GO-2024-3282 vulnerabilities

Vulnerabilities for packages: step-issuer, cert-manager-webhook-pdns, cert-manager-cmctl, cert-manager-cmctl-fips, cert-manager-istio-csr, aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips, cert-exporter, cert-exporter-fips, aws-privateca-issuer, step-issuer-fips...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, percona-server-mongodb-operator-fips, gitlab-operator-fips, cert-manager-webhook-pdns-fips, cert-manager-cmctl, mariadb-operator-fips, opentelemetry-operator, cert-manager-google-cas-issuer-fips, gitlab-operator, step-issuer,...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: kots, argo-workflows, step-ca, trillian, step, caddy, trillian-fips, argo-workflows-fips, caddy-fips, wavefront-collector-for-kubernetes...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, grafana-mimir, amass, pulumi-language-java, spark-operator, crossplane-provider-gcp, sigstore-scaffolding, opa-envoy, pulumi-language-yaml, kyverno-notation-aws-fips, cert-exporter-fips, nfs-subdir-external-provisioner,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kargo, k8sgpt, vcluster, k3d, osv-scanner, kots, minio, spegel, rqlite, trivy, zot, hubble-ui, tflint, opentelemetry-collector-contrib, conftest, cilium-cli, grafana-agent-operator, temporal, kwok, dagger, falcosidekick, sigstore-scaffolding, sops, zarf, terragrunt,...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-issuer, step-ca, caddy, step...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-issuer, step-ca, caddy, step...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, step-issuer, cert-exporter...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, step-issuer, mariadb-operator, percona-server-mongodb-operator, opentelemetry-operator, cert-manager-csi-driver...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: karma, sftpgo, gogatekeeper, rclone, tkn, gitness, buf, step-issuer, step-ca, kyverno-policy-reporter-ui, caddy, step, cloudflared...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: argo-workflows, kots, step-ca, step, trillian, caddy...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: kube-bench, src, argo-workflows, kine, spicedb, kots, amass, step-ca, ferretdb, step, k3s, trillian, temporal-server, caddy...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, kubeflow, pulumi-kubernetes-operator, skaffold, step-issuer, flyte, flux-image-reflector-controller, dgraph, opa-envoy, nfs-subdir-external-provisioner, kubeflow-pipelines, pulumi, cert-exporter, pulumi-language-java, caddy, sigstore-scaffolding...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: tekton-chains, k8sgpt, rclone, argo-workflows, argo-events, tkn, velero, goreleaser, flyte, py3-azure-identity, rook, trivy, zot, flux-image-reflector-controller, flux-kustomize-controller, airflow, secrets-store-csi-driver-provider-azure, druid, flux, rekor, cosign,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, tekton-chains, gatus, k8sgpt, tkn, cluster-api-azure-controller, kots, ko, terraform-provider-azurerm, prometheus, scorecard, sealed-secrets, flux-kustomize-controller, crossplane-provider-aws-iam, crossplane-provider-aws-firehose, eksctl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow, kube-bench, gatus, minio-object-browser, kubernetes-csi-external-attacher, tetragon, xeol, litefs, verticadb-operator, redis-operator, helm-operator, newrelic-nri-statsd, spegel, scorecard, kubescape-operator, cri-tools,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: argo-workflows, sftpgo-plugin-eventstore, tkn, step-issuer, kots, tailscale, minio, mattermost, gitsign, cerbos, crossplane-provider-sql, dgraph, hydra, sftpgo, flux-kustomize-controller, gitea, db-operator, rekor, kubeflow-pipelines, apko, trufflehog, trillian, loki...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kube-bench, k8sgpt, tekton-chains, tkn, nats-server-config-reloader, ko, helm-operator, prometheus, cerbos, spire-controller-manager, nri-consul, cluster-api-helm-controller, eksctl, clickhouse-operator, nri-rabbitmq, kube-logging-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kargo, tekton-chains, crossplane-provider-azure-storage, pulumi-kubernetes-operator, tkn, argo-events, k3d, crossplane-provider-azure-sql, goreleaser, flux-image-automation-controller, kubevela, terraform-provider-azurerm, gitsign, scorecard, rook, zot,...

CVE-2026-72851

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTEQUERY steps. Attackers can POST attacker-controlled JSON to the webhook trigger endpoint to inject SQL payloads that execute with builder-configured database credentials,...