GO-2026-4942 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kots, portieris, argocd-image-updater, gitness, zot...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: commercial-grafana, vault-fips, gitaly, envoy-gateway-fips, teleport, vault...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: commercial-grafana, envoy-gateway, commercial-expanso-edge, commercial-chainloop-backend, k3s, kots, envoy-gateway-fips, kine, spire-server...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: envoy-gateway, gitness, kots, envoy-gateway-fips, argocd-image-updater, portieris, gitlab-rails-ce-fips, portieris-fips, zot, argocd-image-updater-fips, gitlab-rails-ce...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway, gitness, kots, envoy-gateway-fips, argocd-image-updater, portieris, gitlab-rails-ce-fips, portieris-fips, zot, argocd-image-updater-fips, gitlab-rails-ce...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: xeol-fips, eksctl, trivy-operator, xeol, rancher-fleet-fips, redpanda-operator, gatekeeper, gitlab-operator-fips, kube-mgmt-fips, trivy-fips, gitlab-operator, consul-k8s-fips, conftest-fips, consul-k8s, chartmuseum, ocm-cli, jfrog-cli, argo-cd, kubescape-server,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: grafana-alloy, gptscript, rancher-fleet, trivy, gitleaks, xeol, terraform, steampipe, nuclei, trivy-operator, podman, guac, kubescape-operator, trufflehog, zot, k9s, tflint, opentofu, undock, envoy-gateway, terragrunt, zarf, vcluster, filebrowser, gitness, nsc...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: envoy-gateway, spire-server, kots, k3s, kine...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cilium-cli, rancher-fleet, trivy, eksctl, istio, cerbos, helm-push, helm-operator, pluto, cluster-api-helm-controller, rancher-helm, zot, flux-helm-controller, flux-source-controller, k8sgpt, k9s, chart-testing, linkerd2, tw, kargo, k8ssandra-client,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kots, portieris, argocd-image-updater, gitness, zot...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kots, portieris, argocd-image-updater, gitness, zot...

GO-2026-6007 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway...

GO-2026-6011 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway...

GO-2026-6009 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway...

GO-2026-6005 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway...

GO-2026-6008 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

Envoy Gateway: OCI layer extraction allocates makebyte, h.Size from untrusted tar header in github.com/envoyproxy/gateway...

GO-2026-6003 Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway...

GO-2026-6006 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway...