8s-fips-1.3 | — |
| consul-k8s-fips-1.4 | affected | chainguard | consul-k8s-fips-1.4 | — |
| consul-k8s-fips-1.5 | affected | chainguard | consul-k8s-fips-1.5 | — |
| consul-k8s-fips-1.6 | affected | chainguard | consul-k8s-fips-1.6 | — |
| containerd/containerd | affected | github.com | github.com/containerd/containerd | — |
| containerd/containerd/v2 | affected | github.com | github.com/containerd/containerd/v2 | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| dagger | affected | wolfi | dagger | — |
| dagger | affected | chainguard | dagger | — |
| docker | affected | wolfi | docker | — |
| docker | affected | chainguard | docker | — |
| docker-cli-buildx | affected | chainguard | docker-cli-buildx | — |
| docker-cli-buildx | affected | wolfi | docker-cli-buildx | — |
| docker-cli-buildx-fips | affected | chainguard | docker-cli-buildx-fips | — |
| docker-compose | affected | wolfi | docker-compose | — |
| docker-compose | affected | chainguard | docker-compose | — |
| docker-compose-fips | affected | chainguard | docker-compose-fips | — |
| docker-fips | affected | chainguard | docker-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-gateway | affected | wolfi | envoy-gateway | — |
| envoy-gateway | affected | chainguard | envoy-gateway | — |
| envoy-gateway-fips | affected | chainguard | envoy-gateway-fips | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller-fips | affected | chainguard | flux-helm-controller-fips | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller-fips | affected | chainguard | flux-source-controller-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| grype-db | affected | chainguard | grype-db | — |
| grype-fips | affected | chainguard | grype-fips | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-fips | affected | chainguard | helm-fips | — |
| helm-fips-3 | affected | chainguard | helm-fips-3 | — |
| helm-fips-4 | affected | chainguard | helm-fips-4 | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| kaniko | affected | chainguard | kaniko | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko-fips | affected | chainguard | kaniko-fips | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| kubescape | affected | chainguard | kubescape | — |
| kubescape | affected | wolfi | kubescape | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| linkerd2 | affected | wolfi | linkerd2 | — |
| linkerd2 | affected | chainguard | linkerd2 | — |
| melange | affected | chainguard | melange | — |
| melange | affected | wolfi | melange | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| neuvector-scanner | affected | chainguard | neuvector-scanner | — |
| neuvector-scanner | affected | wolfi | neuvector-scanner | — |
| neuvector-scanner-fips | affected | chainguard | neuvector-scanner-fips | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| opa | affected | wolfi | opa | — |
| opa | affected | chainguard | opa | — |
| opa-envoy | affected | chainguard | opa-envoy | — |
| opa-envoy | affected | wolfi | opa-envoy | — |
| opa-fips | affected | chainguard | opa-fips | — |
| opa-fips-envoy | affected | chainguard | opa-fips-envoy | — |
| osv-scanner | affected | wolfi | osv-scanner | — |
| osv-scanner | affected | chainguard | osv-scanner | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet-fips | affected | chainguard | rancher-fleet-fips | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| spegel | affected | wolfi | spegel | — |
| spegel | affected | chainguard | spegel | — |
| syft | affected | wolfi | syft | — |
| syft | affected | chainguard | syft | — |
| syft-fips | affected | chainguard | syft-fips | — |
| trivy | affected | chainguard | trivy | — |
| trivy | affected | wolfi | trivy | — |
| trivy-fips | affected | chainguard | trivy-fips | — |
| wolfictl | affected | chainguard | wolfictl | — |
| wolfictl | affected | wolfi | wolfictl | — |
| xeol | affected | wolfi | xeol | — |
| xeol | affected | chainguard | xeol | — |
| xeol-fips | affected | chainguard | xeol-fips | — |
| zarf | affected | chainguard | zarf | — |
| zarf | affected | wolfi | zarf | — |
| zot | affected | chainguard | zot | — |
| zot | affected | wolfi | zot | — |
containerd has an integer overflow in User ID handling
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| beats-7 | affected | chainguard | beats-7 | — |
| beats-fips-7 | affected | chainguard | beats-fips-7 | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd-fips | affected | chainguard | buildkitd-fips | — |
| cert-manager-1.12 | affected | chainguard | cert-manager-1.12 | — |
| cert-manager-1.12 | affected | wolfi | cert-manager-1.12 | — |
| cert-manager-cmctl | affected | chainguard | cert-manager-cmctl | — |
| cert-manager-cmctl | affected | wolfi | cert-manager-cmctl | — |
| cert-manager-cmctl-fips | affected | chainguard | cert-manager-cmctl-fips | — |
| cert-manager-fips-1.12 | affected | chainguard | cert-manager-fips-1.12 | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| cilium-cli | affected | chainguard | cilium-cli | — |
| cilium-cli | affected | wolfi | cilium-cli | — |
| cloudbeat-fips | affected | chainguard | cloudbeat-fips | — |
| cluster-api-helm-controller | affected | wolfi | cluster-api-helm-controller | — |
| cluster-api-helm-controller | affected | chainguard | cluster-api-helm-controller | — |
| cluster-api-helm-controller-fips | affected | chainguard | cluster-api-helm-controller-fips | — |
| consul-k8s-1.1 | affected | chainguard | consul-k8s-1.1 | — |
| consul-k8s-1.3 | affected | chainguard | consul-k8s-1.3 | — |
| consul-k8s-1.4 | affected | chainguard | consul-k8s-1.4 | — |
| consul-k8s-1.5 | affected | chainguard | consul-k8s-1.5 | — |
| consul-k8s-1.5 | affected | wolfi | consul-k8s-1.5 | — |
| consul-k8s-1.6 | affected | wolfi | consul-k8s-1.6 | — |
| consul-k8s-1.6 | affected | chainguard | consul-k8s-1.6 | — |
| consul-k8s-fips-1.1 | affected | chainguard | consul-k8s-fips-1.1 | — |
| consul-k8s-fips-1.3 | affected | chainguard | consul-k8s-fips-1.3 | — |
| consul-k8s-fips-1.4 | affected | chainguard | consul-k8s-fips-1.4 | — |
| consul-k8s-fips-1.5 | affected | chainguard | consul-k8s-fips-1.5 | — |
| consul-k8s-fips-1.6 | affected | chainguard | consul-k8s-fips-1.6 | — |
| containerd/containerd | affected | github.com | github.com/containerd/containerd | — |
| containerd/containerd/v2 | affected | github.com | github.com/containerd/containerd/v2 | — |
| ctop | affected | chainguard | ctop | — |
| ctop | affected | wolfi | ctop | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| docker | affected | wolfi | docker | — |
| docker | affected | chainguard | docker | — |
| docker-cli-buildx | affected | chainguard | docker-cli-buildx | — |
| docker-cli-buildx | affected | wolfi | docker-cli-buildx | — |
| docker-cli-buildx-fips | affected | chainguard | docker-cli-buildx-fips | — |
| docker-compose | affected | chainguard | docker-compose | — |
| docker-compose | affected | wolfi | docker-compose | — |
| docker-compose-fips | affected | chainguard | docker-compose-fips | — |
| docker-fips | affected | chainguard | docker-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| envoy-gateway | affected | wolfi | envoy-gateway | — |
| envoy-gateway | affected | chainguard | envoy-gateway | — |
| envoy-gateway-fips | affected | chainguard | envoy-gateway-fips | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller-fips | affected | chainguard | flux-helm-controller-fips | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller-fips | affected | chainguard | flux-source-controller-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.16 | affected | chainguard | gatekeeper-3.16 | — |
| gatekeeper-3.16 | affected | wolfi | gatekeeper-3.16 | — |
| gatekeeper-3.17 | affected | chainguard | gatekeeper-3.17 | — |
| gatekeeper-3.17 | affected | wolfi | gatekeeper-3.17 | — |
| gatekeeper-3.18 | affected | chainguard | gatekeeper-3.18 | — |
| gatekeeper-3.18 | affected | wolfi | gatekeeper-3.18 | — |
| gitlab-rails-ee-17.7 | affected | chainguard | gitlab-rails-ee-17.7 | — |
| gitlab-rails-ee-17.8 | affected | chainguard | gitlab-rails-ee-17.8 | — |
| gitlab-rails-ee-17.9 | affected | chainguard | gitlab-rails-ee-17.9 | — |
| gitlab-rails-ee-fips-17.7 | affected | chainguard | gitlab-rails-ee-fips-17.7 | — |
| gitlab-rails-ee-fips-17.8 | affected | chainguard | gitlab-rails-ee-fips-17.8 | — |
| gitlab-rails-ee-fips-17.9 | affected | chainguard | gitlab-rails-ee-fips-17.9 | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| grype-db | affected | chainguard | grype-db | — |
| grype-fips | affected | chainguard | grype-fips | — |
| helm | affected | chainguard | helm | — |
| helm | affected | wolfi | helm | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-fips | affected | chainguard | helm-fips | — |
| helm-fips-3 | affected | chainguard | helm-fips-3 | — |
| helm-fips-4 | affected | chainguard | helm-fips-4 | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | wolfi | helm-push | — |
| helm-push | affected | chainguard | helm-push | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| kaniko | affected | chainguard | kaniko | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko-fips | affected | chainguard | kaniko-fips | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kots-compat | affected | chainguard | kots-compat | — |
| kubescape | affected | chainguard | kubescape | — |
| kubescape | affected | wolfi | kubescape | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| linkerd2 | affected | chainguard | linkerd2 | — |
| linkerd2 | affected | wolfi | linkerd2 | — |
| melange | affected | wolfi | melange | — |
| melange | affected | chainguard | melange | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| neuvector | affected | wolfi | neuvector | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| neuvector-scanner | affected | wolfi | neuvector-scanner | — |
| neuvector-scanner | affected | chainguard | neuvector-scanner | — |
| neuvector-scanner-fips | affected | chainguard | neuvector-scanner-fips | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| opa | affected | wolfi | opa | — |
| opa | affected | chainguard | opa | — |
| opa-envoy | affected | chainguard | opa-envoy | — |
| opa-envoy | affected | wolfi | opa-envoy | — |
| opa-fips | affected | chainguard | opa-fips | — |
| opa-fips-envoy | affected | chainguard | opa-fips-envoy | — |
| osv-scanner | affected | wolfi | osv-scanner | — |
| osv-scanner | affected | chainguard | osv-scanner | — |
| rancher-2.10 | affected | wolfi | rancher-2.10 | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-2.8 | affected | chainguard | rancher-2.8 | — |
| rancher-2.8 | affected | wolfi | rancher-2.8 | — |
| rancher-agent-2.10 | affected | wolfi | rancher-agent-2.10 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.11 | affected | wolfi | rancher-agent-2.11 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.8 | affected | chainguard | rancher-agent-2.8 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-agent-2.9 | affected | wolfi | rancher-agent-2.9 | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet-fips | affected | chainguard | rancher-fleet-fips | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| spegel | affected | chainguard | spegel | — |
| spegel | affected | wolfi | spegel | — |
| syft | affected | wolfi | syft | — |
| syft | affected | chainguard | syft | — |
| syft-fips | affected | chainguard | syft-fips | — |
| telegraf-1.31 | affected | chainguard | telegraf-1.31 | — |
| telegraf-1.31 | affected | wolfi | telegraf-1.31 | — |
| teleport | affected | wolfi | teleport | — |
| teleport | affected | chainguard | teleport | — |
| trivy | affected | chainguard | trivy | — |
| trivy | affected | wolfi | trivy | — |
| trivy-fips | affected | chainguard | trivy-fips | — |
| wolfictl | affected | wolfi | wolfictl | — |
| wolfictl | affected | chainguard | wolfictl | — |
| xeol | affected | wolfi | xeol | — |
| xeol | affected | chainguard | xeol | — |
| xeol-fips | affected | chainguard | xeol-fips | — |
| zarf | affected | wolfi | zarf | — |
| zarf | affected | chainguard | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
containerd has an integer overflow in User ID handling
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| containerd/containerd | affected | github.com | github.com/containerd/containerd | — |
| containerd/containerd/v2 | affected | github.com | github.com/containerd/containerd/v2 | — |
GHSA-wp6v-66g9-g3f5
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2025-1922
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2025-1922
CVEs:CVE-2025-1922
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2025-1922
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
GHSA-7qw8-w379-55hx
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2025-1916
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1916
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2025-1916
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-1916
CVEs:CVE-2025-0087
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...
CVEs:CVE-2025-0087
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
GHSA-wgc8-974c-v6qg
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2025-1923
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)
CVEs:CVE-2025-1923
CVEs:CVE-2025-1923
Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)
CVEs:CVE-2025-1923
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2023-21125
In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not neede...
