GO-2026-4399 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator-fips, aws-privateca-issuer-fips, step-issuer-fips, percona-xtradb-cluster-operator-fips, percona-server-mongodb-operator, cert-manager-openshift-routes-fips, gitlab-operator-fips, cert-manager-cmctl, cert-manager-google-cas-issuer-fips...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, cert-manager-cmctl, cert-exporter-fips, cert-manager-webhook-pdns-fips, step-issuer, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-webhook-pdns, cert-manager-istio-csr, aws-privateca-issuer, cert-exporter...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, step, caddy, trillian, step-ca, argo-workflows, kots, trillian-fips, wavefront-collector-for-kubernetes, caddy-fips...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: pulumi, flux-image-reflector-controller-fips, sriov-network-device-plugin-fips, step, opa-envoy, google-osconfig-agent, step-issuer-fips, kubeflow-fips, portieris, cluster-proportional-autoscaler, skaffold, sigstore-scaffolding, caddy-fips, step-ca-fips, grafana-mimi...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, k3s, kwok, conftest, kaniko, grpc-health-probe, trivy, dbmate, terraform-provider-google, ferretdb, dex, opentelemetry-collector, fulcio, smarter-device-manager, spegel, cilium-cli, ksops, k3d, zarf, step-ca, rqlite,...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: caddy, step-ca, step-issuer, step...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: caddy, step-ca, step-issuer, step...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-istio-csr, aws-privateca-issuer, cert-exporter, step-issuer, cert-manager-webhook-pdns...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: sftpgo, kyverno-policy-reporter-ui, gitness, caddy, step-ca, tkn, step, rclone, cloudflared, karma, step-issuer, buf, gogatekeeper...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cert-manager-istio-csr, percona-server-mongodb-operator, opentelemetry-operator, aws-privateca-issuer, mariadb-operator, step-issuer, cert-manager-webhook-pdns, cert-manager-csi-driver...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian, caddy, step, argo-workflows, step-ca, kots...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: opa-envoy, pulumi-language-dotnet, pulumi, kubeflow-pipelines, cluster-proportional-autoscaler, kyverno-notation-aws, flux-image-reflector-controller, dgraph, terraform-provider-google, smarter-device-manager, cert-exporter, spark-operator,...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: trillian, k3s, kine, temporal-server, amass, kube-bench, caddy, spicedb, src, step, argo-workflows, step-ca, kots, ferretdb...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: zot, flux-source-controller, pulumi, falcoctl, kubescape, thanos, timestamp-authority, druid, flux-image-reflector-controller, buildkitd, argo-workflows, trivy, wal-g, chezmoi, flux-kustomize-controller, fluent-bit-plugin-loki, opentelemetry-collector, cosign, fulcio...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, terraform-provider-acme, glab, chezmoi, crossplane-provider-aws-rds, gh, opentelemetry-collector, fscrypt, fulcio, podman, traefik, scorecard, cloudflared, cloud-provider-aws, snyk-cli, syft, terraform-provider-tls, gitlab-runner,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, yunikorn-k8shim, paranoia, s5cmd, calico, gitness, influx, git-sync, temporal-ui-server, hey, doppler-kubernetes-operator, kubernetes-csi-external-attacher, litestream, descheduler, dynamic-localpv-provisioner, crossplane-provider-aws-rds, swagge...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: sqlexporter, sftpgo, k3s, temporal-server, timestamp-authority, kubeflow-pipelines, grafana-alloy, db-operator, sftpgo-plugin-eventstore, argo-workflows, witness, dgraph, dbmate, chezmoi, age, loki, flux-kustomize-controller, dex, trufflehog, rekor, fulcio, hydra,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, kind, grafana-alloy, kubernetes-csi-external-health-monitor, dgraph, mockgen, nova, swagger, ipfs-cluster, fulcio, docker-credential-gcr, envconsul, spark-operator, portieris, rabbitmq-cluster-operator, aws-application-networking-k8s, docker-cli,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: zot, crossplane-provider-azure-storage, terraform, k3s, flux-source-controller, pulumi, falcoctl, kubescape, timestamp-authority, crossplane-provider-azure, crossplane-provider-family-azure, flux-image-reflector-controller, buildkitd, glab, flux-kustomize-controller,...

CVE-2026-72851

Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTEQUERY steps. Attackers can POST attacker-controlled JSON to the webhook trigger endpoint to inject SQL payloads that execute with builder-configured database credentials,...