GO-2024-2497 vulnerabilities

Vulnerabilities for packages: conftest, kubescape, zot, kaniko, guac, scorecard, buildkitd, trivy, skaffold, docker...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: trivy, nerdctl, wolfictl, cadvisor, k9s, zot, ctop, kubernetes, zarf, k3s, grype, k3d, kaniko, newrelic-infrastructure-agent, podman, runc, syft, skaffold, skopeo, kots, kubescape, buildkitd, docker...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, eksctl, helm, trivy, flux-helm-controller, zot, ctop, flux-source-controller, cilium-cli, melange, grype, k3d, kaniko, newrelic-infrastructure-agent, up, skaffold, helm-push, kots, kubescape, k8sgpt, kubevela, buildkitd, gitness...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: kubernetes, k3s, prometheus-adapter, caddy, kubevela, buildkitd, up...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: cri-tools, kubernetes, docker-compose, k3s, kubescape, kubernetes-csi-external-resizer, kubevela, volume-modifier-for-k8s, buildkitd, temporal-server, envoy-ratelimit, metrics-server, kine, temporal...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, cosign, goreleaser, trivy, spire-server, witness, tekton-chains, zot, gh, teleport, flux-source-controller, kyverno-notation-aws, zarf, trivy-operator, skaffold, neuvector-sigstore-interface, sigstore-scaffolding, kubescape, falcoctl, ko,...

GO-2024-2494 vulnerabilities

Vulnerabilities for packages: conftest, kubescape, zot, kaniko, guac, scorecard, buildkitd, trivy, skaffold, docker...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: rootlesskit, multus-cni, istio, containerd, k3s, kuma, azure-ipam, calico, podman, datadog-agent, buildkitd, flannel, buildah, nerdctl, docker...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: policy-controller, fluent-bit-plugin-loki, hugo-extended, chezmoi, grafana-agent-operator, rekor, cosign, timestamp-authority, goreleaser, nuclei, trivy, cortex, druid, rclone, flyte, spire-server, argo-workflows, argo-events, fulcio, sqlpad, boring-registry,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: trivy, dagger, wolfictl, crossplane, cadvisor, spire-server, conftest, docker-compose, zot, buf, kargo, ctop, cilium-cli, melange, grype, kaniko, up, syft, aactl, kubescape, ko, buildkitd, tkn...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: dgraph, terraform-provider-sendgrid, cortex, kubeflow, kubescape, spark-operator, src, k3d, kubevela, scorecard, buildkitd, slsa-verifier, up, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, opentofu, eksctl, crossplane-provider-azure-storage, snyk-cli, fscrypt, nerdctl, terraform-provider-azurerm, rancher, gh, flux-kustomize-controller, guac, rancher-machine, crossplane-provider-azure-authorization, prometheus, minio,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, gitsign, kyverno, ratify, cosign, goreleaser, slsa-verifier, trivy, crossplane, spire-server, witness, tekton-chains, zot, gh, teleport, flux-source-controller, kyverno-notation-aws, zarf, trivy-operator, aactl, skaffold,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, rekor, ratify, cosign, goreleaser, slsa-verifier, trivy, spire-server, witness, tekton-chains, zot, gh, teleport, flux-source-controller, kyverno-notation-aws, zarf, trivy-operator, aactl, skaffold, neuvector-sigstore-interface,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tflint, opentofu, eksctl, kor, ratify, kpt, docker-credential-gcr, kapp, aws-otel-collector, polaris, nats-server-config-reloader, nri-memcached, guac, helm-operator, nri-consul, kube-logging-operator, prometheus, libnvidia-container, cis-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, policy-controller, crossplane-provider-azure-storage, rekor, cosign, timestamp-authority, goreleaser, snyk-cli, gomplate, nuclei, slsa-verifier, spire-server, flux-notification-controller, terraform-provider-azurerm, flux-helm-controlle...

github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request

A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service DoS, making the BuildKit service unavailable...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: fleet-server, kubeflow-katib, kubernetes-fips, trino, fuse-overlayfs-snapshotter, ocm-kubernetes-controller, cloud-provider-aws, gitlab-rails-ce, traefik-fips, prometheus-operator-fips, scorecard, podman-fips, azurefile-csi-fips, nerdctl, cluster-api-fips, rclone-fip...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, policy-controller, opentofu, eksctl, crossplane-provider-azure-storage, snyk-cli, fscrypt, nerdctl, terraform-provider-azurerm, rancher, gh, flux-kustomize-controller, guac, rancher-machine, crossplane-provider-azure-authorization, prometheus, minio,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitlab-rails-ce, kgateway-fips, neuvector-scanner-fips, helm-exporter, scorecard, rancher-agent, consul-k8s, chainctl, docker, docker-cli-buildx, kaniko, manifest-tool, kube-arangodb, chaos-mesh, kots, crossplane, tekton-pipelines-fips,...