GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: cue, cilium-cli, gh, kubernetes-ingress-defaultbackend, polaris, trino, buildah, docker-machine-driver-linode, dataplaneapi, mattermost, timestamp-authority, grafana-rollout-operator, vale, vt-cli, crane, chart-testing, esbuild, kserve-rest-proxy,...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, gitleaks, cue, cloudprober, flux-kustomize-controller, cilium-cli, kube-metrics-adapter, harbor-scanner-trivy, gh, seaweedfs, spire-server, crossplane-provider-aws-sns, go-discover, local-path-provisioner, dagdotdev,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: cue, cilium-cli, gh, polaris, trino, buildah, docker-machine-driver-linode, dataplaneapi, mattermost, timestamp-authority, grafana-rollout-operator, vale, vt-cli, crane, chart-testing, esbuild, kserve-rest-proxy, kubernetes-dashboard-metrics-scraper, terragrunt,...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, tekton-chains, gitsign, cosign-fips, kubescape, vexctl, falcoctl...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign-fips, gh, cosign...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: opa, zarf, conftest-fips, policy-controller, snyk-cli, k8sgpt, policy-controller-fips, spire-server-fips, cosign-fips, zot, kubescape, conftest, spire-server, tfsec, kots, cosign...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, boring-registry, spire-server-fips, tekton-chains, gitsign, external-secrets-fips, cosign-fips, kubescape, minio, vexctl, spire-server, mc, falcoctl...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: mattermost, chart-testing, docker-compose-fips, kubecolor, timestamp-authority, opa-fips, tkn, openfga-fips, elastic-agent, gh, aws-otel-collector-fips, nri-postgresql, witness, amazon-cloudwatch-agent-fips, grafana-alloy, zarf, seaweedfs, kyverno-policy-reporter-fip...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: k8sgpt, kube-fluentd-operator, tkn, kubernetes-csi-external-resizer, flux-notification-controller, pulumi, kube-logging-logging-operator, aws-efs-csi-driver, dex, kubeflow-katib, kubewatch, metrics-server, trust-manager, nodetaint,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: timestamp-authority, tkn, slsa-verifier, temporal-ui-server-fips, gomplate-fips, caddy-fips, dex, terragrunt, kube-rbac-proxy-fips, zarf, rook, vault, wolfictl, frp, kots, tekton-chains, zot, k3s, sigstore-scaffolding-fips, sops, melange, grpc-health-probe,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, aactl, policy-controller, spire-server-fips, ko, tekton-chains, kubescape, spire-server, apko, tkn, slsa-verifier, melange, flux-source-controller, skaffold, cosign...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: argo-workflows, k8sgpt, goreleaser, timoni, nerdctl, flux, guac, slsa-verifier, ctop, cadvisor, ko-fips, cadvisor-fips, aactl, buildkitd, dagger, pulumi, kubevela, up, eksctl, bom, scorecard, kargo, argo-workflows-fips, docker-machine-driver-harvester, loki,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: spire-server-fips, goreleaser, cloudbeat, trivy-fips, spire-server, tkn, gh, slsa-verifier, kyverno, kyverno-policy-reporter-plugins-kyverno-fips, neuvector-sigstore-interface, ko-fips, aactl, buildkitd, image-factory, ko, tflint-fips, witness, cloudbeat-fips,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: k9s-fips, cloudbeat, dagdotdev, gh, slsa-verifier, kyverno-policy-reporter-plugins-kyverno-fips, flux-notification-controller, minio-operator-fips, rancher-system-agent, witness, rke2-runtime, tekton-pipelines-fips, incert, tekton-pipelines, kubeflow-katib,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, cloudbeat, timestamp-authority, tkn, gh, slsa-verifier, kyverno-policy-reporter-plugins-kyverno-fips, prometheus-podman-exporter, witness, tekton-pipelines-fips, zarf, tekton-pipelines, undock, crossplane-fips, kots, tekton-chains, falco-no-drive...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: spire-server-fips, goreleaser, cloudbeat, trivy-fips, spire-server, tkn, gh, slsa-verifier, kyverno, kyverno-policy-reporter-plugins-kyverno-fips, docker, neuvector-sigstore-interface, ko-fips, aactl, buildkitd, image-factory, ko, reports-server, sigstore-scaffolding...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: spire-server-fips, goreleaser, cloudbeat, trivy-fips, spire-server, tkn, gh, slsa-verifier, kyverno, kyverno-policy-reporter-plugins-kyverno-fips, docker, neuvector-sigstore-interface, ko-fips, aactl, buildkitd, image-factory, ko, reports-server, sigstore-scaffolding...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: spire-server-fips, trivy-fips, spire-server, apko, tkn, gh, slsa-verifier, neuvector-sigstore-interface, aactl, sigstore-scaffolding, chainctl, tekton-chains-fips, policy-controller-fips, zarf, policy-controller, tkn-fips, cosign-fips, kubescape,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: k8sgpt, temporal-server, timestamp-authority, velero, tkn, openfga-fips, flux-image-reflector-controller-fips, grafana-agent-operator, cortex, flux-notification-controller, minio-operator-fips, gomplate-fips, pulumi, amazon-cloudwatch-agent-fips,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: temporal-server, doppler-kubernetes-operator, tkn, flux-image-reflector-controller-fips, flux-notification-controller, minio-operator-fips, kube-logging-logging-operator, consul, cluster-autoscaler, grafana-alloy, zarf, kubeflow-katib, wal-g, git-sync-fips, mc, vault...