GO-2024-2554 vulnerabilities

Vulnerabilities for packages: helm-operator, kubevela, zarf, chartmuseum, flux-helm-controller, up, cilium-cli, zot, flux-source-controller, eksctl, helm-push, kots, kubescape, k9s, k8sgpt, trivy...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: helm-operator, kubevela, zarf, chartmuseum, flux-helm-controller, up, cilium-cli, zot, flux-source-controller, eksctl, helm-push, kots, kubescape, k9s, k8sgpt, trivy...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: terragrunt, grafana-operator-fips, victorialogs, aws-load-balancer-controller-fips, flux-helm-controller, flux-operator, flux-image-reflector-controller, grafana-fips, aws-ebs-csi-driver-fips, cluster-autoscaler-fips, cert-manager-fips, nova, polaris, victoriametrics...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: terragrunt, grafana-operator-fips, victorialogs, aws-load-balancer-controller-fips, flux-helm-controller, flux-operator, flux-image-reflector-controller, grafana-fips, aws-ebs-csi-driver-fips, cluster-autoscaler-fips, cert-manager-fips, nova, polaris, victoriametrics...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi, chainctl, nuclei, apko, go-licenses, flux-kustomize-controller-fips, flux-kustomize-controller, crossplane, grafana-alloy-fips, flux-source-controller-fips, gitea, pulumi-language-dotnet, chezmoi, argo-workflows-fips, grafana-alloy, scorecard, grype,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, newrelic-infrastructure-agent, helm-mapkubeapis, helm-fips, rancher, kube-arangodb-fips, newrelic-infrastructure-agent-fips, helm-diff-fips, beats-fips, opa-fips-envoy, headlamp, grype, kubevela, tekton-pipelines, google-osconfig-agent,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, newrelic-infrastructure-agent, helm-mapkubeapis, helm-fips, rancher, kube-arangodb-fips, newrelic-infrastructure-agent-fips, helm-diff-fips, beats-fips, opa-fips-envoy, headlamp, grype, kubevela, tekton-pipelines, google-osconfig-agent,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, spire-server, kyverno-policy-reporter, falcoctl, prometheus, spark-operator, nri-prometheus, syft-fips, dive, opa-fips-envoy, gh, cloud-sql-proxy, grafana-alloy, calico-fips, grype, mockery, spark-operator-fips, ko-fips,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: git-lfs, kubernetes-csi-livenessprobe-fips, prometheus-node-exporter-fips, newrelic-infrastructure-agent, vault-k8s, falcoctl, prometheus-pushgateway, flux-kustomize-controller, terraform, spark-operator, nri-prometheus, gobuster, dive, rqlite, kube-fluentd-operator,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: slsa-verifier, ko, aactl, apko, spire-server, tekton-chains, flux-source-controller, falcoctl-fips, tkn, kubescape, cosign, spire-server-fips, policy-controller, skaffold, melange...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: terragrunt, spire-server, dex-fips, gomplate-fips, falcoctl, flux-kustomize-controller, minio-fips, ko-fips, minio, kube-oidc-proxy, kube-rbac-proxy, oauth2-proxy, zot, tkn, vault-csi-provider, cosign, tekton-chains, argo-workflows-fips, rancher-agent, caddy,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: chainctl, tekton-chains-fips, falcoctl, ratify-fips, flux-source-controller-fips, tekton-chains, kubescape-server-fips, ratify, slsa-verifier, chainctl-fips, skopeo, podman, falco-no-driver, prometheus-podman-exporter, kyverno-fips, buildah, zarf, aactl, buildah-fips...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: spire-server, gitlab-workhorse-ce-fips, vault-fips, prometheus, terraform, rancher, kube-arangodb-fips, commercial-expanso-edge, calico-fips, gitlab-workhorse-ce, prometheus-operator, tigera-operator, minio, podman, tekton-pipelines, gitlab-rails-ce-fips,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, spire-server, gitlab-workhorse-ce-fips, vault-fips, prometheus, minio-fips, terraform, rancher, kube-arangodb-fips, kubescape-server-fips, commercial-expanso-edge, calico-fips, gitlab-workhorse-ce, flux-image-automation-controller-fips,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: chainctl, ko, trivy-operator-fips, spire-server, tekton-chains-fips, sigstore-scaffolding-fips, image-factory, falcoctl, kyverno-policy-reporter-plugins-kyverno-fips, crossplane, docker-cli-buildx, commercial-chainloop-backend, tflint, trivy-operator, buildkitd-fips,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: chainctl, ko, trivy-operator-fips, spire-server, tekton-chains-fips, image-factory, falcoctl, kyverno-policy-reporter-plugins-kyverno-fips, crossplane, tflint, trivy-operator, buildkitd-fips, cloudbeat, flux-source-controller-fips, ratify-fips, tekton-chains,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: chainctl, tekton-chains-fips, falcoctl, kyverno-notation-aws-fips, ratify-fips, cloudbeat, ratify, tkn-fips, kyverno-policy-reporter-plugins-kyverno, image-factory-fips, kyverno-fips, aactl, kyverno, zot, goreleaser, falcoctl-fips, tkn, witness, teleport,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: terragrunt, restic, spire-server, gomplate-fips, influxd, git-sync-fips, azcopy-fips, falcoctl, flux-kustomize-controller, prometheus, cluster-autoscaler-fips, minio-fips, step-kms-plugin-fips, terraform, rancher, buildkitd-fips, harbor-registry-fips, chezmoi,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: chainctl, apko, spire-server, tekton-chains-fips, sigstore-scaffolding-fips, falcoctl, flux-source-controller-fips, tekton-chains, slsa-verifier, gh, tkn-fips, vexctl, sigstore-scaffolding, neuvector-sigstore-interface-fips, zarf, aactl, zot, falcoctl-fips, tkn,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: chainctl, ko, apko, spire-server, tekton-chains-fips, falcoctl, tekton-chains, slsa-verifier, tkn-fips, vexctl, ko-fips, skaffold, zarf, aactl, zot, goreleaser, falcoctl-fips, tkn, kubescape, spire-server-fips, gitsign, melange, wolfictl, neuvector-sigstore-interface...