CVEs:CVE-2023-21125
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVEs:CVE-2025-0086
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0086
PUB-A-365755647
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Some AES functions may panic when overflow checking is enabled in ring
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| atuin | affected | chainguard | atuin | — |
| atuin | affected | wolfi | atuin | — |
| buck2 | affected | wolfi | buck2 | — |
| buck2 | affected | chainguard | buck2 | — |
| cargo-audit | affected | chainguard | cargo-audit | — |
| cargo-audit | affected | wolfi | cargo-audit | — |
| deno | affected | wolfi | deno | — |
| deno | affected | chainguard | deno | — |
| fnm | affected | chainguard | fnm | — |
| kdash | affected | chainguard | kdash | — |
| kdash | affected | wolfi | kdash | — |
| linkerd2-proxy | affected | wolfi | linkerd2-proxy | — |
| linkerd2-proxy | affected | chainguard | linkerd2-proxy | — |
| linkerd-extension-init | affected | wolfi | linkerd-extension-init | — |
| linkerd-extension-init | affected | chainguard | linkerd-extension-init | — |
| lychee | affected | wolfi | lychee | — |
| lychee | affected | chainguard | lychee | — |
| ntpd-rs | affected | chainguard | ntpd-rs | — |
| ntpd-rs | affected | wolfi | ntpd-rs | — |
| nushell | affected | chainguard | nushell | — |
| nushell | affected | wolfi | nushell | — |
| oranda | affected | wolfi | oranda | — |
| oranda | affected | chainguard | oranda | — |
| parseable | affected | wolfi | parseable | — |
| parseable | affected | chainguard | parseable | — |
| pixi | affected | chainguard | pixi | — |
| pixi | affected | wolfi | pixi | — |
| qdrant | affected | wolfi | qdrant | — |
| qdrant | affected | chainguard | qdrant | — |
| ring | affected | crates.io | ring | — |
| rustls-ffi | affected | wolfi | rustls-ffi | — |
| rustls-ffi | affected | chainguard | rustls-ffi | — |
| rustup | affected | chainguard | rustup | — |
| rustup | affected | wolfi | rustup | — |
| rye | affected | wolfi | rye | — |
| rye | affected | chainguard | rye | — |
| samply | affected | chainguard | samply | — |
| samply | affected | wolfi | samply | — |
| sccache | affected | wolfi | sccache | — |
| sccache | affected | chainguard | sccache | — |
| sdp-k8s-injector | affected | wolfi | sdp-k8s-injector | — |
| sdp-k8s-injector | affected | chainguard | sdp-k8s-injector | — |
| shadowsocks-rust | affected | wolfi | shadowsocks-rust | — |
| shadowsocks-rust | affected | chainguard | shadowsocks-rust | — |
| sqlx | affected | wolfi | sqlx | — |
| sqlx | affected | chainguard | sqlx | — |
| tealdeer | affected | wolfi | tealdeer | — |
| tealdeer | affected | chainguard | tealdeer | — |
| uv | affected | wolfi | uv | — |
| uv | affected | chainguard | uv | — |
| wadm | affected | chainguard | wadm | — |
| wadm | affected | wolfi | wadm | — |
| wash | affected | wolfi | wash | — |
| wash | affected | chainguard | wash | — |
| wasmcloud | affected | wolfi | wasmcloud | — |
| wasmcloud | affected | chainguard | wasmcloud | — |
| wasm-pack | affected | chainguard | wasm-pack | — |
| wasm-pack | affected | wolfi | wasm-pack | — |
| wasmtime | affected | chainguard | wasmtime | — |
| wasmtime | affected | wolfi | wasmtime | — |
| xh | affected | chainguard | xh | — |
| xh | affected | wolfi | xh | — |
| zed | affected | chainguard | zed | — |
| zed | affected | wolfi | zed | — |
| zizmor | affected | chainguard | zizmor | — |
| zizmor | affected | wolfi | zizmor | — |
| zola | affected | chainguard | zola | — |
| zola | affected | wolfi | zola | — |
| ztunnel-1.24 | affected | chainguard | ztunnel-1.24 | — |
| ztunnel-1.24 | affected | wolfi | ztunnel-1.24 | — |
| ztunnel-fips-1.24 | affected | chainguard | ztunnel-fips-1.24 | — |
Some AES functions may panic when overflow checking is enabled in ring
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ring | affected | crates.io | ring | — |
Ollama Allows Out-of-Bounds Read in github.com/ollama/ollama
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| mods | affected | chainguard | mods | — |
| mods | affected | wolfi | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Allows Out-of-Bounds Read
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ollama/ollama | affected | github.com | — | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Allows Out-of-Bounds Read
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| mods | affected | chainguard | mods | — |
| mods | affected | wolfi | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Divide by Zero Vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| mods | affected | wolfi | mods | — |
| mods | affected | chainguard | mods | — |
| ollama-fips | affected | chainguard | ollama-fips | — |
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Ollama Divide by Zero Vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ollama/ollama | affected | github.com | github.com/ollama/ollama | — |
Kubernetes GitRepo Volume Inadvertent Local Repository Access in k8s.io/kubernetes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-cd-2.11 | affected | chainguard | argo-cd-2.11 | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-3.0 | affected | chainguard | argo-cd-3.0 | — |
| argo-cd-3.1 | affected | chainguard | argo-cd-3.1 | — |
| argo-cd-3.2 | affected | chainguard | argo-cd-3.2 | — |
| argo-cd-3.2 | affected | wolfi | argo-cd-3.2 | — |
| argo-cd-3.3 | affected | chainguard | argo-cd-3.3 | — |
| argo-cd-3.3 | affected | wolfi | argo-cd-3.3 | — |
| argo-cd-3.4 | affected | wolfi | argo-cd-3.4 | — |
| argo-cd-3.4 | affected | chainguard | argo-cd-3.4 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argo-cd-fips-3.0 | affected | chainguard | argo-cd-fips-3.0 | — |
| argo-cd-fips-3.1 | affected | chainguard | argo-cd-fips-3.1 | — |
| argo-cd-fips-3.2 | affected | chainguard | argo-cd-fips-3.2 | — |
| argo-cd-fips-3.3 | affected | chainguard | argo-cd-fips-3.3 | — |
| argo-cd-fips-3.4 | affected | chainguard | argo-cd-fips-3.4 | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| azure-container-networking | affected | chainguard | azure-container-networking | — |
| azuredisk-csi-1.28 | affected | chainguard | azuredisk-csi-1.28 | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-1.30 | affected | chainguard | azuredisk-csi-1.30 | — |
| azuredisk-csi-1.31 | affected | chainguard | azuredisk-csi-1.31 | — |
| azuredisk-csi-1.32 | affected | chainguard | azuredisk-csi-1.32 | — |
| azuredisk-csi-1.33 | affected | chainguard | azuredisk-csi-1.33 | — |
| azuredisk-csi-1.34 | affected | wolfi | azuredisk-csi-1.34 | — |
| azuredisk-csi-1.34 | affected | chainguard | azuredisk-csi-1.34 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| azuredisk-csi-fips-1.30 | affected | chainguard | azuredisk-csi-fips-1.30 | — |
| azuredisk-csi-fips-1.31 | affected | chainguard | azuredisk-csi-fips-1.31 | — |
| azuredisk-csi-fips-1.32 | affected | chainguard | azuredisk-csi-fips-1.32 | — |
| azuredisk-csi-fips-1.33 | affected | chainguard | azuredisk-csi-fips-1.33 | — |
| azuredisk-csi-fips-1.34 | affected | chainguard | azuredisk-csi-fips-1.34 | — |
| azurefile-csi-1.29 | affected | chainguard | azurefile-csi-1.29 | — |
| azurefile-csi-1.30 | affected | chainguard | azurefile-csi-1.30 | — |
| azurefile-csi-1.31 | affected | chainguard | azurefile-csi-1.31 | — |
| azurefile-csi-1.32 | affected | chainguard | azurefile-csi-1.32 | — |
| azurefile-csi-1.33 | affected | chainguard | azurefile-csi-1.33 | — |
| azurefile-csi-1.34 | affected | chainguard | azurefile-csi-1.34 | — |
| azurefile-csi-1.35 | affected | wolfi | azurefile-csi-1.35 | — |
| azurefile-csi-1.35 | affected | chainguard | azurefile-csi-1.35 | — |
| azurefile-csi-fips-1.29 | affected | chainguard | azurefile-csi-fips-1.29 | — |
| azurefile-csi-fips-1.30 | affected | chainguard | azurefile-csi-fips-1.30 | — |
| azurefile-csi-fips-1.31 | affected | chainguard | azurefile-csi-fips-1.31 | — |
| azurefile-csi-fips-1.32 | affected | chainguard | azurefile-csi-fips-1.32 | — |
| azurefile-csi-fips-1.33 | affected | chainguard | azurefile-csi-fips-1.33 | — |
| azurefile-csi-fips-1.34 | affected | chainguard | azurefile-csi-fips-1.34 | — |
| azurefile-csi-fips-1.35 | affected | chainguard | azurefile-csi-fips-1.35 | — |
| blob-csi-1.23 | affected | chainguard | blob-csi-1.23 | — |
| blob-csi-1.24 | affected | chainguard | blob-csi-1.24 | — |
| blob-csi-1.25 | affected | chainguard | blob-csi-1.25 | — |
| blob-csi-1.26 | affected | chainguard | blob-csi-1.26 | — |
| blob-csi-1.27 | affected | chainguard | blob-csi-1.27 | — |
| blob-csi-1.27 | affected | wolfi | blob-csi-1.27 | — |
| blob-csi-fips-1.23 | affected | chainguard | blob-csi-fips-1.23 | — |
| blob-csi-fips-1.24 | affected | chainguard | blob-csi-fips-1.24 | — |
| blob-csi-fips-1.25 | affected | chainguard | blob-csi-fips-1.25 | — |
| blob-csi-fips-1.26 | affected | chainguard | blob-csi-fips-1.26 | — |
| blob-csi-fips-1.27 | affected | chainguard | blob-csi-fips-1.27 | — |
| calico-3.29 | affected | chainguard | calico-3.29 | — |
| calico-3.30 | affected | chainguard | calico-3.30 | — |
| calico-3.31 | affected | chainguard | calico-3.31 | — |
| calico-3.31 | affected | wolfi | calico-3.31 | — |
| calico-3.32 | affected | chainguard | calico-3.32 | — |
| calico-3.32 | affected | wolfi | calico-3.32 | — |
| calico-fips-3.29 | affected | chainguard | calico-fips-3.29 | — |
| calico-fips-3.30 | affected | chainguard | calico-fips-3.30 | — |
| calico-fips-3.31 | affected | chainguard | calico-fips-3.31 | — |
| calico-fips-3.32 | affected | chainguard | calico-fips-3.32 | — |
| cephcsi | affected | chainguard | cephcsi | — |
| cephcsi-fips | affected | chainguard | cephcsi-fips | — |
| cloud-provider-gcp-cloud-controller-manager | affected | wolfi | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager | affected | chainguard | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager-fips | affected | chainguard | cloud-provider-gcp-cloud-controller-manager-fips | — |
| cluster-autoscaler-1.31 | affected | chainguard | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.33 | affected | chainguard | cluster-autoscaler-1.33 | — |
| cluster-autoscaler-1.34 | affected | wolfi | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.34 | affected | chainguard | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.35 | affected | chainguard | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-1.35 | affected | wolfi | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-fips-1.31 | affected | chainguard | cluster-autoscaler-fips-1.31 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| cluster-autoscaler-fips-1.33 | affected | chainguard | cluster-autoscaler-fips-1.33 | — |
| cluster-autoscaler-fips-1.34 | affected | chainguard | cluster-autoscaler-fips-1.34 | — |
| cluster-autoscaler-fips-1.35 | affected | chainguard | cluster-autoscaler-fips-1.35 | — |
| docker-machine-driver-harvester | affected | chainguard | docker-machine-driver-harvester | — |
| docker-machine-driver-harvester | affected | wolfi | docker-machine-driver-harvester | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-1.33 | affected | chainguard | eks-distro-1.33 | — |
| eks-distro-1.34 | affected | chainguard | eks-distro-1.34 | — |
| eks-distro-1.35 | affected | chainguard | eks-distro-1.35 | — |
| eks-distro-1.36 | affected | chainguard | eks-distro-1.36 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| eks-distro-fips-1.33 | affected | chainguard | eks-distro-fips-1.33 | — |
| eks-distro-fips-1.34 | affected | chainguard | eks-distro-fips-1.34 | — |
| eks-distro-fips-1.35 | affected | chainguard | eks-distro-fips-1.35 | — |
| eks-distro-fips-1.36 | affected | chainguard | eks-distro-fips-1.36 | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| harvester | affected | chainguard | harvester | — |
| harvester-fips | affected | chainguard | harvester-fips | — |
| helm-fips | affected | chainguard | helm-fips | — |
| helm-fips-3 | affected | chainguard | helm-fips-3 | — |
| helm-fips-4 | affected | chainguard | helm-fips-4 | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| kapp | affected | chainguard | kapp | — |
| kapp | affected | wolfi | kapp | — |
| kapp-fips | affected | chainguard | kapp-fips | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kube-conformance-1.32 | affected | chainguard | kube-conformance-1.32 | — |
| kube-conformance-1.33 | affected | chainguard | kube-conformance-1.33 | — |
| kube-conformance-1.34 | affected | chainguard | kube-conformance-1.34 | — |
| kube-conformance-1.35 | affected | chainguard | kube-conformance-1.35 | — |
| kube-conformance-1.36 | affected | chainguard | kube-conformance-1.36 | — |
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.30 | affected | wolfi | kubernetes-1.30 | — |
| kubernetes-1.30 | affected | chainguard | kubernetes-1.30 | — |
| kubernetes-1.31 | affected | wolfi | kubernetes-1.31 | — |
| kubernetes-1.31 | affected | chainguard | kubernetes-1.31 | — |
| kubernetes-1.32 | affected | chainguard | kubernetes-1.32 | — |
| kubernetes-1.32 | affected | wolfi | kubernetes-1.32 | — |
| kubernetes-1.33 | affected | wolfi | kubernetes-1.33 | — |
| kubernetes-1.33 | affected | chainguard | kubernetes-1.33 | — |
| kubernetes-1.34 | affected | wolfi | kubernetes-1.34 | — |
| kubernetes-1.34 | affected | chainguard | kubernetes-1.34 | — |
| kubernetes-1.35 | affected | chainguard | kubernetes-1.35 | — |
| kubernetes-1.35 | affected | wolfi | kubernetes-1.35 | — |
| kubernetes-1.36 | affected | chainguard | kubernetes-1.36 | — |
| kubernetes-1.36 | affected | wolfi | kubernetes-1.36 | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache-fips | affected | chainguard | kubernetes-dns-node-cache-fips | — |
| kubernetes-fips-1.31 | affected | chainguard | kubernetes-fips-1.31 | — |
| kubernetes-fips-1.32 | affected | chainguard | kubernetes-fips-1.32 | — |
| kubernetes-fips-1.33 | affected | chainguard | kubernetes-fips-1.33 | — |
| kubernetes-fips-1.34 | affected | chainguard | kubernetes-fips-1.34 | — |
| kubernetes-fips-1.35 | affected | chainguard | kubernetes-fips-1.35 | — |
| kubernetes-fips-1.36 | affected | chainguard | kubernetes-fips-1.36 | — |
| local-static-provisioner | affected | wolfi | local-static-provisioner | — |
| local-static-provisioner | affected | chainguard | local-static-provisioner | — |
| local-static-provisioner-fips | affected | chainguard | local-static-provisioner-fips | — |
| longhorn-manager-1.10 | affected | chainguard | longhorn-manager-1.10 | — |
| longhorn-manager-1.11 | affected | chainguard | longhorn-manager-1.11 | — |
| longhorn-manager-1.12 | affected | chainguard | longhorn-manager-1.12 | — |
| longhorn-manager-1.8 | affected | chainguard | longhorn-manager-1.8 | — |
| longhorn-manager-1.9 | affected | chainguard | longhorn-manager-1.9 | — |
| longhorn-manager-fips-1.10 | affected | chainguard | longhorn-manager-fips-1.10 | — |
| longhorn-manager-fips-1.11 | affected | chainguard | longhorn-manager-fips-1.11 | — |
| longhorn-manager-fips-1.12 | affected | chainguard | longhorn-manager-fips-1.12 | — |
| longhorn-manager-fips-1.8 | affected | chainguard | longhorn-manager-fips-1.8 | — |
| longhorn-manager-fips-1.9 | affected | chainguard | longhorn-manager-fips-1.9 | — |
