GO-2026-5052 vulnerabilities

Vulnerabilities for packages: x509-certificate-exporter, cert-manager, external-secrets-operator, crossplane-provider-azure-storage, splunk-otel-collector, crossplane-provider-azure-authorization, telegraf, nuclei, gobuster, crossplane-provider-family-azure, grafana, nfpm, goreleaser,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: trivy-operator, cosign, buildkitd, kyverno-notation-aws, trivy, kyverno, spire-server, sigstore-scaffolding, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, docker, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kots, grype, dagger, pulumi-language-yaml, snyk-cli, nuclei, pulumi-language-java, gitea, trivy, wolfictl, go-licenses, guac, pulumi, chezmoi, src-fingerprint, flux-source-controller, goreleaser, flux-image-automation-controller, flux, zarf, kaniko, tfsec, kubevela,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kots, grype, dagger, pulumi-language-yaml, snyk-cli, nuclei, pulumi-language-java, gitea, trivy, wolfictl, go-licenses, guac, pulumi, chezmoi, src-fingerprint, flux-source-controller, goreleaser, flux-image-automation-controller, flux, zarf, kaniko, tfsec, kubevela,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: trufflehog, trivy-operator, kots, grype, dagger, pulumi-language-yaml, snyk-cli, xeol, nuclei, pulumi-language-java, gitea, kyverno, trivy, nfpm, argo-cd, wolfictl, guac, pulumi, chezmoi, src-fingerprint, flux-source-controller, scorecard,...

GO-2026-4526 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, nuclei, tempo, aws-otel-collector, crossplane-provider-azure-sql, crossplane-provider-aws-iam, crossplane-provider-aws-cloudformation, crossplane-provider-aws-firehose, crossplane-provider-aws-kms, crossplane-provider-aws-memorydb,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trufflehog, kubernetes-csi-livenessprobe, vault-benchmark, redka, traefik, karpenter, azure-workload-identity-webhook, kube-state-metrics, addon-resizer, terraform-provider-azurerm, kubescape-operator, q, sops, spqr, apache-exporter, external-secrets-operator,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: grype, nri-kafka, kube-state-metrics, libssh, k3d, terraform-provider-azurerm, sops, grpc-health-probe, cadvisor, secrets-store-csi-driver, kubernetes, gobuster, crossplane-provider-family-azure, kube-rbac-proxy, gitness, melange, bom, skopeo, temporal, libssh2,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: grype, dagger, buildkitd, docker-compose, trivy, wolfictl, spire-server, cadvisor, kaniko, melange, tkn, conftest, ko, syft, crossplane, cilium-cli, kubescape, up, aactl, kargo, zot, buf, ctop...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, grype, docker-compose, kyverno-policy-reporter-ui, kube-state-metrics, k3d, terraform-provider-azurerm, sops, crossplane-provider-aws-iam, kine, grpc-health-probe, ip-masq-agent, cadvisor, secrets-store-csi-driver, kubernetes,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: teleport, trivy-operator, ratify, aactl, zot, kyverno-notation-aws, trivy, kyverno, policy-controller, crossplane, slsa-verifier, kubescape...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: tkn, trivy-operator, ratify, aactl, tekton-chains, gitsign, zarf, kyverno-notation-aws, trivy, kyverno, policy-controller, tflint, crossplane, neuvector-sigstore-interface, falcoctl, kubescape...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: trufflehog, spqr, cadvisor, sriov-network-device-plugin, fuse-overlayfs-snapshotter, tetragon, crossplane-provider-aws-elasticache, yunikorn-k8shim, ferretdb, metallb, kubernetes-dns-node-cache, spegel, cloudnative-pg, gitaly, terraform-provider-sendgrid,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: trivy-operator, ratify, kyverno-notation-aws, kyverno, spire-server, goreleaser, tekton-chains, zarf, tflint, teleport, tkn, ko, policy-controller, crossplane, slsa-verifier, neuvector-sigstore-interface, kubescape, aactl, gitsign, falcoctl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: openbao, grype, splunk-otel-collector, vault-benchmark, docker-compose, traefik, go-discover, terraform-provider-azurerm, sops, crossplane-provider-aws-iam, kine, external-secrets-operator, kubernetes, external-dns, prometheus, crossplane-provider-family-azure,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: ratify, cosign, kyverno-notation-aws, kyverno, spire-server, sigstore-scaffolding, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane, neuvector-sigstore-interface, kubescape, aactl,...

GO-2026-4918 vulnerabilities

Vulnerabilities for packages: trufflehog, redka, kubernetes-dashboard-api, wave, cadvisor, fuse-overlayfs-snapshotter, grafana-operator, openbao-k8s, nova, crossplane-provider-aws-elasticache, yunikorn-k8shim, kubewatch, cloudnative-pg, polaris, nri-nginx, gitaly, rancher-webhook,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, vault-benchmark, terraform-provider-pagerduty, helm-set-status, redka, traefik, pgtimetable, azure-workload-identity-webhook, kyverno-policy-reporter-ui, rancher-loglevel, k3d, kubescape-operator, aws-signer-notation-plugin, sops,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy-operator, ratify, cosign, buildkitd, kyverno-notation-aws, trivy, kyverno, spire-server, sigstore-scaffolding, goreleaser, flux-source-controller, tekton-chains, zarf, vexctl, tflint, docker, teleport, tkn, gh, ko, skaffold, policy-controller, crossplane,...

GO-2025-4134 vulnerabilities

Vulnerabilities for packages: nri-kafka, tailscale, cadvisor, gobuster, bom, grafana-operator, crossplane-provider-aws-elasticache, ferretdb, kubernetes-dns-node-cache, spegel, cloudnative-pg, terraform-provider-sendgrid, crossplane-provider-aws-s3, argo-rollouts, argo-cd, aws-otel-collector,...