GO-2022-0635 vulnerabilities

Vulnerabilities for packages: kots, zot, loki, mattermost, opentelemetry-collector, external-secrets-operator, k3d...

GO-2022-0646 vulnerabilities

Vulnerabilities for packages: kots, zot, loki, mattermost, opentelemetry-collector, external-secrets-operator, k3d...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5889 vulnerabilities

Vulnerabilities for packages: external-dns...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terragrunt, kots, kaniko, kwok, terraform-provider-google, certificate-transparency, restic, k8sgpt-operator, sops, opentelemetry-collector, k8sgpt, step-ca, k3d, hubble-ui, vcluster, osv-scanner, zarf, dex, kargo, opentelemetry-collector-contrib, falcosidekick,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: flux, steampipe, trufflehog, grafana-alloy, kots, kaniko, scorecard, nfpm, trivy-operator, pulumi-language-java, argo-workflows, teleport, osv-scanner, zarf, chezmoi, kargo, nuclei, gitea, argo-events, pulumi-language-dotnet, external-secrets-operator, kyverno, tfsec...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: argo-cd, teleport, terragrunt, syft, cerbos, gitaly, scorecard, rancher-fleet, rclone, external-secrets-operator, kyverno...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: argo-cd, flux, teleport, terragrunt, syft, cerbos, gitaly, scorecard, rancher-fleet, telegraf, rclone, external-secrets-operator, kyverno...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: flux, lazygit, spark-operator, k8ssandra-operator, litefs, bazelisk, kwok, flux-helm-controller, nri-mongodb, scorecard, velero, chartmuseum, fuse-overlayfs-snapshotter, task, gh, thanos-operator, tailscale, kubernetes-dashboard-metrics-scraper, wireguard-go,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: flux, kapp-controller, flux-helm-controller, kwok, op-geth, scorecard, chartmuseum, velero, distribution, k8sgateway, kafka-proxy, conftest, go-discover, crossplane-provider-aws-sns, mc, cosign, minio, newrelic-infrastructure-agent, cert-manager,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: flux, spark-operator, kube-fluentd-operator, flux-helm-controller, chartmuseum, fuse-overlayfs-snapshotter, thanos-operator, wireguard-go, kubernetes-dashboard-metrics-scraper, vertical-pod-autoscaler, gobuster, secrets-store-csi-driver-provider-gcp, oauth2-proxy, mc...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: flux, spark-operator, litefs, kube-fluentd-operator, datadog-agent, kapp-controller, kiali, fuse-overlayfs-snapshotter, sftpgo-plugin-eventstore, vcluster, atlantis, golangci-lint, cert-exporter, node-problem-detector, vertical-pod-autoscaler,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: flux, nri-postgresql, rabbitmq-default-user-credential-updater, spark-operator, litefs, kube-fluentd-operator, bazelisk, datadog-agent, scorecard, ko, nfpm, timestamp-authority, thanos-operator, azure-service-operator, sftpgo-plugin-eventstore, atlantis, vitess,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: flux, lazygit, spark-operator, bazelisk, kwok, flux-helm-controller, scorecard, chartmuseum, nfpm, thanos-operator, kafka-proxy, kubernetes-replicator, gobuster, go-discover, vale, mc, cosign, aws-flb-cloudwatch, newrelic-infrastructure-agent, cert-manager,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux, datadog-agent, scorecard, ko, nfpm, trivy-operator, gh, rootlesskit, atlantis, argo-events, go-discover, kyverno, act, crossplane-provider-aws-sns, policy-controller, spire-server, cosign, crossplane-provider-aws-s3, crossplane-provider-aws-firehose, eksctl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: nri-postgresql, lazygit, rabbitmq-default-user-credential-updater, litefs, spark-operator, kapp-controller, nri-mongodb, scorecard, fuse-overlayfs-snapshotter, restic, hydra, k8sgateway, thanos-operator, azure-service-operator, kubernetes-dashboard-metrics-scraper,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: flux, rabbitmq-default-user-credential-updater, spark-operator, kapp-controller, chartmuseum, ko, k8sgateway, thanos-operator, azure-service-operator, kubernetes-dashboard-web, aws-privateca-issuer, kubernetes-csi-external-health-monitor, gobuster, argo-events, fzf,...

SUSE CVE-2026-73235

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader parses attacker-controlled Document.xml from a crafted .FCStd archive without disabling default external entity...