GO-2024-2631 vulnerabilities

Vulnerabilities for packages: temporal-ui-server-fips, oauth2-proxy, flux-source-controller, weaviate, melange, k3s, zarf, tekton-chains, step, terragrunt, caddy, argo-workflows, policy-controller-fips, zot, spire-server-fips, timestamp-authority, sops, flux-kustomize-controller, falcoctl-fips, k...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: kubevela, kubeflow-katib, timoni, chartmuseum, falcoctl, k9s, scorecard, docker-machine-driver-harvester, cosign, flux, skaffold, bom, eksctl, cri-tools, crane, nerdctl, falcoctl-fips, argo-workflows-fips, helm-fips, cadvisor-fips, newrelic-infrastructure-agent,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: witness, falcoctl, flux-source-controller, cloudbeat-fips, kyverno, trivy-fips, cosign, neuvector-sigstore-interface-fips, skaffold, tflint, skaffold-fips, falcoctl-fips, kyverno-notation-aws-fips, cg, tkn-fips, ko, trivy-operator, crossplane-fips, trivy-operator-fip...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: flux-source-controller, trivy-fips, prometheus-podman-exporter, docker-compose, podman, docker-compose-fips, crossplane-fips, zarf, kyverno-policy-reporter-plugins-kyverno, tekton-chains, tflint-fips, policy-controller-fips, zot, spire-server-fips, timestamp-authorit...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, paranoia, k9s, kubescape-operator, rancher-system-agent, flux, dive, google-osconfig-agent, rke2-runtime-fips, vitess, crossplane-fips, k3s, kyverno-policy-reporter-plugins-kyverno, tekton-chains, openbao, flux-image-reflector-controller,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: witness, teleport-operator-fips, falcoctl, flux-source-controller, cloudbeat-fips, kyverno, trivy-fips, cosign, neuvector-sigstore-interface-fips, skaffold, tflint, skaffold-fips, zarf, docker, falcoctl-fips, kyverno-notation-aws-fips, rekor, cg, tkn-fips, ko,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: witness, teleport-operator-fips, falcoctl, flux-source-controller, cloudbeat-fips, kyverno, trivy-fips, cosign, neuvector-sigstore-interface-fips, skaffold, tflint, skaffold-fips, zarf, docker, falcoctl-fips, kyverno-notation-aws-fips, rekor, cg, tkn-fips, ko,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-source-controller, trivy-fips, cosign, neuvector-sigstore-interface-fips, melange, falcoctl-fips, rekor, tkn-fips, flux-source-controller-fips, gh, sigstore-scaffolding-fips, zarf, spire-server, tekton-chains, cosign-fips, tekton-chains-fips, gitsign,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: terraform-fips, restic-fips, kubeflow-katib, oauth2-proxy, mc, chartmuseum, flux-source-controller, aws-eks-pod-identity-agent, rclone-fips, falcosidekick, chezmoi, trivy-fips, weaviate, flux, jitsucom-bulker, splunk-otel-collector, terraform-provider-azapi,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, mc, chartmuseum, flux-source-controller, weaviate, trivy-fips, kube-logging-logging-operator, grafana-alloy-fips, k3s, zarf, git-sync, tekton-chains, openbao, gitea, boring-registry, flux-image-reflector-controller,...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: spire-server, opa, k8sgpt, kubescape, policy-controller, zot, cosign, kots, tfsec, zarf, snyk-cli, conftest...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: spire-server, kyverno-notation-aws, policy-controller, cosign, kots, tfsec, trivy, witness, conftest...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: slsa-verifier, cosign, gh...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: goreleaser, teleport, flux-source-controller, kubescape, docker, trivy, ko, gh, gitsign, kyverno-notation-aws, tflint, zarf, witness, neuvector-sigstore-interface, tekton-chains, sigstore-scaffolding, policy-controller, vexctl, skaffold, buildkitd, falcoctl,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: blob-csi, grype, k8sgpt, kubernetes-csi-external-attacher, kubescape, rke2-cloud-provider, fluent-operator, azure-service-operator, spicedb, fulcio, kubernetes-csi-external-resizer, weaviate, kyverno-notation-aws, gitaly, percona-server-mongodb-operator,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trino, goreleaser, k8sgpt, flux-source-controller, kubescape, prometheus-operator, ksops, step-ca, chezmoi, py3-azure-identity, trivy, wal-g, opentelemetry-collector-contrib, pulumi, fulcio, flux, rekor, restic, flux-kustomize-controller, up, nuclei, harbor-registry,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, regclient, custom-pod-autoscaler, glow, prometheus-operator, spark-operator, terraform-provider-time, http-echo, terraform, ctop, gostatsd, conftest, dive, kind, cadvisor, buildkitd, falco-exporter, configmap-reload, yace,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cloudflared, kubescape, fulcio, rekor, flux-kustomize-controller, gitsign, aactl, terragrunt, argo-workflows, tekton-chains, slsa-verifier, oauth2-proxy, vexctl, sops, spire-server, dex, cosign, kots, tkn...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubescape, prometheus-operator, spark-operator, pulumi, kubernetes-csi-external-resizer, nri-prometheus, weaviate, trust-manager, terraform, dive, kind, yq, kube-state-metrics, metacontroller, prometheus-pushgateway, src, buildkitd, k3s, gomplate, gitness,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: spire-server, tekton-chains, flux-source-controller, kubescape, melange, policy-controller, slsa-verifier, cosign, aactl, skaffold, ko, tkn, apko...