GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, cadvisor, gitlab-runner, victoriametrics, tailscale, grafana-agent-operator, keda, flux-kustomize-controller, grafana-mimir, kubernetes-replicator, rclone, argo-workflows, gostatsd, rancher-agent, gogatekeeper, kitty, helm-operator, contour,...

GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: bazelisk, steampipe, flux-kustomize-controller, nri-couchbase, helm-operator, spire-server, dbmate, rancher-fleet, configmap-reload, k6, kubernetes-csi-node-driver-registrar, src, docker-machine-driver-linode, local-static-provisioner, pguser, direnv,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: bazelisk, steampipe, flux-kustomize-controller, nri-couchbase, helm-operator, spire-server, dbmate, rancher-fleet, configmap-reload, k6, kubernetes-csi-node-driver-registrar, src, docker-machine-driver-linode, local-static-provisioner, direnv,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, cosign-fips, cosign, slsa-verifier...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: cosign-fips, tekton-chains, gitsign, vexctl, falcoctl-fips, falcoctl, kubescape...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: cosign-fips, conftest, snyk-cli, spire-server, zarf, opa, zot, policy-controller, kots, cosign, tfsec, k8sgpt, kubescape, spire-server-fips, policy-controller-fips, conftest-fips...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, cosign-fips, minio, spire-server, tekton-chains, gitsign, vexctl, falcoctl-fips, falcoctl, mc, boring-registry, kubescape, spire-server-fips...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, argo-events-fips, wgcf, dagger, openfga, prometheus-fips, chart-testing, flux-source-controller, spire-server, kyverno-fips, agentbeat, istio-fips, pluto, grafana-fips, docker-compose, pgtimetable, steampipe, trivy, grafana-alloy,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: prometheus-statsd-exporter-fips, prometheus-adapter, dgraph, prometheus-stackdriver-exporter, k8sgpt, oauth2-proxy, pulumi-language-dotnet, prometheus-elasticsearch-exporter, flux-source-controller, runc, kubernetes-csi-external-resizer, ollama, kubernetes-dashboard,...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: kpt, ctop, vexctl, docker-credential-gcr, loki, helm-operator, aactl, cosign, dagger, k8sgpt, k9s, goreleaser, cosign-fips, helm, chartmuseum, pulumi, rancher-machine, zot, argo-workflows-fips, k3s, newrelic-infrastructure-agent, kubescape, cri-tools, kargo,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: flux-source-controller, apko, spire-server, tekton-chains, slsa-verifier, falcoctl-fips, policy-controller, tkn, aactl, cosign, melange, kubescape, spire-server-fips, skaffold, ko...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: vexctl, dgraph, oauth2-proxy, flux-source-controller, spire-server, rekor-fips, kubernetes-dashboard, temporal-fips, fulcio, temporal-ui-server-fips, external-secrets-fips, skopeo, rook, caddy-fips, terragrunt, slsa-verifier, rekor, gomplate, step-ca, kube-rbac-proxy...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: trivy-fips, vexctl, tkn-fips, kyverno-notation-aws-fips, tflint-fips, aactl, cosign, chainctl, ratify-fips, spire-server-fips, neuvector-sigstore-interface-fips, goreleaser, cosign-fips, flux-source-controller, image-factory-fips, kyverno-fips, spire-server,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: vexctl, k9s-fips, spire-server, kyverno-fips, istio-fips, minio-operator-fips, dagdotdev, flux-notification-controller, bento, kubescape-operator-fips, trivy, kubescape-operator, image-factory, ory-kratos, slsa-verifier, ory-kratos-fips, trivy-operator-fips,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: vexctl, skopeo-fips, teleport-operator-fips, flux-source-controller, spire-server, kyverno-fips, podman-fips, rekor-fips, fulcio, docker-compose, skaffold-fips, skopeo, trivy, image-factory, slsa-verifier, rekor, flux-source-controller-fips, trivy-operator-fips,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: trivy-fips, vexctl, tkn-fips, kyverno-notation-aws-fips, tflint-fips, aactl, cosign, chainctl, ratify-fips, spire-server-fips, neuvector-sigstore-interface-fips, teleport-operator-fips, goreleaser, cosign-fips, flux-source-controller, image-factory-fips, kyverno-fips...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: trivy-fips, vexctl, tkn-fips, kyverno-notation-aws-fips, tflint-fips, aactl, cosign, chainctl, ratify-fips, spire-server-fips, neuvector-sigstore-interface-fips, teleport-operator-fips, goreleaser, cosign-fips, flux-source-controller, image-factory-fips, kyverno-fips...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: trivy-fips, vexctl, tkn-fips, aactl, cosign, chainctl, spire-server-fips, neuvector-sigstore-interface-fips, cosign-fips, flux-source-controller, spire-server, tekton-chains-fips, zot, gh, melange, kubescape, policy-controller-fips, wolfictl, apko,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: mc-fips, kyverno-policy-reporter-ui-fips, vexctl, loki, actions-runner-controller, git-sync-fips, dgraph, velero-fips, harbor-registry, nemo, k8sgpt, oauth2-proxy, openfga, harbor-registry-fips, opencost, keda, flux-source-controller, spire-server, kyverno-fips,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: mc-fips, argo-events-fips, vexctl, loki, actions-runner-controller, git-sync-fips, flux-source-controller, temporal-server-fips, secrets-store-csi-driver-provider-azure-fips, gitea-fips, grafana-fips, minio-operator-fips, temporal-fips, flux-notification-controller,...