GO-2026-4514 vulnerabilities

Vulnerabilities for packages: cri-tools, opentelemetry-collector-contrib, teleport, prometheus, weaviate, dgraph, eksctl, rclone, loki, grafana-alloy, k3s, witness, dagger, malcontent, goreleaser, datadog-agent, terraform-mcp-server, k8sgpt, ollama, kubevela, redpanda, grafana, vcluster,...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: cert-manager, crossplane-provider-azure-authorization, gobuster, splunk-otel-collector, x509-certificate-exporter, crossplane-provider-azure-sql, grafana, crossplane-provider-azure-managedidentity, crossplane-provider-family-azure, crossplane-provider-azure-storage,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: teleport, tekton-chains, crossplane, falcoctl, buildkitd, gh, neuvector-sigstore-interface, tkn, skaffold, kubescape, tflint, zot, kyverno, kyverno-notation-aws, trivy, vexctl, witness, policy-controller, cosign, spire-server, goreleaser, gitsign, docker,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kots, crossplane, gitea, timoni, flux-image-automation-controller, syft, task, flux, grype, melange, scorecard, pulumi, wolfictl, pulumi-language-java, skaffold, kubescape, argo-events, zot, snyk-cli, chezmoi, grafana-alloy, trivy, bom, pulumi-language-yaml, dagger,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kots, crossplane, gitea, timoni, flux-image-automation-controller, syft, task, flux, grype, melange, scorecard, pulumi, wolfictl, pulumi-language-java, skaffold, kubescape, argo-events, zot, snyk-cli, chezmoi, grafana-alloy, trivy, bom, pulumi-language-yaml, dagger,...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, buf, buildah, docker-compose, falcoctl, docker-cli-buildx, syft, grype, buildkitd, melange, wolfictl, openfga, zot, trivy, nerdctl, spire-server, trufflehog, splunk-otel-collector, dagger, k9s, kargo, goreleaser, aws-otel-collector, t...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, atlantis, kubewatch, argo-cd, argo-events, goreleaser, kubernetes-event-exporter, bento, argo-rollouts...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: kots, scorecard, gomplate, pulumi, pulumi-language-java, zot, bom, pulumi-language-yaml, flux-kustomize-controller, goreleaser, gitsign, src-fingerprint, pulumi-language-dotnet, go-licenses, pulumi-kubernetes-operator, apko, kubevela, gitness, nuclei...

GO-2026-4559 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, opentelemetry-collector-contrib, crossplane-provider-aws-sns, timoni, crossplane-provider-aws-cloudfront, telegraf, mattermost, traefik, crossplane-provider-family-aws, crossplane-provider-aws-eks, pluto, zot, dex, k3s,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trino, opentelemetry-collector-contrib, tekton-chains, fulcio, falcoctl, grafana-mimir, sqlpad, flux, buildkitd, timestamp-authority, airflow, pulumi, tkn, step, prometheus-operator, grafana-agent-operator, kubescape, rclone, py3-azure-identity, wal-g, argo-events,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, omnibump, polaris, stakater-reloader, dgraph, local-path-provisioner, smokescreen, flux-image-automation-controller, grafana-operator, kubewatch, flux, mariadb-operator, dkron, gh, clickhouse-operator, go, metacontroller, nodetaint,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, tekton-chains, crossplane-provider-aws-sns, buildah, timoni, dgraph, crossplane-provider-aws-cloudfront, local-path-provisioner, crossplane-provider-azure-managedidentity, secrets-store-csi-driver, telegraf, mattermost,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: teleport, tekton-chains, crossplane, falcoctl, slsa-verifier, neuvector-sigstore-interface, tkn, kubescape, tflint, kyverno, kyverno-notation-aws, policy-controller, spire-server, ratify, goreleaser, gitsign, trivy-operator, ko, zarf, aactl...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: teleport, tekton-chains, crossplane, falcoctl, docker-cli-buildx, gh, neuvector-sigstore-interface, tkn, skaffold, kubescape, tflint, zot, kyverno, kyverno-notation-aws, vexctl, witness, policy-controller, cosign, spire-server, ratify, goreleaser, gitsign,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: podman, tekton-chains, kots, crossplane, buildah, docker-compose, falcoctl, fulcio, slsa-verifier, buildkitd, timestamp-authority, gh, undock, neuvector-sigstore-interface, tkn, skaffold, kubescape, tflint, zot, kyverno, portieris, kyverno-notation-aws, skopeo, trivy...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: wave, crossplane-provider-aws-sns, timoni, helm-operator, amass, crossplane-provider-aws-cloudfront, local-path-provisioner, k3d, ferretdb, secrets-store-csi-driver, mattermost, telegraf, nri-mongodb, kubernetes-event-exporter, undock, opentofu, chisel,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: teleport, tekton-chains, crossplane, falcoctl, slsa-verifier, buildkitd, gh, neuvector-sigstore-interface, tkn, skaffold, kubescape, tflint, zot, kyverno, kyverno-notation-aws, trivy, vexctl, witness, policy-controller, cosign, spire-server, ratify, goreleaser,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tkn, witness, policy-controller, teleport, falcoctl, ratify, goreleaser, gitsign, kyverno, zot, kyverno-notation-aws, aactl...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: teleport, tekton-chains, crossplane, falcoctl, docker-cli-buildx, slsa-verifier, buildkitd, gh, neuvector-sigstore-interface, tkn, skaffold, kubescape, tflint, zot, kyverno, kyverno-notation-aws, trivy, vexctl, witness, policy-controller, cosign, spire-server, ratify...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: teleport, tekton-chains, crossplane, falcoctl, slsa-verifier, buildkitd, gh, neuvector-sigstore-interface, tkn, skaffold, kubescape, tflint, zot, kyverno, kyverno-notation-aws, trivy, vexctl, rekor, witness, policy-controller, cosign, spire-server, ratify, goreleaser...