| longhorn-share-manager-1.10 | affected | chainguard | longhorn-share-manager-1.10 | — |
| longhorn-share-manager-1.11 | affected | chainguard | longhorn-share-manager-1.11 | — |
| longhorn-share-manager-1.12 | affected | chainguard | longhorn-share-manager-1.12 | — |
| longhorn-share-manager-1.8 | affected | chainguard | longhorn-share-manager-1.8 | — |
| longhorn-share-manager-1.9 | affected | chainguard | longhorn-share-manager-1.9 | — |
| longhorn-share-manager-fips-1.10 | affected | chainguard | longhorn-share-manager-fips-1.10 | — |
| longhorn-share-manager-fips-1.11 | affected | chainguard | longhorn-share-manager-fips-1.11 | — |
| longhorn-share-manager-fips-1.12 | affected | chainguard | longhorn-share-manager-fips-1.12 | — |
| longhorn-share-manager-fips-1.8 | affected | chainguard | longhorn-share-manager-fips-1.8 | — |
| longhorn-share-manager-fips-1.9 | affected | chainguard | longhorn-share-manager-fips-1.9 | — |
| mesosphere-vsphere-csi | affected | wolfi | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi | affected | chainguard | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi-fips | affected | chainguard | mesosphere-vsphere-csi-fips | — |
| node-feature-discovery-0.16 | affected | chainguard | node-feature-discovery-0.16 | — |
| node-feature-discovery-0.17 | affected | chainguard | node-feature-discovery-0.17 | — |
| node-feature-discovery-0.18 | affected | wolfi | node-feature-discovery-0.18 | — |
| node-feature-discovery-0.18 | affected | chainguard | node-feature-discovery-0.18 | — |
| node-feature-discovery-fips-0.16 | affected | chainguard | node-feature-discovery-fips-0.16 | — |
| node-feature-discovery-fips-0.17 | affected | chainguard | node-feature-discovery-fips-0.17 | — |
| node-feature-discovery-fips-0.18 | affected | chainguard | node-feature-discovery-fips-0.18 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint-fips | affected | chainguard | nodetaint-fips | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-2.12 | affected | chainguard | rancher-2.12 | — |
| rancher-2.13 | affected | chainguard | rancher-2.13 | — |
| rancher-2.13 | affected | wolfi | rancher-2.13 | — |
| rancher-2.14 | affected | wolfi | rancher-2.14 | — |
| rancher-2.14 | affected | chainguard | rancher-2.14 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.12 | affected | chainguard | rancher-agent-2.12 | — |
| rancher-agent-2.13 | affected | wolfi | rancher-agent-2.13 | — |
| rancher-agent-2.13 | affected | chainguard | rancher-agent-2.13 | — |
| rancher-agent-2.14 | affected | chainguard | rancher-agent-2.14 | — |
| rancher-agent-2.14 | affected | wolfi | rancher-agent-2.14 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet-fips | affected | chainguard | rancher-fleet-fips | — |
| rancher-support-bundle-kit | affected | chainguard | rancher-support-bundle-kit | — |
| rancher-system-agent | affected | chainguard | rancher-system-agent | — |
| rancher-system-agent | affected | wolfi | rancher-system-agent | — |
| rancher-system-upgrade-controller | affected | chainguard | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller | affected | wolfi | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller-fips | affected | chainguard | rancher-system-upgrade-controller-fips | — |
| rancher-webhook-0.10 | affected | wolfi | rancher-webhook-0.10 | — |
| rancher-webhook-0.10 | affected | chainguard | rancher-webhook-0.10 | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-0.9 | affected | chainguard | rancher-webhook-0.9 | — |
| rancher-webhook-0.9 | affected | wolfi | rancher-webhook-0.9 | — |
| rancher-webhook-fips-0.10 | affected | chainguard | rancher-webhook-fips-0.10 | — |
| rancher-webhook-fips-0.9 | affected | chainguard | rancher-webhook-fips-0.9 | — |
| rke2-runtime-fips-1.32 | affected | chainguard | rke2-runtime-fips-1.32 | — |
| rke2-runtime-fips-1.33 | affected | chainguard | rke2-runtime-fips-1.33 | — |
| rke2-runtime-fips-1.34 | affected | chainguard | rke2-runtime-fips-1.34 | — |
| rke2-runtime-fips-1.35 | affected | chainguard | rke2-runtime-fips-1.35 | — |
| rke2-runtime-fips-1.36 | affected | chainguard | rke2-runtime-fips-1.36 | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator-fips | affected | chainguard | spark-operator-fips | — |
| vcluster | affected | chainguard | vcluster | — |
| vcluster | affected | wolfi | vcluster | — |
| vcluster-fips | affected | chainguard | vcluster-fips | — |
| volcano | affected | chainguard | volcano | — |
| volcano-fips | affected | chainguard | volcano-fips | — |
| yunikorn-k8shim | affected | chainguard | yunikorn-k8shim | — |
| yunikorn-k8shim | affected | wolfi | yunikorn-k8shim | — |
| yunikorn-k8shim-fips | affected | chainguard | yunikorn-k8shim-fips | — |
kubernetes1.29-apiserver-1.29.15-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes1.29 | affected | openSUSE:Tumbleweed | kubernetes1.29 | — |
kubernetes1.30-apiserver-1.30.11-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes1.30 | affected | openSUSE:Tumbleweed | kubernetes1.30 | — |
kubernetes1.31-apiserver-1.31.7-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes1.31 | affected | openSUSE:Tumbleweed | kubernetes1.31 | — |
kubernetes1.32-apiserver-1.32.3-1.1 on GA media
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes1.32 | affected | openSUSE:Tumbleweed | kubernetes1.32 | — |
Kubernetes GitRepo Volume Inadvertent Local Repository Access
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-cd-2.10 | affected | chainguard | argo-cd-2.10 | — |
| argo-cd-2.10 | affected | wolfi | argo-cd-2.10 | — |
| argo-cd-2.11 | affected | wolfi | argo-cd-2.11 | — |
| argo-cd-2.11 | affected | chainguard | argo-cd-2.11 | — |
| argo-cd-2.12 | affected | chainguard | argo-cd-2.12 | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | wolfi | argo-cd-2.14 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-3.0 | affected | chainguard | argo-cd-3.0 | — |
| argo-cd-3.0 | affected | wolfi | argo-cd-3.0 | — |
| argo-cd-3.1 | affected | wolfi | argo-cd-3.1 | — |
| argo-cd-3.1 | affected | chainguard | argo-cd-3.1 | — |
| argo-cd-3.2 | affected | wolfi | argo-cd-3.2 | — |
| argo-cd-3.2 | affected | chainguard | argo-cd-3.2 | — |
| argo-cd-3.3 | affected | wolfi | argo-cd-3.3 | — |
| argo-cd-3.3 | affected | chainguard | argo-cd-3.3 | — |
| argo-cd-3.4 | affected | wolfi | argo-cd-3.4 | — |
| argo-cd-3.4 | affected | chainguard | argo-cd-3.4 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.11 | affected | chainguard | argo-cd-fips-2.11 | — |
| argo-cd-fips-2.12 | affected | chainguard | argo-cd-fips-2.12 | — |
| argo-cd-fips-2.13 | affected | chainguard | argo-cd-fips-2.13 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argo-cd-fips-3.0 | affected | chainguard | argo-cd-fips-3.0 | — |
| argo-cd-fips-3.1 | affected | chainguard | argo-cd-fips-3.1 | — |
| argo-cd-fips-3.2 | affected | chainguard | argo-cd-fips-3.2 | — |
| argo-cd-fips-3.3 | affected | chainguard | argo-cd-fips-3.3 | — |
| argo-cd-fips-3.4 | affected | chainguard | argo-cd-fips-3.4 | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| azure-container-networking | affected | chainguard | azure-container-networking | — |
| azuredisk-csi-1.28 | affected | chainguard | azuredisk-csi-1.28 | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-1.30 | affected | chainguard | azuredisk-csi-1.30 | — |
| azuredisk-csi-1.31 | affected | wolfi | azuredisk-csi-1.31 | — |
| azuredisk-csi-1.31 | affected | chainguard | azuredisk-csi-1.31 | — |
| azuredisk-csi-1.32 | affected | chainguard | azuredisk-csi-1.32 | — |
| azuredisk-csi-1.33 | affected | chainguard | azuredisk-csi-1.33 | — |
| azuredisk-csi-1.33 | affected | wolfi | azuredisk-csi-1.33 | — |
| azuredisk-csi-1.34 | affected | chainguard | azuredisk-csi-1.34 | — |
| azuredisk-csi-1.34 | affected | wolfi | azuredisk-csi-1.34 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| azuredisk-csi-fips-1.30 | affected | chainguard | azuredisk-csi-fips-1.30 | — |
| azuredisk-csi-fips-1.31 | affected | chainguard | azuredisk-csi-fips-1.31 | — |
| azuredisk-csi-fips-1.32 | affected | chainguard | azuredisk-csi-fips-1.32 | — |
| azuredisk-csi-fips-1.33 | affected | chainguard | azuredisk-csi-fips-1.33 | — |
| azuredisk-csi-fips-1.34 | affected | chainguard | azuredisk-csi-fips-1.34 | — |
| azurefile-csi-1.29 | affected | chainguard | azurefile-csi-1.29 | — |
| azurefile-csi-1.30 | affected | chainguard | azurefile-csi-1.30 | — |
| azurefile-csi-1.31 | affected | chainguard | azurefile-csi-1.31 | — |
| azurefile-csi-1.32 | affected | chainguard | azurefile-csi-1.32 | — |
| azurefile-csi-1.32 | affected | wolfi | azurefile-csi-1.32 | — |
| azurefile-csi-1.33 | affected | chainguard | azurefile-csi-1.33 | — |
| azurefile-csi-1.33 | affected | wolfi | azurefile-csi-1.33 | — |
| azurefile-csi-1.34 | affected | chainguard | azurefile-csi-1.34 | — |
| azurefile-csi-1.34 | affected | wolfi | azurefile-csi-1.34 | — |
| azurefile-csi-1.35 | affected | chainguard | azurefile-csi-1.35 | — |
| azurefile-csi-1.35 | affected | wolfi | azurefile-csi-1.35 | — |
| azurefile-csi-fips-1.29 | affected | chainguard | azurefile-csi-fips-1.29 | — |
| azurefile-csi-fips-1.30 | affected | chainguard | azurefile-csi-fips-1.30 | — |
| azurefile-csi-fips-1.31 | affected | chainguard | azurefile-csi-fips-1.31 | — |
| azurefile-csi-fips-1.32 | affected | chainguard | azurefile-csi-fips-1.32 | — |
| azurefile-csi-fips-1.33 | affected | chainguard | azurefile-csi-fips-1.33 | — |
| azurefile-csi-fips-1.34 | affected | chainguard | azurefile-csi-fips-1.34 | — |
| azurefile-csi-fips-1.35 | affected | chainguard | azurefile-csi-fips-1.35 | — |
| blob-csi-1.23 | affected | chainguard | blob-csi-1.23 | — |
| blob-csi-1.24 | affected | chainguard | blob-csi-1.24 | — |
| blob-csi-1.25 | affected | chainguard | blob-csi-1.25 | — |
| blob-csi-1.26 | affected | chainguard | blob-csi-1.26 | — |
| blob-csi-1.26 | affected | wolfi | blob-csi-1.26 | — |
| blob-csi-1.27 | affected | chainguard | blob-csi-1.27 | — |
| blob-csi-1.27 | affected | wolfi | blob-csi-1.27 | — |
| blob-csi-fips-1.23 | affected | chainguard | blob-csi-fips-1.23 | — |
| blob-csi-fips-1.24 | affected | chainguard | blob-csi-fips-1.24 | — |
| blob-csi-fips-1.25 | affected | chainguard | blob-csi-fips-1.25 | — |
| blob-csi-fips-1.26 | affected | chainguard | blob-csi-fips-1.26 | — |
| blob-csi-fips-1.27 | affected | chainguard | blob-csi-fips-1.27 | — |
| calico-3.27 | affected | chainguard | calico-3.27 | — |
| calico-3.28 | affected | wolfi | calico-3.28 | — |
| calico-3.28 | affected | chainguard | calico-3.28 | — |
| calico-3.29 | affected | chainguard | calico-3.29 | — |
| calico-3.29 | affected | wolfi | calico-3.29 | — |
| calico-3.30 | affected | wolfi | calico-3.30 | — |
| calico-3.30 | affected | chainguard | calico-3.30 | — |
| calico-3.31 | affected | chainguard | calico-3.31 | — |
| calico-3.31 | affected | wolfi | calico-3.31 | — |
| calico-3.32 | affected | chainguard | calico-3.32 | — |
| calico-3.32 | affected | wolfi | calico-3.32 | — |
| calico-fips-3.27 | affected | chainguard | calico-fips-3.27 | — |
| calico-fips-3.28 | affected | chainguard | calico-fips-3.28 | — |
| calico-fips-3.29 | affected | chainguard | calico-fips-3.29 | — |
| calico-fips-3.30 | affected | chainguard | calico-fips-3.30 | — |
| calico-fips-3.31 | affected | chainguard | calico-fips-3.31 | — |
| calico-fips-3.32 | affected | chainguard | calico-fips-3.32 | — |
| cephcsi | affected | chainguard | cephcsi | — |
| cephcsi-fips | affected | chainguard | cephcsi-fips | — |
| cloud-provider-gcp-cloud-controller-manager | affected | chainguard | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager | affected | wolfi | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager-fips | affected | chainguard | cloud-provider-gcp-cloud-controller-manager-fips | — |
| cluster-autoscaler-1.28 | affected | wolfi | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.28 | affected | chainguard | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.30 | affected | chainguard | cluster-autoscaler-1.30 | — |
| cluster-autoscaler-1.30 | affected | wolfi | cluster-autoscaler-1.30 | — |
| cluster-autoscaler-1.31 | affected | wolfi | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.31 | affected | chainguard | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.32 | affected | wolfi | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.33 | affected | chainguard | cluster-autoscaler-1.33 | — |
| cluster-autoscaler-1.33 | affected | wolfi | cluster-autoscaler-1.33 | — |
| cluster-autoscaler-1.34 | affected | chainguard | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.34 | affected | wolfi | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.35 | affected | chainguard | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-1.35 | affected | wolfi | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| cluster-autoscaler-fips-1.29 | affected | chainguard | cluster-autoscaler-fips-1.29 | — |
| cluster-autoscaler-fips-1.30 | affected | chainguard | cluster-autoscaler-fips-1.30 | — |
| cluster-autoscaler-fips-1.31 | affected | chainguard | cluster-autoscaler-fips-1.31 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| cluster-autoscaler-fips-1.33 | affected | chainguard | cluster-autoscaler-fips-1.33 | — |
| cluster-autoscaler-fips-1.34 | affected | chainguard | cluster-autoscaler-fips-1.34 | — |
| cluster-autoscaler-fips-1.35 | affected | chainguard | cluster-autoscaler-fips-1.35 | — |
| docker-machine-driver-harvester | affected | wolfi | docker-machine-driver-harvester | — |
| docker-machine-driver-harvester | affected | chainguard | docker-machine-driver-harvester | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-1.33 | affected | chainguard | eks-distro-1.33 | — |
| eks-distro-1.34 | affected | chainguard | eks-distro-1.34 | — |
| eks-distro-1.35 | affected | chainguard | eks-distro-1.35 | — |
| eks-distro-1.36 | affected | chainguard | eks-distro-1.36 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| eks-distro-fips-1.33 | affected | chainguard | eks-distro-fips-1.33 | — |
| eks-distro-fips-1.34 | affected | chainguard | eks-distro-fips-1.34 | — |
| eks-distro-fips-1.35 | affected | chainguard | eks-distro-fips-1.35 | — |
| eks-distro-fips-1.36 | affected | chainguard | eks-distro-fips-1.36 | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| emissary-fips | affected | chainguard | emissary-fips | — |
| harvester | affected | chainguard | harvester | — |
| harvester-fips | affected | chainguard | harvester-fips | — |
| helm-fips | affected | chainguard | helm-fips | — |
| helm-fips-3 | affected | chainguard | helm-fips-3 | — |
| helm-fips-4 | affected | chainguard | helm-fips-4 | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| kapp | affected | chainguard | kapp | — |
| kapp | affected | wolfi | kapp | — |
| kapp-fips | affected | chainguard | kapp-fips | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| kube-conformance-1.32 | affected | chainguard | kube-conformance-1.32 | — |
| kube-conformance-1.33 | affected | chainguard | kube-conformance-1.33 | — |
| kube-conformance-1.34 | affected | chainguard | kube-conformance-1.34 | — |
| kube-conformance-1.35 | affected | chainguard | kube-conformance-1.35 | — |
| kube-conformance-1.36 | affected | chainguard | kube-conformance-1.36 | — |
