GO-2025-4098 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, kubernetes, trivy-fips, grype, syft, google-osconfig-agent, kots, syft-fips, skaffold-fips, prometheus-podman-exporter, xeol-fips, trivy, skopeo, nvidia-container-toolkit, rke2-runtime-fips, eks-distro, virt-launcher,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: octo-sts, thanos-operator, kratos, wazero-fips, newrelic-k8s-metadata-injection-fips, conftest-fips, nova-fips, nri-redis-fips, docker-cli, openbao-k8s-fips, syft, yunikorn-k8shim-fips, redka, harbor-fips, k8s-driver-manager-fips, otel-cli, php-fpmexporter,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: octo-sts, crossplane-provider-aws-emrserverless, conftest-fips, yunikorn-k8shim-fips, redka, harbor-fips, otel-cli, cloud-provider-azure-fips, kots, chainloop-cli, cloud-provider-gcp-cloud-controller-manager-fips, terraform-docs-fips, skaffold-fips,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-emrserverless, conftest-fips, yunikorn-k8shim-fips, redka, harbor-fips, cloud-provider-azure-fips, kots, chainloop-cli, cloud-provider-gcp-cloud-controller-manager-fips, skaffold-fips, crossplane-provider-aws-elasticsearch, chainctl-fips,...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: octo-sts, thanos-operator, kratos, newrelic-k8s-metadata-injection-fips, conftest-fips, nova-fips, openbao-k8s-fips, syft, yunikorn-k8shim-fips, redka, paranoia, harbor-fips, otel-cli, php-fpmexporter, cloud-provider-azure-fips, kots, grafana-agent-operator,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: octo-sts, emissary, thanos-operator, distribution, conftest-fips, openbao-k8s-fips, yunikorn-k8shim-fips, harbor-fips, cloud-provider-azure-fips, kots, grafana-agent-operator, tfsec, crossplane-provider-azure-managedidentity, external-secrets-fips, weaviate,...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: melange, pombump...

GO-2024-2618 vulnerabilities

Vulnerabilities for packages: falcosidekick, guac...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: gitaly, external-secrets-operator, guac, terragrunt, teleport...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: helm-set-status, cilium-cli, helm-docs, helm-mapkubeapis, envoy-gateway, chartmuseum, istio, kots, k9s, tw, nova, zot, flux, trivy, cluster-api-helm-controller, eksctl, k8sgpt, pluto, rancher-fleet, trivy-operator, headlamp, zarf, cerbos, flux-source-controller, karg...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, envoy-gateway, kots, aws-otel-collector, zot, trivy, rancher-machine, portieris, podman, skopeo, k8sgpt, undock, trivy-operator, buildah, nerdctl, grafana, rancher-agent, amazon-cloudwatch-agent-operator, spire-server, opentelemetry-operator, k...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, envoy-gateway, kots, gatekeeper, aws-otel-collector, neuvector-scanner, zot, trivy, osv-scanner, rancher-machine, portieris, apko, podman, k8sgpt, skopeo, undock, openfga, newrelic-infrastructure-agent, trivy-operator, zarf, buildah, nerdctl,...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: snyk-cli, terraform-provider-acme, gomplate, temporal-server, gitlab-runner, velero-plugin-for-aws, cloudprober, kots, k9s, flux-kustomize-controller, aws-otel-collector, aws-network-policy-agent, crossplane-provider-aws-sqs, telegraf, eksctl, trufflehog, keda, guac,...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: snyk-cli, helm-mapkubeapis, crane, chartmuseum, kots, libnvidia-container, neuvector-scanner, flux, atlantis, datadog-agent, telegraf, bom, kbld, eksctl, paranoia, podman, rancher-helm, scorecard, go, flux-source-controller, buf, mesosphere-vsphere-csi, witness,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, gitlab-runner, ghaudit, wazero, flux-kustomize-controller, nri-cassandra, minio-operator, telegraf, mkcert, kube-bench, restic, pguser, gobuster, nri-mongodb, go-jsonnet, chart-testing, openbao-k8s, external-dns, wgcf, docker, kubeflow-pipelines,...

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: authentik, authentik-fips, openstack-horizon-2026.1, openstack-horizon-2026.1-fips...

security-review-skill

Security Review Skill for Claude Code A comprehensive securit...

EUVD-2019-6558

Malware in sbrugna...

DependencyCheck

This is an open-source project for a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies. The project is called OWASP dependency-check. The project is written in Java and is designed to be used in a variety of environments, including...

CVE-2024-50611

CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation,...