GO-2026-5738 vulnerabilities

Vulnerabilities for packages: k8sgateway, external-dns...

GO-2022-0646 vulnerabilities

Vulnerabilities for packages: zot, opentelemetry-collector, external-secrets-operator, mattermost, k3d, kots, loki...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5889 vulnerabilities

Vulnerabilities for packages: external-dns...

GO-2022-0635 vulnerabilities

Vulnerabilities for packages: zot, opentelemetry-collector, external-secrets-operator, mattermost, k3d, kots, loki...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, k3s, kwok, conftest, kaniko, grpc-health-probe, trivy, dbmate, terraform-provider-google, ferretdb, dex, opentelemetry-collector, fulcio, smarter-device-manager, spegel, cilium-cli, ksops, k3d, zarf, step-ca, rqlite,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: cerbos, syft, kyverno, teleport, scorecard, external-secrets-operator, rancher-fleet, terragrunt, argo-cd, rclone, gitaly...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, flux-source-controller, trivy-operator, pulumi, kubescape, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, chezmoi, trufflehog, wolfictl, k9s, gitsign, scorecard...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: cerbos, syft, kyverno, telegraf, teleport, scorecard, external-secrets-operator, rancher-fleet, terragrunt, argo-cd, rclone, gitaly, flux...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: oras, paranoia, s5cmd, temporal-server, gitness, thanos, crossplane-provider-azure, influx, kind, temporal-ui-server, cluster-proportional-autoscaler, hey, dgraph, doppler-kubernetes-operator, dynamic-localpv-provisioner, gh, speedtest-go, kubernetes-csi-livenessprob...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: calico, thanos, kubernetes-csi-external-snapshotter, kubernetes-csi-external-attacher, descheduler, dynamic-localpv-provisioner, fulcio, podman, scorecard, vault-secrets-webhook, grpcurl, openfga, rqlite, crossplane-provider-sql, snyk-cli, trillian, tfsec,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, paranoia, addon-resizer, terraform-provider-acme, temporal-server, calico, rancher-fleet, grafana-alloy, temporal-ui-server, cluster-proportional-autoscaler, glab, dgraph, litestream, descheduler, dynamic-localpv-provisioner,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: gitness, crossplane-provider-azure, crossplane-provider-aws, hey, dgraph, dynamic-localpv-provisioner, kubernetes-csi-livenessprobe, grpcurl, spark-operator, nfs-subdir-external-provisioner, rqlite, sigstore-scaffolding, trillian, kubernetes-csi-external-provisioner,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: paranoia, addon-resizer, terraform-provider-acme, temporal-server, timestamp-authority, thanos, influx, grafana-alloy, cluster-proportional-autoscaler, hey, kubernetes-csi-external-attacher, litestream, nova, speedtest-go, keda, opentelemetry-collector,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, terraform-provider-acme, glab, chezmoi, crossplane-provider-aws-rds, gh, opentelemetry-collector, fscrypt, fulcio, podman, traefik, scorecard, cloudflared, cloud-provider-aws, snyk-cli, syft, terraform-provider-tls, gitlab-runner,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: chisel, oras, addon-resizer, calico, yunikorn-web, kubernetes-csi-external-attacher, chezmoi, descheduler, dynamic-localpv-provisioner, podman, scorecard, vault-secrets-webhook, grpcurl, cert-exporter, nfs-subdir-external-provisioner, rqlite, incert,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, yunikorn-k8shim, paranoia, s5cmd, calico, gitness, influx, git-sync, temporal-ui-server, hey, doppler-kubernetes-operator, kubernetes-csi-external-attacher, litestream, descheduler, dynamic-localpv-provisioner, crossplane-provider-aws-rds, swagge...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, kind, grafana-alloy, kubernetes-csi-external-health-monitor, dgraph, mockgen, nova, swagger, ipfs-cluster, fulcio, docker-credential-gcr, envconsul, spark-operator, portieris, rabbitmq-cluster-operator, aws-application-networking-k8s, docker-cli,...

SUSE CVE-2026-73235

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader parses attacker-controlled Document.xml from a crafted .FCStd archive without disabling default external entity...