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.30 | affected | wolfi | kubernetes-1.30 | — |
| kubernetes-1.30 | affected | chainguard | kubernetes-1.30 | — |
| kubernetes-1.31 | affected | wolfi | kubernetes-1.31 | — |
| kubernetes-1.31 | affected | chainguard | kubernetes-1.31 | — |
| kubernetes-1.32 | affected | wolfi | kubernetes-1.32 | — |
| kubernetes-1.32 | affected | chainguard | kubernetes-1.32 | — |
| kubernetes-1.33 | affected | chainguard | kubernetes-1.33 | — |
| kubernetes-1.33 | affected | wolfi | kubernetes-1.33 | — |
| kubernetes-1.34 | affected | wolfi | kubernetes-1.34 | — |
| kubernetes-1.34 | affected | chainguard | kubernetes-1.34 | — |
| kubernetes-1.35 | affected | wolfi | kubernetes-1.35 | — |
| kubernetes-1.35 | affected | chainguard | kubernetes-1.35 | — |
| kubernetes-1.36 | affected | wolfi | kubernetes-1.36 | — |
| kubernetes-1.36 | affected | chainguard | kubernetes-1.36 | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache-fips | affected | chainguard | kubernetes-dns-node-cache-fips | — |
| kubernetes-fips-1.31 | affected | chainguard | kubernetes-fips-1.31 | — |
| kubernetes-fips-1.32 | affected | chainguard | kubernetes-fips-1.32 | — |
| kubernetes-fips-1.33 | affected | chainguard | kubernetes-fips-1.33 | — |
| kubernetes-fips-1.34 | affected | chainguard | kubernetes-fips-1.34 | — |
| kubernetes-fips-1.35 | affected | chainguard | kubernetes-fips-1.35 | — |
| kubernetes-fips-1.36 | affected | chainguard | kubernetes-fips-1.36 | — |
| local-static-provisioner | affected | wolfi | local-static-provisioner | — |
| local-static-provisioner | affected | chainguard | local-static-provisioner | — |
| local-static-provisioner-fips | affected | chainguard | local-static-provisioner-fips | — |
| longhorn-manager-1.10 | affected | chainguard | longhorn-manager-1.10 | — |
| longhorn-manager-1.11 | affected | chainguard | longhorn-manager-1.11 | — |
| longhorn-manager-1.12 | affected | chainguard | longhorn-manager-1.12 | — |
| longhorn-manager-1.8 | affected | chainguard | longhorn-manager-1.8 | — |
| longhorn-manager-1.9 | affected | chainguard | longhorn-manager-1.9 | — |
| longhorn-manager-fips-1.10 | affected | chainguard | longhorn-manager-fips-1.10 | — |
| longhorn-manager-fips-1.11 | affected | chainguard | longhorn-manager-fips-1.11 | — |
| longhorn-manager-fips-1.12 | affected | chainguard | longhorn-manager-fips-1.12 | — |
| longhorn-manager-fips-1.8 | affected | chainguard | longhorn-manager-fips-1.8 | — |
| longhorn-manager-fips-1.9 | affected | chainguard | longhorn-manager-fips-1.9 | — |
| longhorn-share-manager-1.10 | affected | chainguard | longhorn-share-manager-1.10 | — |
| longhorn-share-manager-1.11 | affected | chainguard | longhorn-share-manager-1.11 | — |
| longhorn-share-manager-1.12 | affected | chainguard | longhorn-share-manager-1.12 | — |
| longhorn-share-manager-1.8 | affected | chainguard | longhorn-share-manager-1.8 | — |
| longhorn-share-manager-1.9 | affected | chainguard | longhorn-share-manager-1.9 | — |
| longhorn-share-manager-fips-1.10 | affected | chainguard | longhorn-share-manager-fips-1.10 | — |
| longhorn-share-manager-fips-1.11 | affected | chainguard | longhorn-share-manager-fips-1.11 | — |
| longhorn-share-manager-fips-1.12 | affected | chainguard | longhorn-share-manager-fips-1.12 | — |
| longhorn-share-manager-fips-1.8 | affected | chainguard | longhorn-share-manager-fips-1.8 | — |
| longhorn-share-manager-fips-1.9 | affected | chainguard | longhorn-share-manager-fips-1.9 | — |
| mesosphere-vsphere-csi | affected | chainguard | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi | affected | wolfi | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi-fips | affected | chainguard | mesosphere-vsphere-csi-fips | — |
| node-feature-discovery-0.15 | affected | chainguard | node-feature-discovery-0.15 | — |
| node-feature-discovery-0.15 | affected | wolfi | node-feature-discovery-0.15 | — |
| node-feature-discovery-0.16 | affected | chainguard | node-feature-discovery-0.16 | — |
| node-feature-discovery-0.16 | affected | wolfi | node-feature-discovery-0.16 | — |
| node-feature-discovery-0.17 | affected | chainguard | node-feature-discovery-0.17 | — |
| node-feature-discovery-0.17 | affected | wolfi | node-feature-discovery-0.17 | — |
| node-feature-discovery-0.18 | affected | chainguard | node-feature-discovery-0.18 | — |
| node-feature-discovery-0.18 | affected | wolfi | node-feature-discovery-0.18 | — |
| node-feature-discovery-fips-0.16 | affected | chainguard | node-feature-discovery-fips-0.16 | — |
| node-feature-discovery-fips-0.17 | affected | chainguard | node-feature-discovery-fips-0.17 | — |
| node-feature-discovery-fips-0.18 | affected | chainguard | node-feature-discovery-fips-0.18 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint-fips | affected | chainguard | nodetaint-fips | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.10 | affected | wolfi | rancher-2.10 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-2.11 | affected | wolfi | rancher-2.11 | — |
| rancher-2.12 | affected | chainguard | rancher-2.12 | — |
| rancher-2.13 | affected | chainguard | rancher-2.13 | — |
| rancher-2.13 | affected | wolfi | rancher-2.13 | — |
| rancher-2.14 | affected | wolfi | rancher-2.14 | — |
| rancher-2.14 | affected | chainguard | rancher-2.14 | — |
| rancher-2.8 | affected | wolfi | rancher-2.8 | — |
| rancher-2.8 | affected | chainguard | rancher-2.8 | — |
| rancher-agent-2.10 | affected | wolfi | rancher-agent-2.10 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.11 | affected | wolfi | rancher-agent-2.11 | — |
| rancher-agent-2.12 | affected | chainguard | rancher-agent-2.12 | — |
| rancher-agent-2.13 | affected | wolfi | rancher-agent-2.13 | — |
| rancher-agent-2.13 | affected | chainguard | rancher-agent-2.13 | — |
| rancher-agent-2.14 | affected | chainguard | rancher-agent-2.14 | — |
| rancher-agent-2.14 | affected | wolfi | rancher-agent-2.14 | — |
| rancher-agent-2.8 | affected | chainguard | rancher-agent-2.8 | — |
| rancher-agent-2.9 | affected | wolfi | rancher-agent-2.9 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet-fips | affected | chainguard | rancher-fleet-fips | — |
| rancher-support-bundle-kit | affected | chainguard | rancher-support-bundle-kit | — |
| rancher-system-agent | affected | chainguard | rancher-system-agent | — |
| rancher-system-agent | affected | wolfi | rancher-system-agent | — |
| rancher-system-upgrade-controller | affected | wolfi | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller | affected | chainguard | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller-fips | affected | chainguard | rancher-system-upgrade-controller-fips | — |
| rancher-webhook-0.10 | affected | wolfi | rancher-webhook-0.10 | — |
| rancher-webhook-0.10 | affected | chainguard | rancher-webhook-0.10 | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | wolfi | rancher-webhook-0.5 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-0.9 | affected | chainguard | rancher-webhook-0.9 | — |
| rancher-webhook-0.9 | affected | wolfi | rancher-webhook-0.9 | — |
| rancher-webhook-fips-0.10 | affected | chainguard | rancher-webhook-fips-0.10 | — |
| rancher-webhook-fips-0.9 | affected | chainguard | rancher-webhook-fips-0.9 | — |
| rke2-runtime-fips-1.32 | affected | chainguard | rke2-runtime-fips-1.32 | — |
| rke2-runtime-fips-1.33 | affected | chainguard | rke2-runtime-fips-1.33 | — |
| rke2-runtime-fips-1.34 | affected | chainguard | rke2-runtime-fips-1.34 | — |
| rke2-runtime-fips-1.35 | affected | chainguard | rke2-runtime-fips-1.35 | — |
| rke2-runtime-fips-1.36 | affected | chainguard | rke2-runtime-fips-1.36 | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator-fips | affected | chainguard | spark-operator-fips | — |
| vcluster | affected | chainguard | vcluster | — |
| vcluster | affected | wolfi | vcluster | — |
| vcluster-fips | affected | chainguard | vcluster-fips | — |
| volcano | affected | chainguard | volcano | — |
| volcano-fips | affected | chainguard | volcano-fips | — |
| yunikorn-k8shim | affected | wolfi | yunikorn-k8shim | — |
| yunikorn-k8shim | affected | chainguard | yunikorn-k8shim | — |
| yunikorn-k8shim-fips | affected | chainguard | yunikorn-k8shim-fips | — |
Kubernetes GitRepo Volume Inadvertent Local Repository Access
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
DEBIAN-CVE-2025-1767
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Debian:11 | kubernetes | — |
| kubernetes | affected | Debian:12 | kubernetes | — |
| kubernetes | affected | Debian:13 | kubernetes | — |
| kubernetes | affected | Debian:14 | kubernetes | — |
Kubernetes GitRepo Volume Inadvertent Local Repository Access
CVEs:CVE-2025-1767
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
Kubernetes GitRepo Volume Inadvertent Local Repository Access
CVEs:CVE-2025-1767
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstrea...
CVEs:CVE-2025-1767
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| dataplaneapi-fips | affected | chainguard | dataplaneapi-fips | — |
| getkin/kin-openapi | affected | github.com | github.com/getkin/kin-openapi | — |
| gitness | affected | chainguard | gitness | — |
| gitness | affected | wolfi | gitness | — |
| gptscript | affected | wolfi | gptscript | — |
| gptscript | affected | chainguard | gptscript | — |
| grafana-11.3 | affected | chainguard | grafana-11.3 | — |
| grafana-11.4 | affected | chainguard | grafana-11.4 | — |
| grafana-11.5 | affected | chainguard | grafana-11.5 | — |
| grafana-11.6 | affected | chainguard | grafana-11.6 | — |
| grafana-12.0 | affected | chainguard | grafana-12.0 | — |
| grafana-fips-11.4 | affected | chainguard | grafana-fips-11.4 | — |
| grafana-fips-11.5 | affected | chainguard | grafana-fips-11.5 | — |
| grafana-fips-11.6 | affected | chainguard | grafana-fips-11.6 | — |
| grafana-fips-12.0 | affected | chainguard | grafana-fips-12.0 | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela-fips | affected | chainguard | kubevela-fips | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| terraform-provider-kubernetes | affected | chainguard | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes | affected | wolfi | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes-fips | affected | chainguard | terraform-provider-kubernetes-fips | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| getkin/kin-openapi | affected | github.com | github.com/getkin/kin-openapi | — |
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi-fips | affected | chainguard | dataplaneapi-fips | — |
| getkin/kin-openapi | affected | github.com | github.com/getkin/kin-openapi | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gptscript | affected | chainguard | gptscript | — |
| gptscript | affected | wolfi | gptscript | — |
| grafana-10.4 | affected | chainguard | grafana-10.4 | — |
| grafana-10.4 | affected | wolfi | grafana-10.4 | — |
| grafana-11.0 | affected | wolfi | grafana-11.0 | — |
| grafana-11.0 | affected | chainguard | grafana-11.0 | — |
| grafana-11.2 | affected | wolfi | grafana-11.2 | — |
| grafana-11.2 | affected | chainguard | grafana-11.2 | — |
| grafana-11.3 | affected | chainguard | grafana-11.3 | — |
| grafana-11.3 | affected | wolfi | grafana-11.3 | — |
| grafana-11.4 | affected | wolfi | grafana-11.4 | — |
| grafana-11.4 | affected | chainguard | grafana-11.4 | — |
| grafana-11.5 | affected | wolfi | grafana-11.5 | — |
| grafana-11.5 | affected | chainguard | grafana-11.5 | — |
| grafana-11.6 | affected | chainguard | grafana-11.6 | — |
| grafana-11.6 | affected | wolfi | grafana-11.6 | — |
| grafana-12.0 | affected | chainguard | grafana-12.0 | — |
| grafana-12.0 | affected | wolfi | grafana-12.0 | — |
| grafana-fips-10.4 | affected | chainguard | grafana-fips-10.4 | — |
| grafana-fips-11.0 | affected | chainguard | grafana-fips-11.0 | — |
| grafana-fips-11.1 | affected | chainguard | grafana-fips-11.1 | — |
| grafana-fips-11.2 | affected | chainguard | grafana-fips-11.2 | — |
| grafana-fips-11.3 | affected | chainguard | grafana-fips-11.3 | — |
| grafana-fips-11.4 | affected | chainguard | grafana-fips-11.4 | — |
| grafana-fips-11.5 | affected | chainguard | grafana-fips-11.5 | — |
| grafana-fips-11.6 | affected | chainguard | grafana-fips-11.6 | — |
| grafana-fips-12.0 | affected | chainguard | grafana-fips-12.0 | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela-fips | affected | chainguard | kubevela-fips | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| terraform-provider-kubernetes | affected | wolfi | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes | affected | chainguard | terraform-provider-kubernetes | — |
| terraform-provider-kubernetes-fips | affected | chainguard | terraform-provider-kubernetes-fips | — |
| timoni | affected | chainguard | timoni | — |
| timoni | affected | wolfi | timoni | — |
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| checkov | affected | wolfi | checkov | — |
| checkov | affected | chainguard | checkov | — |
| grafana-oncall | affected | wolfi | grafana-oncall | — |
| grafana-oncall | affected | chainguard | grafana-oncall | — |
| jinja2 | affected | PyPI | jinja2 | — |
| Jinja2 | affected | PyPI | Jinja2 | — |
| Jinja2 | affected | PyPI | — | — |
| Jinja2 | affected | PyPI | Jinja2 | — |
| jupyter-base-notebook | affected | wolfi | jupyter-base-notebook | — |
| jupyter-base-notebook | affected | chainguard | jupyter-base-notebook | — |
| nemo | affected | chainguard | nemo | — |
| openstack-kolla-toolbox-2025.1 | affected | chainguard | openstack-kolla-toolbox-2025.1 | — |
| openstack-kolla-toolbox-2025.1-fips | affected | chainguard | openstack-kolla-toolbox-2025.1-fips | — |
| py3.10-torchvision-cuda-11.8 | affected | chainguard | py3.10-torchvision-cuda-11.8 | — |
| py3.10-torchvision-cuda-12.3 | affected | chainguard | py3.10-torchvision-cuda-12.3 | — |
| py3.10-vllm-cuda-11.8 | affected | chainguard | py3.10-vllm-cuda-11.8 | — |
| py3.10-vllm-cuda-12.6 | affected | chainguard | py3.10-vllm-cuda-12.6 | — |
| py3.11-torchaudio-cuda-12.3 | affected | chainguard | py3.11-torchaudio-cuda-12.3 | — |
| py3.11-torchvision-cuda-11.8 | affected | chainguard | py3.11-torchvision-cuda-11.8 | — |
| py3.11-torchvision-cuda-12.3 | affected | chainguard | py3.11-torchvision-cuda-12.3 | — |
| py3.12-torchvision-cuda-11.8 | affected | chainguard | py3.12-torchvision-cuda-11.8 | — |
| py3.12-torchvision-cuda-12.3 | affected | chainguard | py3.12-torchvision-cuda-12.3 | — |
| py3.9-torchvision-cuda-11.8 | affected | chainguard | py3.9-torchvision-cuda-11.8 | — |
| py3.9-torchvision-cuda-12.3 | affected | chainguard | py3.9-torchvision-cuda-12.3 | — |
| py3-torchvision-cuda-11.8 | affected | chainguard | py3-torchvision-cuda-11.8 | — |
| reflex | affected | wolfi | reflex | — |
| reflex | affected | chainguard | reflex | — |
| tensorflow-cpu-jupyter | affected | wolfi | tensorflow-cpu-jupyter | — |
| tensorflow-cpu-jupyter | affected | chainguard | tensorflow-cpu-jupyter | — |
| tensorflow-gpu-jupyter-2.18 | affected | chainguard | tensorflow-gpu-jupyter-2.18 | — |
| text-generation-inference | affected | chainguard | text-generation-inference | — |
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| jinja2 | affected | PyPI | jinja2 | — |
In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for expl...
