GO-2023-2412 vulnerabilities

Vulnerabilities for packages: eksctl, gitness, melange, ctop, fuse-overlayfs-snapshotter, grype, zot, flux-helm-controller, kubevela, helm-push, k3d, k8sgpt, helm, flux-source-controller, newrelic-infrastructure-agent, kubescape, kots, up, trivy, cilium-cli, buildkitd, skaffold, kaniko...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, goreleaser, policy-controller, gitsign, sigstore-scaffolding, zot, falcoctl, trivy-operator, spire-server, tekton-chains, kyverno-notation-aws, teleport, gh, flux-source-controller, kubescape, witness, vexctl, tkn, trivy, docker,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-helm, chart-testing, istio, helm-docs, tw, zot, flux-helm-controller, rancher-fleet, cerbos, helm-push, helm-operator, pluto, linkerd2, envoy-gateway, k8sgpt, flux-source-controller, k9s, kots, trivy, cluster-api-helm-controller, cert-manager-cmctl,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: wolfictl, melange, goreleaser, osv-scanner, argo-events, flux-image-automation-controller, gitsign, grype, dagger, apko, zot, kubevela, argocd-image-updater, crossplane, nuclei, src-fingerprint, snyk-cli, tfsec, flux, pulumi-language-yaml, k8sgpt, task, go-licenses,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: wolfictl, melange, goreleaser, osv-scanner, argo-events, flux-image-automation-controller, gitsign, grype, dagger, apko, zot, kubevela, argocd-image-updater, crossplane, nuclei, src-fingerprint, snyk-cli, tfsec, flux, pulumi-language-yaml, k8sgpt, task, go-licenses,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, melange, wolfictl, kyverno, osv-scanner, argo-events, flux-image-automation-controller, gitsign, grype, xeol, dagger, nfpm, kaniko, apko, zot, rancher-fleet, trivy-operator, cerbos, kubevela, argocd-image-updater, crossplane, nuclei,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: rancher-fleet, scorecard, cerbos, gitaly, external-secrets-operator, rclone, syft, terragrunt, telegraf, flux, argo-cd, teleport...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: wal-g, step, ksops, goreleaser, policy-controller, argo-events, cortex, harbor-registry, sigstore-scaffolding, grafana-agent-operator, boring-registry, rook, flyte, terragrunt, zot, falcoctl, timestamp-authority, trino, sqlpad, sops, spire-server, nuclei, rekor,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-image-automation-controller, aws-load-balancer-controller, mage, hubble-ui, aws-flb-cloudwatch, nri-f5, paranoia, wireguard-go, dagger, hello-world-golang, s5cmd, helm-push, k3d, speedtest-go, pombump, supercronic, regclient, metrics-server, esbuild,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, ksops, sops, chezmoi, litestream, age...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: rancher-telemetry, flux-image-automation-controller, aws-load-balancer-controller, external-dns, redka, cluster-api-azure-controller, crane, aws-s3-controller, cerbos, swagger, crossplane-provider-aws-cloudfront, rootlesskit, metrics-server, tfsec, nri-prometheus,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: omnibump, external-secrets-operator, goreleaser, osv-scanner, stakater-reloader, flux-image-automation-controller, victoriametrics-cluster, aws-load-balancer-controller, nova, clickhouse-operator, sftpgo-plugin-eventsearch, aws-privateca-issuer, oras, apko,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: aactl, dex, gitsign, oauth2-proxy, terragrunt, sops, spire-server, rekor, tekton-chains, slsa-verifier, flux-source-controller, cloudflared, kubescape, kots, vexctl, tkn, argo-workflows, flux-kustomize-controller, cosign, fulcio...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: omnibump, ksops, goreleaser, policy-controller, kubo, sigstore-scaffolding, hubble-ui, aws-flb-cloudwatch, paranoia, redka, rancher-fleet, speedtest-go, helm-push, redpanda, crossplane-provider-aws-cloudfront, metrics-server, aws-nuke, terraform-provider-acme,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: falcoctl, ratify, slsa-verifier, kyverno, aactl, undock, zarf, gitsign, podman, flux-source-controller, kubescape, kots, tekton-chains, kyverno-notation-aws, witness, skopeo, buildah...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: tkn, slsa-verifier, melange, spire-server, aactl, policy-controller, skaffold, flux-source-controller, kubescape, ko, tekton-chains, cosign, apko...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: act, external-secrets-operator, goreleaser, kyverno, melange, osv-scanner, argo-events, flux-image-automation-controller, gitsign, wolfictl, grype, xeol, dagger, kaniko, terragrunt, apko, zot, rancher-fleet, trivy-operator, cerbos, kubevela, argocd-image-updater,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, coredns, aactl, kubo, istio, grafana, aws-flb-cloudwatch, aws-flb-kinesis, k8s-device-plugin, libnvidia-container, redka, zot, juicefs, k3s, kubevela, trino, karpenter, prometheus, datadog-agent, containerd, flux, mattermost, karma, go, cert-manager...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, loki, kyverno, aactl, istio, external-dns, gitlab-kas, zot, k3s, spire-server, prometheus, snyk-cli, containerd, flux, mattermost, buildah, cert-manager, kaf, kine, cilium, falco-no-driver, rancher, kubernetes-dashboard, helm, kots,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, step, ksops, wolfictl, policy-controller, flux-image-automation-controller, dagger, external-dns, cluster-api-azure-controller, crossplane-provider-aws-cloudfront, rootlesskit, mattermost, k8sgpt, cert-manager, kine, src, falco-no-driver...