28 matches found
GHSA-VFP3-V2GW-7WFQ vulnerabilities
Vulnerabilities for packages: listmonk, falcosidekick-ui, temporal-ui-server-fips, temporal-fips, kube-metrics-adapter, temporal, falcosidekick-ui-fips, kube-metrics-adapter-fips, temporal-ui-server...
GO-2024-2618 vulnerabilities
Vulnerabilities for packages: falcosidekick, guac, falcosidekick-fips...
GO-2025-3540 vulnerabilities
Vulnerabilities for packages: oauth2-proxy, atlantis, argo-cd, argo-cd-fips, keda, loki, fluent-bit-plugin-loki, gitea, traefik-fips, falcosidekick, splunk-otel-collector, juicefs, kots, mattermost-fips, gitea-fips, dapr-fips, opentelemetry-collector-contrib-fips, authservice, rekor-fips, dapr,...
GO-2024-2606 vulnerabilities
Vulnerabilities for packages: kine, kube-bench-fips, trillian-fips, argo-workflows, temporal-server, amass, step-ca, ferretdb, src, k3s, kots, temporal-server-fips, argo-workflows-fips, spicedb, caddy, caddy-fips, step, kube-bench, trillian, falcosidekick-fips, wavefront-collector-for-kubernetes...
GO-2024-2618 vulnerabilities
Vulnerabilities for packages: guac, falcosidekick...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: kwok, hubble-ui, rqlite, tempo, ferretdb, kube-rbac-proxy, temporal, tflint, kargo, terraform-docs, k3d, guac, kots, step-ca, falcosidekick, trivy, minio, pulumi-language-dotnet, sigstore-scaffolding, terraform-provider-google, zarf, grafana-mimir, gomplate, sops,...
GO-2025-3540 vulnerabilities
Vulnerabilities for packages: authservice, kots, oauth2-proxy, falcosidekick, fluent-bit-plugin-loki, splunk-otel-collector, gitea, atlantis...
GO-2025-4173 vulnerabilities
Vulnerabilities for packages: minio, falcosidekick, bento...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: cluster-api-gcp-controller, mesosphere-vsphere-csi, http-echo, kubelet-csr-approver, govulncheck, terraform-provider-pagerduty, nri-redis, bom, src-fingerprint, kubernetes-csi-external-attacher, tofu-controller, percona-server-mongodb-operator,...
CVE-2026-41602 vulnerabilities
Vulnerabilities for packages: jaeger-fips, nri-cassandra-fips, minio, opentelemetry-collector, opentelemetry-collector-contrib, telegraf, seaweedfs-fips, commercial-grafana, datadog-agent, loki, jaeger, plutono, temporal-server, nri-kafka, nri-cassandra, grafana-alloy, commercial-expanso-edge,...
GHSA-WF45-Q9CH-Q8GH vulnerabilities
Vulnerabilities for packages: jaeger-fips, nri-cassandra-fips, minio, opentelemetry-collector, opentelemetry-collector-contrib, telegraf, seaweedfs-fips, commercial-grafana, datadog-agent, loki, jaeger, plutono, temporal-server, nri-kafka, nri-cassandra, grafana-alloy, commercial-expanso-edge,...
CVE-2026-41889 vulnerabilities
Vulnerabilities for packages: chainloop-control-plane, goose, harbor, cerbos, chainloop-control-plane-fips, seaweedfs-fips, commercial-grafana, spqr, commercial-expanso-edge, gitlab-cng-fips, rke2-runtime, gotrue, seaweedfs, seaweedfs-rocksdb, bento, grafana, openbao, dapr-fips, vault, cloudprobe...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: cluster-api-gcp-controller, mesosphere-vsphere-csi, kubelet-csr-approver, terraform-provider-pagerduty, bom, src-fingerprint, kubernetes-csi-external-attacher, tofu-controller, percona-server-mongodb-operator, fluxcd-kustomize-mutating-webhook,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: cluster-api-gcp-controller, mesosphere-vsphere-csi, http-echo, kubelet-csr-approver, govulncheck, terraform-provider-pagerduty, nri-redis, bom, src-fingerprint, kubernetes-csi-external-attacher, tofu-controller, percona-server-mongodb-operator,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: sbom-scorecard, govulncheck, nri-redis, gosu, bom, src-fingerprint, wuzz, minio, amazon-cloudwatch-agent-operator, postgres-operator, whereabouts, dex, metallb, cert-manager-cmctl, openbao-k8s, kubo, crossplane-provider-aws-lambda, restic, manifest-tool,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: sbom-scorecard, govulncheck, nri-redis, gosu, bom, src-fingerprint, wuzz, minio, amazon-cloudwatch-agent-operator, postgres-operator, whereabouts, dex, metallb, cert-manager-cmctl, openbao-k8s, kubo, crossplane-provider-aws-lambda, restic, manifest-tool,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: cluster-api-gcp-controller, mesosphere-vsphere-csi, kubelet-csr-approver, terraform-provider-pagerduty, bom, src-fingerprint, kubernetes-csi-external-attacher, tofu-controller, percona-server-mongodb-operator, fluxcd-kustomize-mutating-webhook,...
CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...