CVEs:CVE-2025-0074
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0074
CVEs:CVE-2025-0075
In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for ...
CVEs:CVE-2025-0075
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
GHSA-mp7q-385v-fvgp
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
DEBIAN-CVE-2025-1915
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2025-1915
Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)
CVEs:CVE-2025-1915
Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome...
CVEs:CVE-2025-1915
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
DoS in go-jose Parsing in github.com/go-jose/go-jose
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | chainguard | aactl | — |
| aactl | affected | wolfi | aactl | — |
| apko | affected | chainguard | apko | — |
| apko | affected | wolfi | apko | — |
| argo-cd-2.11 | affected | chainguard | argo-cd-2.11 | — |
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildah | affected | chainguard | buildah | — |
| buildah | affected | wolfi | buildah | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| cert-manager-fips-1.17 | affected | chainguard | cert-manager-fips-1.17 | — |
| cert-manager-istio-csr | affected | wolfi | cert-manager-istio-csr | — |
| cert-manager-istio-csr | affected | chainguard | cert-manager-istio-csr | — |
| chainctl | affected | chainguard | chainctl | — |
| cilium-1.15 | affected | chainguard | cilium-1.15 | — |
| cilium-1.16 | affected | chainguard | cilium-1.16 | — |
| cilium-1.17 | affected | chainguard | cilium-1.17 | — |
| cilium-fips-1.15 | affected | chainguard | cilium-fips-1.15 | — |
| cilium-fips-1.16 | affected | chainguard | cilium-fips-1.16 | — |
| cilium-fips-1.17 | affected | chainguard | cilium-fips-1.17 | — |
| consul-1.18 | affected | chainguard | consul-1.18 | — |
| consul-1.19 | affected | chainguard | consul-1.19 | — |
| consul-1.20 | affected | chainguard | consul-1.20 | — |
| consul-fips-1.19 | affected | chainguard | consul-fips-1.19 | — |
| consul-fips-1.20 | affected | chainguard | consul-fips-1.20 | — |
| consul-k8s-1.1 | affected | chainguard | consul-k8s-1.1 | — |
| consul-k8s-1.3 | affected | chainguard | consul-k8s-1.3 | — |
| consul-k8s-1.4 | affected | chainguard | consul-k8s-1.4 | — |
| consul-k8s-1.5 | affected | chainguard | consul-k8s-1.5 | — |
| consul-k8s-1.6 | affected | chainguard | consul-k8s-1.6 | — |
| consul-k8s-fips-1.1 | affected | chainguard | consul-k8s-fips-1.1 | — |
| consul-k8s-fips-1.3 | affected | chainguard | consul-k8s-fips-1.3 | — |
| consul-k8s-fips-1.4 | affected | chainguard | consul-k8s-fips-1.4 | — |
| consul-k8s-fips-1.5 | affected | chainguard | consul-k8s-fips-1.5 | — |
| consul-k8s-fips-1.6 | affected | chainguard | consul-k8s-fips-1.6 | — |
| containerd-1 | affected | wolfi | containerd-1 | — |
| containerd-1 | affected | chainguard | containerd-1 | — |
| containerd-2 | affected | chainguard | containerd-2 | — |
| containerd-2 | affected | wolfi | containerd-2 | — |
| containerd-fips | affected | chainguard | containerd-fips | — |
| cosign | affected | chainguard | cosign | — |
| cosign | affected | wolfi | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| dagdotdev | affected | chainguard | dagdotdev | — |
| dagdotdev | affected | wolfi | dagdotdev | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-fips | affected | chainguard | dex-fips | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| distribution | affected | chainguard | distribution | — |
| distribution | affected | wolfi | distribution | — |
| distribution-fips | affected | chainguard | distribution-fips | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller-fips | affected | chainguard | flux-kustomize-controller-fips | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller-fips | affected | chainguard | flux-source-controller-fips | — |
| flyte | affected | wolfi | flyte | — |
| flyte | affected | chainguard | flyte | — |
| frp | affected | wolfi | frp | — |
| frp | affected | chainguard | frp | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| gatus | affected | chainguard | gatus | — |
| gatus | affected | wolfi | gatus | — |
| gitsign | affected | chainguard | gitsign | — |
| gitsign | affected | wolfi | gitsign | — |
| go-jose/go-jose | affected | github.com | github.com/go-jose/go-jose | — |
| go-jose/go-jose/v3 | affected | github.com | github.com/go-jose/go-jose/v3 | — |
| go-jose/go-jose/v4 | affected | github.com | github.com/go-jose/go-jose/v4 | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate-fips | affected | chainguard | gomplate-fips | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| grafana-11.3 | affected | chainguard | grafana-11.3 | — |
| grafana-11.4 | affected | chainguard | grafana-11.4 | — |
| grafana-11.5 | affected | chainguard | grafana-11.5 | — |
| grafana-12.0 | affected | chainguard | grafana-12.0 | — |
| grafana-alloy | affected | chainguard | grafana-alloy | — |
| grafana-alloy | affected | wolfi | grafana-alloy | — |
| grafana-alloy-fips | affected | chainguard | grafana-alloy-fips | — |
| grafana-fips-11.4 | affected | chainguard | grafana-fips-11.4 | — |
| grafana-fips-11.5 | affected | chainguard | grafana-fips-11.5 | — |
| grafana-fips-12.0 | affected | chainguard | grafana-fips-12.0 | — |
| grafana-mimir | affected | wolfi | grafana-mimir | — |
| grafana-mimir | affected | chainguard | grafana-mimir | — |
| grpc-health-probe | affected | chainguard | grpc-health-probe | — |
| grpc-health-probe | affected | wolfi | grpc-health-probe | — |
| grpc-health-probe-fips | affected | chainguard | grpc-health-probe-fips | — |
| guac | affected | wolfi | guac | — |
| guac | affected | chainguard | guac | — |
| harbor-2.11 | affected | chainguard | harbor-2.11 | — |
| harbor-2.12 | affected | chainguard | harbor-2.12 | — |
| harbor-fips-2.11 | affected | chainguard | harbor-fips-2.11 | — |
| harbor-fips-2.12 | affected | chainguard | harbor-fips-2.12 | — |
| harbor-registry | affected | chainguard | harbor-registry | — |
| harbor-registry | affected | wolfi | harbor-registry | — |
| harbor-registry-fips | affected | chainguard | harbor-registry-fips | — |
| hydra | affected | chainguard | hydra | — |
| hydra | affected | wolfi | hydra | — |
| istio-1.25 | affected | chainguard | istio-1.25 | — |
| istio-1.25 | affected | wolfi | istio-1.25 | — |
| istio-fips-1.25 | affected | chainguard | istio-fips-1.25 | — |
| istio-pilot-agent-1.22 | affected | chainguard | istio-pilot-agent-1.22 | — |
| istio-pilot-discovery-1.22 | affected | chainguard | istio-pilot-discovery-1.22 | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k3s-1.32 | affected | chainguard | k3s-1.32 | — |
| k3s-1.32 | affected | wolfi | k3s-1.32 | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| keda-2.16 | affected | chainguard | keda-2.16 | — |
| kiali | affected | wolfi | kiali | — |
| kiali | affected | chainguard | kiali | — |
| kiali-fips | affected | chainguard | kiali-fips | — |
| ko | affected | chainguard | ko | — |
| ko | affected | wolfi | ko | — |
| ko-fips | affected | chainguard | ko-fips | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| ksops | affected | wolfi | ksops | — |
| ksops | affected | chainguard | ksops | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubescape | affected | chainguard | kubescape | — |
| kubescape | affected | wolfi | kubescape | — |
| kyverno-1.13 | affected | chainguard | kyverno-1.13 | — |
| kyverno-fips-1.13 | affected | chainguard | kyverno-fips-1.13 | — |
| kyverno-notation-aws | affected | chainguard | kyverno-notation-aws | — |
| kyverno-notation-aws | affected | wolfi | kyverno-notation-aws | — |
| kyverno-notation-aws-fips | affected | chainguard | kyverno-notation-aws-fips | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter-fips | affected | chainguard | kyverno-policy-reporter-fips | — |
| melange | affected | chainguard | melange | — |
| melange | affected | wolfi | melange | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| neuvector-scanner | affected | wolfi | neuvector-scanner | — |
| neuvector-scanner | affected | chainguard | neuvector-scanner | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| octo-sts | affected | chainguard | octo-sts | — |
| octo-sts | affected | wolfi | octo-sts | — |
| openbao | affected | chainguard | openbao | — |
| openbao | affected | wolfi | openbao | — |
| openbao-fips | affected | chainguard | openbao-fips | — |
| opentelemetry-collector-contrib-fips | affected | chainguard | opentelemetry-collector-contrib-fips | — |
| opentofu-1.8 | affected | chainguard | opentofu-1.8 | — |
| opentofu-1.9 | affected | chainguard | opentofu-1.9 | — |
| opentofu-1.9 | affected | wolfi | opentofu-1.9 | — |
| opentofu-fips-1.8 | affected | chainguard | opentofu-fips-1.8 | — |
| opentofu-fips-1.9 | affected | chainguard | opentofu-fips-1.9 | — |
| packer | affected | chainguard | packer | — |
| packer-fips | affected | chainguard | packer-fips | — |
| podman | affected | chainguard | podman | — |
| podman | affected | wolfi | podman | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| prometheus-podman-exporter | affected | chainguard | prometheus-podman-exporter | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi | affected | wolfi | pulumi | — |
| rabbitmq-messaging-topology-operator | affected | wolfi | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator | affected | chainguard | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator-fips | affected | chainguard | rabbitmq-messaging-topology-operator-fips | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rekor | affected | chainguard | rekor | — |
| rekor | affected | wolfi | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| rook | affected | chainguard | rook | — |
| rook | affected | wolfi | rook | — |
| sftpgo | affected | wolfi | sftpgo | — |
| sftpgo | affected | chainguard | sftpgo | — |
| sftpgo-plugin-kms | affected | wolfi | sftpgo-plugin-kms | — |
| sftpgo-plugin-kms | affected | chainguard | sftpgo-plugin-kms | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| skopeo | affected | wolfi | skopeo | — |
| skopeo | affected | chainguard | skopeo | — |
| skopeo-fips | affected | chainguard | skopeo-fips | — |
| sops | affected | wolfi | sops | — |
| sops | affected | chainguard | sops | — |
| sops-fips | affected | chainguard | sops-fips | — |
| spiffe-helper | affected | wolfi | spiffe-helper | — |
| spiffe-helper | affected | chainguard | spiffe-helper | — |
| spiffe-helper-fips | affected | chainguard | spiffe-helper-fips | — |
| spire-controller-manager | affected | chainguard | spire-controller-manager | — |
| spire-controller-manager | affected | wolfi | spire-controller-manager | — |
| spire-controller-manager-fips | affected | chainguard | spire-controller-manager-fips | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
| splunk-otel-collector | affected | chainguard | splunk-otel-collector | — |
| splunk-otel-collector | affected | wolfi | splunk-otel-collector | — |
| splunk-otel-collector-fips | affected | chainguard | splunk-otel-collector-fips | — |
| square/go-jose | affected | github.com | github.com/square/go-jose | — |
| steampipe | affected | chainguard | steampipe | — |
| steampipe | affected | wolfi | steampipe | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca-fips | affected | chainguard | step-ca-fips | — |
| step-fips | affected | chainguard | step-fips | — |
| step-issuer | affected | chainguard | step-issuer | — |
| step-issuer | affected | wolfi | step-issuer | — |
| step-issuer-fips | affected | chainguard | step-issuer-fips | — |
| step-kms-plugin | affected | wolfi | step-kms-plugin | — |
| step-kms-plugin | affected | chainguard | step-kms-plugin | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains-fips | affected | chainguard | tekton-chains-fips | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terragrunt | affected | wolfi | terragrunt | — |
| terragrunt | affected | chainguard | terragrunt | — |
| tflint | affected | chainguard | tflint | — |
| tflint | affected | wolfi | tflint | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| tkn | affected | wolfi | tkn | — |
| tkn | affected | chainguard | tkn | — |
| tkn-fips | affected | chainguard | tkn-fips | — |
| traefik-2.11 | affected | chainguard | traefik-2.11 | — |
| traefik-3.3 | affected | wolfi | traefik-3.3 | — |
| traefik-3.3 | affected | chainguard | traefik-3.3 | — |
| traefik-fips-2.11 | affected | chainguard | traefik-fips-2.11 | — |
| trivy | affected | chainguard | trivy | — |
| trivy | affected | wolfi | trivy | — |
| trivy-fips | affected | chainguard | trivy-fips | — |
| trufflehog | affected | wolfi | trufflehog | — |
| trufflehog | affected | chainguard | trufflehog | — |
| trufflehog-fips | affected | chainguard | trufflehog-fips | — |
| undock | affected | chainguard | undock | — |
| undock | affected | wolfi | undock | — |
| vault-1.16 | affected | chainguard | vault-1.16 | — |
| vault-1.17 | affected | chainguard | vault-1.17 | — |
| vault-1.18 | affected | chainguard | vault-1.18 | — |
| vault-benchmark | affected | wolfi | vault-benchmark | — |
| vault-benchmark | affected | chainguard | vault-benchmark | — |
| vault-secrets-operator | affected | chainguard | vault-secrets-operator | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| weaviate | affected | chainguard | weaviate | — |
| weaviate | affected | wolfi | weaviate | — |
| wolfictl | affected | chainguard | wolfictl | — |
| wolfictl | affected | wolfi | wolfictl | — |
| zarf | affected | chainguard | zarf | — |
| zarf | affected | wolfi | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
CVEs:CVE-2025-22403
In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for ex...
CVEs:CVE-2025-22403
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-22408
In rfc_check_send_cmd of rfc_utils.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2025-22408
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-386727712
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
kubernetes security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | openEuler:24.03-LTS-SP1 | kubernetes | — |
kubernetes security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | openEuler:24.03-LTS | kubernetes | — |
Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-cd-2.13 | affected | chainguard | argo-cd-2.13 | — |
| argo-cd-2.14 | affected | chainguard | argo-cd-2.14 | — |
| argo-cd-fips-2.14 | affected | chainguard | argo-cd-fips-2.14 | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| azuredisk-csi-1.28 | affected | chainguard | azuredisk-csi-1.28 | — |
| azuredisk-csi-1.29 | affected | chainguard | azuredisk-csi-1.29 | — |
| azuredisk-csi-1.30 | affected | chainguard | azuredisk-csi-1.30 | — |
| azuredisk-csi-1.31 | affected | chainguard | azuredisk-csi-1.31 | — |
| azuredisk-csi-fips-1.28 | affected | chainguard | azuredisk-csi-fips-1.28 | — |
| azuredisk-csi-fips-1.29 | affected | chainguard | azuredisk-csi-fips-1.29 | — |
| azuredisk-csi-fips-1.30 | affected | chainguard | azuredisk-csi-fips-1.30 | — |
| azuredisk-csi-fips-1.31 | affected | chainguard | azuredisk-csi-fips-1.31 | — |
| calico-3.29 | affected | chainguard | calico-3.29 | — |
| calico-fips-3.29 | affected | chainguard | calico-fips-3.29 | — |
| cluster-autoscaler-1.31 | affected | chainguard | cluster-autoscaler-1.31 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-fips-1.31 | affected | chainguard | cluster-autoscaler-fips-1.31 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| kapp | affected | wolfi | kapp | — |
| kapp | affected | chainguard | kapp | — |
| kapp-fips | affected | chainguard | kapp-fips | — |
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.30 | affected | wolfi | kubernetes-1.30 | — |
| kubernetes-1.30 | affected | chainguard | kubernetes-1.30 | — |
| kubernetes-1.31 | affected | chainguard | kubernetes-1.31 | — |
| kubernetes-1.31 | affected | wolfi | kubernetes-1.31 | — |
| kubernetes-1.32 | affected | wolfi | kubernetes-1.32 | — |
| kubernetes-1.32 | affected | chainguard | kubernetes-1.32 | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache-fips | affected | chainguard | kubernetes-dns-node-cache-fips | — |
| kubernetes-fips-1.31 | affected | chainguard | kubernetes-fips-1.31 | — |
| kubernetes-fips-1.32 | affected | chainguard | kubernetes-fips-1.32 | — |
| local-static-provisioner | affected | chainguard | local-static-provisioner | — |
| local-static-provisioner | affected | wolfi | local-static-provisioner | — |
| local-static-provisioner-fips | affected | chainguard | local-static-provisioner-fips | — |
| node-feature-discovery-0.16 | affected | chainguard | node-feature-discovery-0.16 | — |
| node-feature-discovery-0.17 | affected | chainguard | node-feature-discovery-0.17 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-fips-0.6 | affected | chainguard | rancher-webhook-fips-0.6 | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator-fips | affected | chainguard | spark-operator-fips | — |
| vcluster | affected | chainguard | vcluster | — |
| vcluster | affected | wolfi | vcluster | — |
| yunikorn-k8shim | affected | wolfi | yunikorn-k8shim | — |
| yunikorn-k8shim | affected | chainguard | yunikorn-k8shim | — |
| yunikorn-k8shim-fips | affected | chainguard | yunikorn-k8shim-fips | — |
GHSA-8p42-9842-5whf
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-2137
CVEs:CVE-2025-2137
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-2137
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
DEBIAN-CVE-2025-2137
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed...
CVEs:CVE-2025-0081
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0081
PUB-A-383333278
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Security update for protobuf
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| protobuf | affected | SUSE:Linux Micro 6.0 | protobuf | — |
GHSA-wgm3-f6x3-rj6j
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-2136
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2025-2136
Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2025-2136
DEBIAN-CVE-2025-2136
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2025-30897
Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.5.1.
CVEs:CVE-2025-30897
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| analytify_-_google_analytics_dashboard | affected | analytify | — | — |
Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-cd-3.0 | affected | chainguard | argo-cd-3.0 | — |
| argo-cd-3.1 | affected | chainguard | argo-cd-3.1 | — |
| argo-cd-3.2 | affected | wolfi | argo-cd-3.2 | — |
| argo-cd-3.2 | affected | chainguard | argo-cd-3.2 | — |
| argo-cd-3.3 | affected | chainguard | argo-cd-3.3 | — |
| argo-cd-3.3 | affected | wolfi | argo-cd-3.3 | — |
| argo-cd-3.4 | affected | wolfi | argo-cd-3.4 | — |
| argo-cd-3.4 | affected | chainguard | argo-cd-3.4 | — |
| argo-cd-3.5 | affected | chainguard | argo-cd-3.5 | — |
| argo-cd-fips-3.0 | affected | chainguard | argo-cd-fips-3.0 | — |
| argo-cd-fips-3.1 | affected | chainguard | argo-cd-fips-3.1 | — |
| argo-cd-fips-3.2 | affected | chainguard | argo-cd-fips-3.2 | — |
| argo-cd-fips-3.3 | affected | chainguard | argo-cd-fips-3.3 | — |
| argo-cd-fips-3.4 | affected | chainguard | argo-cd-fips-3.4 | — |
| argo-cd-fips-3.5 | affected | chainguard | argo-cd-fips-3.5 | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| azuredisk-csi-1.32 | affected | chainguard | azuredisk-csi-1.32 | — |
| azuredisk-csi-1.33 | affected | chainguard | azuredisk-csi-1.33 | — |
| azuredisk-csi-1.34 | affected | chainguard | azuredisk-csi-1.34 | — |
| azuredisk-csi-1.34 | affected | wolfi | azuredisk-csi-1.34 | — |
| azuredisk-csi-fips-1.32 | affected | chainguard | azuredisk-csi-fips-1.32 | — |
| azuredisk-csi-fips-1.33 | affected | chainguard | azuredisk-csi-fips-1.33 | — |
| azuredisk-csi-fips-1.34 | affected | chainguard | azuredisk-csi-fips-1.34 | — |
| azurefile-csi-1.32 | affected | chainguard | azurefile-csi-1.32 | — |
| azurefile-csi-1.33 | affected | chainguard | azurefile-csi-1.33 | — |
| azurefile-csi-1.34 | affected | chainguard | azurefile-csi-1.34 | — |
| azurefile-csi-1.35 | affected | wolfi | azurefile-csi-1.35 | — |
| azurefile-csi-1.35 | affected | chainguard | azurefile-csi-1.35 | — |
| azurefile-csi-fips-1.32 | affected | chainguard | azurefile-csi-fips-1.32 | — |
| azurefile-csi-fips-1.33 | affected | chainguard | azurefile-csi-fips-1.33 | — |
| azurefile-csi-fips-1.34 | affected | chainguard | azurefile-csi-fips-1.34 | — |
| azurefile-csi-fips-1.35 | affected | chainguard | azurefile-csi-fips-1.35 | — |
| blob-csi-1.23 | affected | chainguard | blob-csi-1.23 | — |
| blob-csi-1.24 | affected | chainguard | blob-csi-1.24 | — |
| blob-csi-1.25 | affected | chainguard | blob-csi-1.25 | — |
| blob-csi-1.26 | affected | chainguard | blob-csi-1.26 | — |
| blob-csi-1.27 | affected | chainguard | blob-csi-1.27 | — |
| blob-csi-1.27 | affected | wolfi | blob-csi-1.27 | — |
| blob-csi-fips-1.23 | affected | chainguard | blob-csi-fips-1.23 | — |
| blob-csi-fips-1.24 | affected | chainguard | blob-csi-fips-1.24 | — |
| blob-csi-fips-1.25 | affected | chainguard | blob-csi-fips-1.25 | — |
| blob-csi-fips-1.26 | affected | chainguard | blob-csi-fips-1.26 | — |
| blob-csi-fips-1.27 | affected | chainguard | blob-csi-fips-1.27 | — |
| calico-3.30 | affected | chainguard | calico-3.30 | — |
| calico-3.31 | affected | wolfi | calico-3.31 | — |
| calico-3.31 | affected | chainguard | calico-3.31 | — |
| calico-3.32 | affected | chainguard | calico-3.32 | — |
| calico-3.32 | affected | wolfi | calico-3.32 | — |
| calico-fips-3.30 | affected | chainguard | calico-fips-3.30 | — |
| calico-fips-3.31 | affected | chainguard | calico-fips-3.31 | — |
| calico-fips-3.32 | affected | chainguard | calico-fips-3.32 | — |
| cephcsi | affected | chainguard | cephcsi | — |
| cephcsi-fips | affected | chainguard | cephcsi-fips | — |
| cloud-provider-gcp-cloud-controller-manager | affected | chainguard | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager | affected | wolfi | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager-fips | affected | chainguard | cloud-provider-gcp-cloud-controller-manager-fips | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.33 | affected | chainguard | cluster-autoscaler-1.33 | — |
| cluster-autoscaler-1.34 | affected | wolfi | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.34 | affected | chainguard | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.35 | affected | wolfi | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-1.35 | affected | chainguard | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-1.36 | affected | chainguard | cluster-autoscaler-1.36 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| cluster-autoscaler-fips-1.33 | affected | chainguard | cluster-autoscaler-fips-1.33 | — |
| cluster-autoscaler-fips-1.34 | affected | chainguard | cluster-autoscaler-fips-1.34 | — |
| cluster-autoscaler-fips-1.35 | affected | chainguard | cluster-autoscaler-fips-1.35 | — |
| cluster-autoscaler-fips-1.36 | affected | chainguard | cluster-autoscaler-fips-1.36 | — |
| docker-machine-driver-harvester | affected | chainguard | docker-machine-driver-harvester | — |
| docker-machine-driver-harvester | affected | wolfi | docker-machine-driver-harvester | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-1.33 | affected | chainguard | eks-distro-1.33 | — |
| eks-distro-1.34 | affected | chainguard | eks-distro-1.34 | — |
| eks-distro-1.35 | affected | chainguard | eks-distro-1.35 | — |
| eks-distro-1.36 | affected | chainguard | eks-distro-1.36 | — |
| eks-distro-1.37 | affected | chainguard | eks-distro-1.37 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| eks-distro-fips-1.33 | affected | chainguard | eks-distro-fips-1.33 | — |
| eks-distro-fips-1.34 | affected | chainguard | eks-distro-fips-1.34 | — |
| eks-distro-fips-1.35 | affected | chainguard | eks-distro-fips-1.35 | — |
| eks-distro-fips-1.36 | affected | chainguard | eks-distro-fips-1.36 | — |
| eks-distro-fips-1.37 | affected | chainguard | eks-distro-fips-1.37 | — |
| emissary | affected | wolfi | emissary | — |
| emissary | affected | chainguard | emissary | — |
| harvester | affected | chainguard | harvester | — |
| harvester-fips | affected | chainguard | harvester-fips | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| kapp | affected | chainguard | kapp | — |
| kapp | affected | wolfi | kapp | — |
| kapp-fips | affected | chainguard | kapp-fips | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kube-conformance-1.32 | affected | chainguard | kube-conformance-1.32 | — |
| kube-conformance-1.33 | affected | chainguard | kube-conformance-1.33 | — |
| kube-conformance-1.34 | affected | chainguard | kube-conformance-1.34 | — |
| kube-conformance-1.35 | affected | chainguard | kube-conformance-1.35 | — |
| kube-conformance-1.36 | affected | chainguard | kube-conformance-1.36 | — |
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
| kubernetes-1.33 | affected | wolfi | kubernetes-1.33 | — |
| kubernetes-1.33 | affected | chainguard | kubernetes-1.33 | — |
| kubernetes-1.34 | affected | chainguard | kubernetes-1.34 | — |
| kubernetes-1.34 | affected | wolfi | kubernetes-1.34 | — |
| kubernetes-1.35 | affected | chainguard | kubernetes-1.35 | — |
| kubernetes-1.35 | affected | wolfi | kubernetes-1.35 | — |
| kubernetes-1.36 | affected | chainguard | kubernetes-1.36 | — |
| kubernetes-1.36 | affected | wolfi | kubernetes-1.36 | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache-fips | affected | chainguard | kubernetes-dns-node-cache-fips | — |
| kubernetes-fips-1.32 | affected | chainguard | kubernetes-fips-1.32 | — |
| kubernetes-fips-1.33 | affected | chainguard | kubernetes-fips-1.33 | — |
| kubernetes-fips-1.34 | affected | chainguard | kubernetes-fips-1.34 | — |
| kubernetes-fips-1.35 | affected | chainguard | kubernetes-fips-1.35 | — |
| kubernetes-fips-1.36 | affected | chainguard | kubernetes-fips-1.36 | — |
| kueue-0.19 | affected | chainguard | kueue-0.19 | — |
| kueue-fips-0.19 | affected | chainguard | kueue-fips-0.19 | — |
| local-static-provisioner | affected | chainguard | local-static-provisioner | — |
| local-static-provisioner | affected | wolfi | local-static-provisioner | — |
| local-static-provisioner-fips | affected | chainguard | local-static-provisioner-fips | — |
| longhorn-manager-1.10 | affected | chainguard | longhorn-manager-1.10 | — |
| longhorn-manager-1.11 | affected | chainguard | longhorn-manager-1.11 | — |
| longhorn-manager-1.12 | affected | chainguard | longhorn-manager-1.12 | — |
| longhorn-manager-1.8 | affected | chainguard | longhorn-manager-1.8 | — |
| longhorn-manager-1.9 | affected | chainguard | longhorn-manager-1.9 | — |
| longhorn-manager-fips-1.10 | affected | chainguard | longhorn-manager-fips-1.10 | — |
| longhorn-manager-fips-1.11 | affected | chainguard | longhorn-manager-fips-1.11 | — |
| longhorn-manager-fips-1.12 | affected | chainguard | longhorn-manager-fips-1.12 | — |
| longhorn-manager-fips-1.8 | affected | chainguard | longhorn-manager-fips-1.8 | — |
| longhorn-manager-fips-1.9 | affected | chainguard | longhorn-manager-fips-1.9 | — |
| longhorn-share-manager-1.10 | affected | chainguard | longhorn-share-manager-1.10 | — |
| longhorn-share-manager-1.11 | affected | chainguard | longhorn-share-manager-1.11 | — |
| longhorn-share-manager-1.12 | affected | chainguard | longhorn-share-manager-1.12 | — |
| longhorn-share-manager-1.8 | affected | chainguard | longhorn-share-manager-1.8 | — |
| longhorn-share-manager-1.9 | affected | chainguard | longhorn-share-manager-1.9 | — |
