GO-2024-2610 vulnerabilities

Vulnerabilities for packages: dataplaneapi, nri-nagios, k8sgpt, cluster-proportional-autoscaler, q, k3s, ctop, gke-gcloud-auth-plugin, kpt, rabbitmq-cluster-operator, nri-mysql, timoni, volume-modifier-for-k8s, wazero, vault-k8s, aws-efs-csi-driver-fips, helm-operator, ip-masq-agent,...

GO-2024-2748 vulnerabilities

Vulnerabilities for packages: hubble-fips, sigstore-scaffolding-fips, rabbitmq-cluster-operator, volume-modifier-for-k8s, spire-server-fips, vault-k8s, aws-efs-csi-driver-fips, helm-operator, opentelemetry-collector-contrib, karpenter, kubernetes-dashboard, cass-operator-fips-no-pvc-delete,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: nri-nagios, k8sgpt, step-ca, kubernetes-csi-external-snapshotter-fips, multus-cni, gke-gcloud-auth-plugin, kyverno-policy-reporter-fips, kubernetes-event-exporter-fips, spire-server-fips, wazero, vault-k8s, cluster-autoscaler-fips, azcopy-fips, xcaddy,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: k8sgpt, livekit-egress, cloudbeat, nats-server-config-reloader, step-ca, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, lvm-driver-fips, kong-ingress-controller-fips, kyverno-policy-reporter-fips, prometheus-fips, kubernetes-event-exporter-fips,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: cilium-certgen-fips, dataplaneapi, polaris-fips, volume-modifier-for-k8s, nova, karpenter, k8s-metacollector-fips, secrets-store-csi-driver-provider-aws, smarter-device-manager, dbmate, cilium-fips, metacontroller, dataplaneapi-fips, victorialogs-fips, pgwatch,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: k8sgpt, livekit-egress, cloudbeat, step-ca, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, lvm-driver-fips, kong-ingress-controller-fips, kyverno-policy-reporter-fips, prometheus-fips, kubernetes-event-exporter-fips, kubernetes-csi-external-health-monitor...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-security, kubernetes-csi-external-snapshotter-fips, kong-ingress-controller-fips, cluster-autoscaler-fips, cluster-api-provider-vsphere, crossplane-provider-aws-rds, http-echo, whereabouts-fips, cloud-provider-vsphere, cloudprober,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: cloudbeat, crossplane, grype-db, gitlab-runner, google-osconfig-agent, pulumi-language-yaml, grype, chainloop-cli-fips, trivy, chainctl-fips, skaffold, snyk-cli, pulumi-language-java, grype-fips, kyverno-fips, dagger, argocd-image-updater-fips, kargo, bom,...

GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubernetes-dashboard, kpt, aactl, argocd-image-updater-fips...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudwatchlogs, flux-notification-controller, crossplane, crossplane-provider-aws-cloudformation, wolfictl, terraform-provider-google, crossplane-provider-aws-kinesis, rclone, pulumi, policy-controller,...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: cloudbeat, crossplane, grype-db, gitlab-runner, google-osconfig-agent, pulumi-language-yaml, grype, chainloop-cli-fips, trivy, chainctl-fips, skaffold, snyk-cli, pulumi-language-java, commercial-chainloop-cli, grype-fips, kyverno-fips, dagger,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: cloudbeat, crossplane, grype-db, gitlab-runner, google-osconfig-agent, pulumi-language-yaml, grype, chainloop-cli-fips, trivy, chainctl-fips, skaffold, snyk-cli, pulumi-language-java, grype-fips, kyverno-fips, dagger, argocd-image-updater-fips, kargo, bom,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: k8sgpt, k3s, gke-gcloud-auth-plugin, kpt, timoni, vault-k8s, prometheus-mongodb-exporter, kubernetes-dashboard, prometheus-node-exporter-fips, gitness, terraform, pulumi-language-yaml, git-lfs, metacontroller, prometheus-statsd-exporter, prometheus-pushgateway,...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: k8sgpt, k3s, gke-gcloud-auth-plugin, kpt, timoni, vault-k8s, aws-efs-csi-driver-fips, prometheus-mongodb-exporter, kubernetes-dashboard, prometheus-node-exporter-fips, gitness, terraform, pulumi-language-yaml, git-lfs, metacontroller, prometheus-statsd-exporter,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: buf, conftest, crossplane, wolfictl, prometheus, ctop, buildkitd, spire-server-fips, melange, ko, cadvisor-fips, docker-compose, spire-server, kaniko, grype, up, tkn, trivy, loki, kubescape, cadvisor, conftest-fips, zot, cilium-cli, aactl, dagger, syft, kargo...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: dex, bank-vaults-fips, cloudflared, spire-server-fips, cosign, kots, tekton-chains, sops, terragrunt, gitsign, fulcio-fips, falcoctl-fips, oauth2-proxy, spire-server, cosign-fips, argo-workflows, timestamp-authority-fips, vexctl, tkn, kubescape, flux-source-controlle...

GO-2026-5158 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-security, cloudbeat, redpanda-operator, step-ca, gatekeeper-fips, kubernetes-csi-external-snapshotter-fips, k3s, kong-ingress-controller-fips, kyverno-policy-reporter-fips, prometheus-fips, spire-server-fips,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: ratify-fips, tkn-fips, cloudbeat, crossplane, kyverno-notation-aws, trivy-operator-fips, skaffold-fips, commercial-kyverno, ko, ratify, kyverno-policy-reporter-plugins-kyverno-fips, tekton-chains, security-profiles-operator, commercial-chainloop-backend,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: podman, ratify-fips, prometheus-podman-exporter, kyverno-notation-aws, kubescape-server, prometheus-podman-exporter-fips, commercial-kyverno, falco-no-driver, kots, podman-fips, ratify, tekton-chains, skopeo-fips, gitsign, buildah-fips, falcoctl-fips,...