GO-2026-6191 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips...

GO-2026-6114 vulnerabilities

Vulnerabilities for packages: kcp, multicluster-controlplane, kcp-fips, milvus, dapr, multicluster-controlplane-fips, rancher-support-bundle-kit, dapr-fips, kine...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager, crossplane-provider-aws-waf, crossplane-provider-aws-mwaa-fips, crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-efs-fips, frankenphp-8.5, crossplane-provider-aws-licensemanager-fips,...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: calico-fips, jobset, argocd-image-updater, crossplane-function-auto-ready-fips, descheduler-fips, kubeflow-pipelines, kube-state-metrics-fips, cluster-api-gcp-controller-fips, flux-helm-controller-fips, elastic-agent-fips, kubernetes-csi-external-snapshotter,...

GO-2026-6213 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, grype, pulumi-language-yaml, argocd-image-updater, grype-db, grype-fips, gomplate, gitlab-runner-fips, zot, chainloop-cli-fips, argo-events, coder, coder-fips, gitaly-fips, kargo, cerbos-fips, scorecard, argo-workflows, kubescape-server,...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, cloudbeat, policy-controller-fips, aactl, spire-server, zot, neuvector-sigstore-interface, trivy, jfrog-cli, ko-fips, trivy-operator-fips, crossplane, policy-controller, skaffold-fips, zarf, tkn, kyverno-fips, falcoctl, spire-server-fips, cosign-fips,...

GO-2026-5966 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, crossplane-provider-azure-managedidentity, kubevela, crossplane-provider-aws-s3, crossplane-provider-aws-cloudfront, crossplane-provider-azure-storage, hugo-extended, gitness, crossplane-provider-aws-lambda,...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, kuma, runc, delve, witness, falcoctl, gitaly, k3s, kubescape, kubescape-operator, vitess, nerdctl, docker, hubble, cilium, containerd, hubble-ui...

GO-2026-6237 vulnerabilities

Vulnerabilities for packages: kube-vip, cni-plugins...

whosthere v0.8.3

Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...

PT-2026-83664

This update for kubernetes rebuilds it against the current go security release...

PT-2026-83538

This update for container-suseconnect rebuilds it against the current go security release...

PT-2026-83663

This update for kubernetes-old rebuilds it against the current go security release...

PT-2026-80215

Summary go.opentelemetry.io/otel/bridge/opentracing introduced an unsynchronized extraBaggageItems map on bridgeSpan. One goroutine can write this map through Span.SetBaggageItem while another goroutine reads and iterates it during correlation baggage propagation, which can trigger Go's fatal...

PT-2026-80733

Name of the Vulnerable Software and Affected Versions OpenTelemetry-Go versions 0.11.0 through 1.44.0 Description The OpenTracing bridge contains an unsynchronized extraBaggageItems map within the bridgeSpan component. Because Go maps do not support safe concurrent read and write access,...

ROS-20260820-73-0005

The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21593-1 Rating: important References: bsc1255111 bsc1266609 bsc1275024 bsc1275025 bsc1275026 bsc1275028 bsc1275029 bsc1275032 bsc1275033 bsc1275034...

terraform -- exclusion bypass in .terraformignore handling

HashiCorp reports: Terraform bundles the go-slug library, which builds the archive uploaded to HCP Terraform or Terraform Enterprise when a run is started. In go-slug before v0.18.3, matching of .terraformignore rules does not consistently treat canonically equivalent Unicode filenames as the sam...