| longhorn-share-manager-fips-1.10 | affected | chainguard | longhorn-share-manager-fips-1.10 | — |
| longhorn-share-manager-fips-1.11 | affected | chainguard | longhorn-share-manager-fips-1.11 | — |
| longhorn-share-manager-fips-1.12 | affected | chainguard | longhorn-share-manager-fips-1.12 | — |
| longhorn-share-manager-fips-1.8 | affected | chainguard | longhorn-share-manager-fips-1.8 | — |
| longhorn-share-manager-fips-1.9 | affected | chainguard | longhorn-share-manager-fips-1.9 | — |
| mesosphere-vsphere-csi | affected | wolfi | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi | affected | chainguard | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi-fips | affected | chainguard | mesosphere-vsphere-csi-fips | — |
| multicluster-controlplane | affected | chainguard | multicluster-controlplane | — |
| multicluster-controlplane-fips | affected | chainguard | multicluster-controlplane-fips | — |
| node-feature-discovery-0.17 | affected | chainguard | node-feature-discovery-0.17 | — |
| node-feature-discovery-0.18 | affected | chainguard | node-feature-discovery-0.18 | — |
| node-feature-discovery-0.18 | affected | wolfi | node-feature-discovery-0.18 | — |
| node-feature-discovery-0.19 | affected | chainguard | node-feature-discovery-0.19 | — |
| node-feature-discovery-fips-0.17 | affected | chainguard | node-feature-discovery-fips-0.17 | — |
| node-feature-discovery-fips-0.18 | affected | chainguard | node-feature-discovery-fips-0.18 | — |
| node-feature-discovery-fips-0.19 | affected | chainguard | node-feature-discovery-fips-0.19 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint-fips | affected | chainguard | nodetaint-fips | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-2.12 | affected | chainguard | rancher-2.12 | — |
| rancher-2.13 | affected | chainguard | rancher-2.13 | — |
| rancher-2.13 | affected | wolfi | rancher-2.13 | — |
| rancher-2.14 | affected | chainguard | rancher-2.14 | — |
| rancher-2.14 | affected | wolfi | rancher-2.14 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.12 | affected | chainguard | rancher-agent-2.12 | — |
| rancher-agent-2.13 | affected | chainguard | rancher-agent-2.13 | — |
| rancher-agent-2.13 | affected | wolfi | rancher-agent-2.13 | — |
| rancher-agent-2.14 | affected | chainguard | rancher-agent-2.14 | — |
| rancher-agent-2.14 | affected | wolfi | rancher-agent-2.14 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet-fips | affected | chainguard | rancher-fleet-fips | — |
| rancher-support-bundle-kit | affected | chainguard | rancher-support-bundle-kit | — |
| rancher-system-agent | affected | chainguard | rancher-system-agent | — |
| rancher-system-agent | affected | wolfi | rancher-system-agent | — |
| rancher-system-upgrade-controller | affected | wolfi | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller | affected | chainguard | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller-fips | affected | chainguard | rancher-system-upgrade-controller-fips | — |
| rancher-webhook-0.10 | affected | wolfi | rancher-webhook-0.10 | — |
| rancher-webhook-0.10 | affected | chainguard | rancher-webhook-0.10 | — |
| rancher-webhook-0.11 | affected | chainguard | rancher-webhook-0.11 | — |
| rancher-webhook-0.12 | affected | chainguard | rancher-webhook-0.12 | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-0.9 | affected | chainguard | rancher-webhook-0.9 | — |
| rancher-webhook-0.9 | affected | wolfi | rancher-webhook-0.9 | — |
| rancher-webhook-fips-0.10 | affected | chainguard | rancher-webhook-fips-0.10 | — |
| rancher-webhook-fips-0.11 | affected | chainguard | rancher-webhook-fips-0.11 | — |
| rancher-webhook-fips-0.12 | affected | chainguard | rancher-webhook-fips-0.12 | — |
| rancher-webhook-fips-0.4 | affected | chainguard | rancher-webhook-fips-0.4 | — |
| rancher-webhook-fips-0.5 | affected | chainguard | rancher-webhook-fips-0.5 | — |
| rancher-webhook-fips-0.6 | affected | chainguard | rancher-webhook-fips-0.6 | — |
| rancher-webhook-fips-0.9 | affected | chainguard | rancher-webhook-fips-0.9 | — |
| rke2-runtime-fips-1.32 | affected | chainguard | rke2-runtime-fips-1.32 | — |
| rke2-runtime-fips-1.33 | affected | chainguard | rke2-runtime-fips-1.33 | — |
| rke2-runtime-fips-1.34 | affected | chainguard | rke2-runtime-fips-1.34 | — |
| rke2-runtime-fips-1.35 | affected | chainguard | rke2-runtime-fips-1.35 | — |
| rke2-runtime-fips-1.36 | affected | chainguard | rke2-runtime-fips-1.36 | — |
| vcluster | affected | wolfi | vcluster | — |
| vcluster | affected | chainguard | vcluster | — |
| vcluster-fips | affected | chainguard | vcluster-fips | — |
| volcano | affected | chainguard | volcano | — |
| volcano-fips | affected | chainguard | volcano-fips | — |
| yunikorn-k8shim | affected | wolfi | yunikorn-k8shim | — |
| yunikorn-k8shim | affected | chainguard | yunikorn-k8shim | — |
| yunikorn-k8shim-fips | affected | chainguard | yunikorn-k8shim-fips | — |
Kubernetes kube-apiserver Vulnerable to Race Condition
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-cd-3.0 | affected | wolfi | argo-cd-3.0 | — |
| argo-cd-3.0 | affected | chainguard | argo-cd-3.0 | — |
| argo-cd-3.1 | affected | wolfi | argo-cd-3.1 | — |
| argo-cd-3.1 | affected | chainguard | argo-cd-3.1 | — |
| argo-cd-3.2 | affected | chainguard | argo-cd-3.2 | — |
| argo-cd-3.2 | affected | wolfi | argo-cd-3.2 | — |
| argo-cd-3.3 | affected | wolfi | argo-cd-3.3 | — |
| argo-cd-3.3 | affected | chainguard | argo-cd-3.3 | — |
| argo-cd-3.4 | affected | chainguard | argo-cd-3.4 | — |
| argo-cd-3.4 | affected | wolfi | argo-cd-3.4 | — |
| argo-cd-3.5 | affected | chainguard | argo-cd-3.5 | — |
| argo-cd-fips-3.0 | affected | chainguard | argo-cd-fips-3.0 | — |
| argo-cd-fips-3.1 | affected | chainguard | argo-cd-fips-3.1 | — |
| argo-cd-fips-3.2 | affected | chainguard | argo-cd-fips-3.2 | — |
| argo-cd-fips-3.3 | affected | chainguard | argo-cd-fips-3.3 | — |
| argo-cd-fips-3.4 | affected | chainguard | argo-cd-fips-3.4 | — |
| argo-cd-fips-3.5 | affected | chainguard | argo-cd-fips-3.5 | — |
| argocd-image-updater | affected | chainguard | argocd-image-updater | — |
| argocd-image-updater | affected | wolfi | argocd-image-updater | — |
| argocd-image-updater-fips | affected | chainguard | argocd-image-updater-fips | — |
| argo-rollouts | affected | wolfi | argo-rollouts | — |
| argo-rollouts | affected | chainguard | argo-rollouts | — |
| argo-rollouts-fips | affected | chainguard | argo-rollouts-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| azuredisk-csi-1.32 | affected | chainguard | azuredisk-csi-1.32 | — |
| azuredisk-csi-1.33 | affected | chainguard | azuredisk-csi-1.33 | — |
| azuredisk-csi-1.33 | affected | wolfi | azuredisk-csi-1.33 | — |
| azuredisk-csi-1.34 | affected | chainguard | azuredisk-csi-1.34 | — |
| azuredisk-csi-1.34 | affected | wolfi | azuredisk-csi-1.34 | — |
| azuredisk-csi-fips-1.32 | affected | chainguard | azuredisk-csi-fips-1.32 | — |
| azuredisk-csi-fips-1.33 | affected | chainguard | azuredisk-csi-fips-1.33 | — |
| azuredisk-csi-fips-1.34 | affected | chainguard | azuredisk-csi-fips-1.34 | — |
| azurefile-csi-1.32 | affected | chainguard | azurefile-csi-1.32 | — |
| azurefile-csi-1.33 | affected | chainguard | azurefile-csi-1.33 | — |
| azurefile-csi-1.33 | affected | wolfi | azurefile-csi-1.33 | — |
| azurefile-csi-1.34 | affected | chainguard | azurefile-csi-1.34 | — |
| azurefile-csi-1.34 | affected | wolfi | azurefile-csi-1.34 | — |
| azurefile-csi-1.35 | affected | wolfi | azurefile-csi-1.35 | — |
| azurefile-csi-1.35 | affected | chainguard | azurefile-csi-1.35 | — |
| azurefile-csi-fips-1.32 | affected | chainguard | azurefile-csi-fips-1.32 | — |
| azurefile-csi-fips-1.33 | affected | chainguard | azurefile-csi-fips-1.33 | — |
| azurefile-csi-fips-1.34 | affected | chainguard | azurefile-csi-fips-1.34 | — |
| azurefile-csi-fips-1.35 | affected | chainguard | azurefile-csi-fips-1.35 | — |
| blob-csi-1.23 | affected | chainguard | blob-csi-1.23 | — |
| blob-csi-1.24 | affected | chainguard | blob-csi-1.24 | — |
| blob-csi-1.25 | affected | chainguard | blob-csi-1.25 | — |
| blob-csi-1.26 | affected | wolfi | blob-csi-1.26 | — |
| blob-csi-1.26 | affected | chainguard | blob-csi-1.26 | — |
| blob-csi-1.27 | affected | wolfi | blob-csi-1.27 | — |
| blob-csi-1.27 | affected | chainguard | blob-csi-1.27 | — |
| blob-csi-fips-1.23 | affected | chainguard | blob-csi-fips-1.23 | — |
| blob-csi-fips-1.24 | affected | chainguard | blob-csi-fips-1.24 | — |
| blob-csi-fips-1.25 | affected | chainguard | blob-csi-fips-1.25 | — |
| blob-csi-fips-1.26 | affected | chainguard | blob-csi-fips-1.26 | — |
| blob-csi-fips-1.27 | affected | chainguard | blob-csi-fips-1.27 | — |
| calico-3.30 | affected | wolfi | calico-3.30 | — |
| calico-3.30 | affected | chainguard | calico-3.30 | — |
| calico-3.31 | affected | wolfi | calico-3.31 | — |
| calico-3.31 | affected | chainguard | calico-3.31 | — |
| calico-3.32 | affected | chainguard | calico-3.32 | — |
| calico-3.32 | affected | wolfi | calico-3.32 | — |
| calico-fips-3.30 | affected | chainguard | calico-fips-3.30 | — |
| calico-fips-3.31 | affected | chainguard | calico-fips-3.31 | — |
| calico-fips-3.32 | affected | chainguard | calico-fips-3.32 | — |
| cephcsi | affected | chainguard | cephcsi | — |
| cephcsi-fips | affected | chainguard | cephcsi-fips | — |
| cloud-provider-gcp-cloud-controller-manager | affected | wolfi | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager | affected | chainguard | cloud-provider-gcp-cloud-controller-manager | — |
| cloud-provider-gcp-cloud-controller-manager-fips | affected | chainguard | cloud-provider-gcp-cloud-controller-manager-fips | — |
| cluster-autoscaler-1.32 | affected | wolfi | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.32 | affected | chainguard | cluster-autoscaler-1.32 | — |
| cluster-autoscaler-1.33 | affected | chainguard | cluster-autoscaler-1.33 | — |
| cluster-autoscaler-1.33 | affected | wolfi | cluster-autoscaler-1.33 | — |
| cluster-autoscaler-1.34 | affected | wolfi | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.34 | affected | chainguard | cluster-autoscaler-1.34 | — |
| cluster-autoscaler-1.35 | affected | chainguard | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-1.35 | affected | wolfi | cluster-autoscaler-1.35 | — |
| cluster-autoscaler-1.36 | affected | chainguard | cluster-autoscaler-1.36 | — |
| cluster-autoscaler-fips-1.32 | affected | chainguard | cluster-autoscaler-fips-1.32 | — |
| cluster-autoscaler-fips-1.33 | affected | chainguard | cluster-autoscaler-fips-1.33 | — |
| cluster-autoscaler-fips-1.34 | affected | chainguard | cluster-autoscaler-fips-1.34 | — |
| cluster-autoscaler-fips-1.35 | affected | chainguard | cluster-autoscaler-fips-1.35 | — |
| cluster-autoscaler-fips-1.36 | affected | chainguard | cluster-autoscaler-fips-1.36 | — |
| docker-machine-driver-harvester | affected | wolfi | docker-machine-driver-harvester | — |
| docker-machine-driver-harvester | affected | chainguard | docker-machine-driver-harvester | — |
| eks-distro-1.30 | affected | chainguard | eks-distro-1.30 | — |
| eks-distro-1.31 | affected | chainguard | eks-distro-1.31 | — |
| eks-distro-1.32 | affected | chainguard | eks-distro-1.32 | — |
| eks-distro-1.33 | affected | chainguard | eks-distro-1.33 | — |
| eks-distro-1.34 | affected | chainguard | eks-distro-1.34 | — |
| eks-distro-1.35 | affected | chainguard | eks-distro-1.35 | — |
| eks-distro-1.36 | affected | chainguard | eks-distro-1.36 | — |
| eks-distro-1.37 | affected | chainguard | eks-distro-1.37 | — |
| eks-distro-fips-1.30 | affected | chainguard | eks-distro-fips-1.30 | — |
| eks-distro-fips-1.31 | affected | chainguard | eks-distro-fips-1.31 | — |
| eks-distro-fips-1.32 | affected | chainguard | eks-distro-fips-1.32 | — |
| eks-distro-fips-1.33 | affected | chainguard | eks-distro-fips-1.33 | — |
| eks-distro-fips-1.34 | affected | chainguard | eks-distro-fips-1.34 | — |
| eks-distro-fips-1.35 | affected | chainguard | eks-distro-fips-1.35 | — |
| eks-distro-fips-1.36 | affected | chainguard | eks-distro-fips-1.36 | — |
| eks-distro-fips-1.37 | affected | chainguard | eks-distro-fips-1.37 | — |
| emissary | affected | chainguard | emissary | — |
| emissary | affected | wolfi | emissary | — |
| harvester | affected | chainguard | harvester | — |
| harvester-fips | affected | chainguard | harvester-fips | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| k8ssandra-client | affected | wolfi | k8ssandra-client | — |
| k8ssandra-client | affected | chainguard | k8ssandra-client | — |
| k8ssandra-client-fips | affected | chainguard | k8ssandra-client-fips | — |
| kapp | affected | chainguard | kapp | — |
| kapp | affected | wolfi | kapp | — |
| kapp-fips | affected | chainguard | kapp-fips | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kube-conformance-1.32 | affected | chainguard | kube-conformance-1.32 | — |
| kube-conformance-1.33 | affected | chainguard | kube-conformance-1.33 | — |
| kube-conformance-1.34 | affected | chainguard | kube-conformance-1.34 | — |
| kube-conformance-1.35 | affected | chainguard | kube-conformance-1.35 | — |
| kube-conformance-1.36 | affected | chainguard | kube-conformance-1.36 | — |
| kubernetes-1.33 | affected | wolfi | kubernetes-1.33 | — |
| kubernetes-1.33 | affected | chainguard | kubernetes-1.33 | — |
| kubernetes-1.34 | affected | wolfi | kubernetes-1.34 | — |
| kubernetes-1.34 | affected | chainguard | kubernetes-1.34 | — |
| kubernetes-1.35 | affected | chainguard | kubernetes-1.35 | — |
| kubernetes-1.35 | affected | wolfi | kubernetes-1.35 | — |
| kubernetes-1.36 | affected | chainguard | kubernetes-1.36 | — |
| kubernetes-1.36 | affected | wolfi | kubernetes-1.36 | — |
| kubernetes/cmd/kube-apiserver | affected | k8s.io | k8s.io/kubernetes/cmd/kube-apiserver | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-nfs | affected | chainguard | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs | affected | wolfi | kubernetes-csi-driver-nfs | — |
