GO-2026-4942 vulnerabilities

Vulnerabilities for packages: kots, gitness, zot, envoy-gateway, portieris, argocd-image-updater...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: commercial-chainloop-backend, commercial-expanso-edge, k3s, spire-server, commercial-grafana, envoy-gateway, kine, kots, envoy-gateway-fips...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: vault, teleport, vault-fips, commercial-grafana, gitaly, envoy-gateway-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: xeol-fips, maru, crossplane, helm-operator, argocd-image-updater, ocm-cli-fips, opentofu, vcluster-fips, rancher-agent, linkerd2-fips, rancher, kargo, falcoctl, drone, envoy-gateway-fips, rancher-fleet, kubescape-operator, trivy, xeol, cloudbeat, tigera-operator-fips...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitness, portieris-fips, envoy-gateway, kots, gitlab-rails-ce-fips, portieris, envoy-gateway-fips, argocd-image-updater-fips, gitlab-rails-ce, zot, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitness, portieris-fips, envoy-gateway, kots, gitlab-rails-ce-fips, portieris, envoy-gateway-fips, argocd-image-updater-fips, gitlab-rails-ce, zot, argocd-image-updater...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: vcluster, trivy, zot, steampipe, filebrowser, zarf, trufflehog, gptscript, k9s, gitleaks, kubescape-operator, nsc, terraform, trivy-operator, gitness, nuclei, undock, guac, podman, xeol, envoy-gateway, grafana-alloy, terragrunt, opentofu, rancher-fleet, tflint...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: k3s, kots, envoy-gateway, spire-server, kine...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-push, kots, trivy, zot, zarf, cert-manager-cmctl, flux-helm-controller, chartmuseum, k9s, linkerd2, tw, pluto, istio, chart-testing, helm-docs, k8sgpt, cilium-cli, envoy-gateway, helm-operator, cluster-api-helm-controller, k8ssandra-client, eksctl, kargo,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: kots, gitness, zot, envoy-gateway, portieris, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: kots, gitness, zot, envoy-gateway, portieris, argocd-image-updater...

GO-2026-6007 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway...

GO-2026-6009 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway...

GO-2026-6011 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway...

GO-2026-6005 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway...

GO-2026-6006 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway...

GO-2026-6003 Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway...

GO-2026-6008 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

Envoy Gateway: OCI layer extraction allocates makebyte, h.Size from untrusted tar header in github.com/envoyproxy/gateway...