| kubernetes-csi-driver-nfs-fips | affected | chainguard | kubernetes-csi-driver-nfs-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache-fips | affected | chainguard | kubernetes-dns-node-cache-fips | — |
| kubernetes-fips-1.32 | affected | chainguard | kubernetes-fips-1.32 | — |
| kubernetes-fips-1.33 | affected | chainguard | kubernetes-fips-1.33 | — |
| kubernetes-fips-1.34 | affected | chainguard | kubernetes-fips-1.34 | — |
| kubernetes-fips-1.35 | affected | chainguard | kubernetes-fips-1.35 | — |
| kubernetes-fips-1.36 | affected | chainguard | kubernetes-fips-1.36 | — |
| kueue-0.19 | affected | chainguard | kueue-0.19 | — |
| kueue-fips-0.19 | affected | chainguard | kueue-fips-0.19 | — |
| local-static-provisioner | affected | wolfi | local-static-provisioner | — |
| local-static-provisioner | affected | chainguard | local-static-provisioner | — |
| local-static-provisioner-fips | affected | chainguard | local-static-provisioner-fips | — |
| longhorn-manager-1.10 | affected | chainguard | longhorn-manager-1.10 | — |
| longhorn-manager-1.11 | affected | chainguard | longhorn-manager-1.11 | — |
| longhorn-manager-1.12 | affected | chainguard | longhorn-manager-1.12 | — |
| longhorn-manager-1.8 | affected | chainguard | longhorn-manager-1.8 | — |
| longhorn-manager-1.9 | affected | chainguard | longhorn-manager-1.9 | — |
| longhorn-manager-fips-1.10 | affected | chainguard | longhorn-manager-fips-1.10 | — |
| longhorn-manager-fips-1.11 | affected | chainguard | longhorn-manager-fips-1.11 | — |
| longhorn-manager-fips-1.12 | affected | chainguard | longhorn-manager-fips-1.12 | — |
| longhorn-manager-fips-1.8 | affected | chainguard | longhorn-manager-fips-1.8 | — |
| longhorn-manager-fips-1.9 | affected | chainguard | longhorn-manager-fips-1.9 | — |
| longhorn-share-manager-1.10 | affected | chainguard | longhorn-share-manager-1.10 | — |
| longhorn-share-manager-1.11 | affected | chainguard | longhorn-share-manager-1.11 | — |
| longhorn-share-manager-1.12 | affected | chainguard | longhorn-share-manager-1.12 | — |
| longhorn-share-manager-1.8 | affected | chainguard | longhorn-share-manager-1.8 | — |
| longhorn-share-manager-1.9 | affected | chainguard | longhorn-share-manager-1.9 | — |
| longhorn-share-manager-fips-1.10 | affected | chainguard | longhorn-share-manager-fips-1.10 | — |
| longhorn-share-manager-fips-1.11 | affected | chainguard | longhorn-share-manager-fips-1.11 | — |
| longhorn-share-manager-fips-1.12 | affected | chainguard | longhorn-share-manager-fips-1.12 | — |
| longhorn-share-manager-fips-1.8 | affected | chainguard | longhorn-share-manager-fips-1.8 | — |
| longhorn-share-manager-fips-1.9 | affected | chainguard | longhorn-share-manager-fips-1.9 | — |
| mesosphere-vsphere-csi | affected | chainguard | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi | affected | wolfi | mesosphere-vsphere-csi | — |
| mesosphere-vsphere-csi-fips | affected | chainguard | mesosphere-vsphere-csi-fips | — |
| multicluster-controlplane | affected | chainguard | multicluster-controlplane | — |
| multicluster-controlplane-fips | affected | chainguard | multicluster-controlplane-fips | — |
| node-feature-discovery-0.17 | affected | chainguard | node-feature-discovery-0.17 | — |
| node-feature-discovery-0.18 | affected | wolfi | node-feature-discovery-0.18 | — |
| node-feature-discovery-0.18 | affected | chainguard | node-feature-discovery-0.18 | — |
| node-feature-discovery-0.19 | affected | chainguard | node-feature-discovery-0.19 | — |
| node-feature-discovery-fips-0.17 | affected | chainguard | node-feature-discovery-fips-0.17 | — |
| node-feature-discovery-fips-0.18 | affected | chainguard | node-feature-discovery-fips-0.18 | — |
| node-feature-discovery-fips-0.19 | affected | chainguard | node-feature-discovery-fips-0.19 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint-fips | affected | chainguard | nodetaint-fips | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| rancher-2.10 | affected | chainguard | rancher-2.10 | — |
| rancher-2.11 | affected | chainguard | rancher-2.11 | — |
| rancher-2.12 | affected | chainguard | rancher-2.12 | — |
| rancher-2.13 | affected | chainguard | rancher-2.13 | — |
| rancher-2.13 | affected | wolfi | rancher-2.13 | — |
| rancher-2.14 | affected | chainguard | rancher-2.14 | — |
| rancher-2.14 | affected | wolfi | rancher-2.14 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rancher-agent-2.11 | affected | chainguard | rancher-agent-2.11 | — |
| rancher-agent-2.12 | affected | chainguard | rancher-agent-2.12 | — |
| rancher-agent-2.13 | affected | chainguard | rancher-agent-2.13 | — |
| rancher-agent-2.13 | affected | wolfi | rancher-agent-2.13 | — |
| rancher-agent-2.14 | affected | chainguard | rancher-agent-2.14 | — |
| rancher-agent-2.14 | affected | wolfi | rancher-agent-2.14 | — |
| rancher-agent-2.9 | affected | chainguard | rancher-agent-2.9 | — |
| rancher-fleet | affected | chainguard | rancher-fleet | — |
| rancher-fleet | affected | wolfi | rancher-fleet | — |
| rancher-fleet-fips | affected | chainguard | rancher-fleet-fips | — |
| rancher-support-bundle-kit | affected | chainguard | rancher-support-bundle-kit | — |
| rancher-system-agent | affected | wolfi | rancher-system-agent | — |
| rancher-system-agent | affected | chainguard | rancher-system-agent | — |
| rancher-system-upgrade-controller | affected | chainguard | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller | affected | wolfi | rancher-system-upgrade-controller | — |
| rancher-system-upgrade-controller-fips | affected | chainguard | rancher-system-upgrade-controller-fips | — |
| rancher-webhook-0.10 | affected | wolfi | rancher-webhook-0.10 | — |
| rancher-webhook-0.10 | affected | chainguard | rancher-webhook-0.10 | — |
| rancher-webhook-0.11 | affected | chainguard | rancher-webhook-0.11 | — |
| rancher-webhook-0.12 | affected | chainguard | rancher-webhook-0.12 | — |
| rancher-webhook-0.4 | affected | chainguard | rancher-webhook-0.4 | — |
| rancher-webhook-0.5 | affected | chainguard | rancher-webhook-0.5 | — |
| rancher-webhook-0.6 | affected | wolfi | rancher-webhook-0.6 | — |
| rancher-webhook-0.6 | affected | chainguard | rancher-webhook-0.6 | — |
| rancher-webhook-0.9 | affected | wolfi | rancher-webhook-0.9 | — |
| rancher-webhook-0.9 | affected | chainguard | rancher-webhook-0.9 | — |
| rancher-webhook-fips-0.10 | affected | chainguard | rancher-webhook-fips-0.10 | — |
| rancher-webhook-fips-0.11 | affected | chainguard | rancher-webhook-fips-0.11 | — |
| rancher-webhook-fips-0.12 | affected | chainguard | rancher-webhook-fips-0.12 | — |
| rancher-webhook-fips-0.4 | affected | chainguard | rancher-webhook-fips-0.4 | — |
| rancher-webhook-fips-0.5 | affected | chainguard | rancher-webhook-fips-0.5 | — |
| rancher-webhook-fips-0.6 | affected | chainguard | rancher-webhook-fips-0.6 | — |
| rancher-webhook-fips-0.9 | affected | chainguard | rancher-webhook-fips-0.9 | — |
| rke2-runtime-fips-1.32 | affected | chainguard | rke2-runtime-fips-1.32 | — |
| rke2-runtime-fips-1.33 | affected | chainguard | rke2-runtime-fips-1.33 | — |
| rke2-runtime-fips-1.34 | affected | chainguard | rke2-runtime-fips-1.34 | — |
| rke2-runtime-fips-1.35 | affected | chainguard | rke2-runtime-fips-1.35 | — |
| rke2-runtime-fips-1.36 | affected | chainguard | rke2-runtime-fips-1.36 | — |
| vcluster | affected | wolfi | vcluster | — |
| vcluster | affected | chainguard | vcluster | — |
| vcluster-fips | affected | chainguard | vcluster-fips | — |
| volcano | affected | chainguard | volcano | — |
| volcano-fips | affected | chainguard | volcano-fips | — |
| yunikorn-k8shim | affected | wolfi | yunikorn-k8shim | — |
| yunikorn-k8shim | affected | chainguard | yunikorn-k8shim | — |
| yunikorn-k8shim-fips | affected | chainguard | yunikorn-k8shim-fips | — |
Kubernetes kube-apiserver Vulnerable to Race Condition
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes/cmd/kube-apiserver | affected | k8s.io | k8s.io/kubernetes/cmd/kube-apiserver | — |
CVE-2024-7598 affecting package kubernetes 1.30.10-21
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:3 | kubernetes | — |
CVE-2024-7598 affecting package kubernetes 1.28.4-25
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:2 | kubernetes | — |
A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to be deleted before the pods that they protect. This can lead to a brief period in which the pods are running, but network policies that should apply to connections to and from the pods are not enforced.
CVEs:CVE-2024-7598
Kubernetes kube-apiserver Vulnerable to Race Condition
CVEs:CVE-2024-7598
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes/cmd/kube-apiserver | affected | k8s.io | k8s.io/kubernetes/cmd/kube-apiserver | — |
A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defi...
CVEs:CVE-2024-7598
DEBIAN-CVE-2024-7598
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Debian:11 | kubernetes | — |
| kubernetes | affected | Debian:12 | kubernetes | — |
| kubernetes | affected | Debian:13 | kubernetes | — |
| kubernetes | affected | Debian:14 | kubernetes | — |
In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed ...
CVEs:CVE-2025-0093
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0093
In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2025-0078
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0078
CVEs:CVE-2025-20908
Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.
CVEs:CVE-2025-20908
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2025-0084
In multiple locations, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed f...
CVEs:CVE-2025-0084
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-363259128
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
CVEs:CVE-2025-22411
In process_service_attr_rsp of sdp_discovery.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not n...
CVEs:CVE-2025-22411
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In multiple functions of sdp_server.cc, there is a possible use after free due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for...
CVEs:CVE-2025-22412
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-22412
CVEs:CVE-2025-28860
Cross-Site Request Forgery (CSRF) vulnerability in PPDPurveyor Google News Editors Picks Feed Generator google-news-editors-picks-news-feeds allows Stored XSS.This issue affects Google News Editors Picks Feed Generator: from n/a through <= 2.1.
CVEs:CVE-2025-28860
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google_news_editors_picks_feed_generator | affected | ppdpurveyor | — | — |
CVEs:CVE-2025-0092
In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User inte...
CVEs:CVE-2025-0092
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-20903
Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.
CVEs:CVE-2025-20903
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2025-20909
Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information.
CVEs:CVE-2025-20909
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-56188
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-56188
PUB-A-303771271
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2025-22404
In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo...
CVEs:CVE-2025-22404
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-22405
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2025-22405
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ...
CVEs:CVE-2025-22406
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-22406
CVEs:CVE-2025-22410
In multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2025-22410
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-49740
In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-49740
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed f...
CVEs:CVE-2025-0079
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0079
In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2025-0083
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0083
CVEs:CVE-2025-22413
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitat...
CVEs:CVE-2025-22413
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-373638114
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ...
CVEs:CVE-2025-0080
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0080
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need...
CVEs:CVE-2024-49728
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-49728
CVEs:CVE-2025-22409
In rfc_send_buf_uih of rfc_ts_frames.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl...
CVEs:CVE-2025-22409
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-0082
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User i...
CVEs:CVE-2025-0082
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-20651
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed f...
CVEs:CVE-2025-20651
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| openwrt | affected | openwrt | — | — |
| rdk-b | affected | rdkcentral | — | — |
| yocto | affected | linuxfoundation | — | — |
CVEs:CVE-2025-20645
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patc...
CVEs:CVE-2025-20645
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-386732172
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-56184
In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2024-56184
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-22407
In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exp...
CVEs:CVE-2025-22407
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for ...
CVEs:CVE-2025-20653
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2025-20653
PUB-A-359861209
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for e...
CVEs:CVE-2024-56187
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-56187
PUB-A-306032268
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.