GO-2026-4514 vulnerabilities

Vulnerabilities for packages: minio, opentelemetry-collector, witness, prometheus, vcluster, nfpm, dgraph, mcp-grafana, loki, tempo, ollama, dagger, k3s, malcontent, weaviate, terraform-mcp-server, terragrunt, k8sgpt, grafana, opentelemetry-collector-contrib, eksctl, rclone, lazygit, maru,...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: telegraf, x509-certificate-exporter, cert-manager, gobuster, crossplane-provider-azure-storage, splunk-otel-collector, crossplane-provider-family-azure, nuclei, goreleaser, grafana, crossplane-provider-azure-authorization, external-secrets-operator,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, tekton-chains, spire-server, neuvector-sigstore-interface, crossplane, cosign, tflint, trivy-operator, tkn, zarf, docker, flux-source-controller, gh, skaffold, trivy,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi, guac, chezmoi, flux, grype, pulumi-language-dotnet, src-fingerprint, syft, argo-workflows, kaniko, kubescape, zot, crossplane, snyk-cli, wolfictl, timoni, dagger, pulumi-language-java, task, melange, argocd-image-updater, zarf, k9s, tfsec,...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: trufflehog, nerdctl, grype, opentelemetry-collector, openfga, syft, zot, spire-server, docker-compose, wolfictl, dagger, aws-otel-collector, melange, zarf, k9s, splunk-otel-collector, docker-cli-buildx, buildah, opentelemetry-collector-contrib, trivy, buildkitd, apko...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, argo-cd, argo-events, atlantis, argo-rollouts, kubewatch, kubernetes-event-exporter, goreleaser, bento...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi, guac, chezmoi, flux, grype, pulumi-language-dotnet, src-fingerprint, syft, argo-workflows, kaniko, kubescape, zot, crossplane, snyk-cli, wolfictl, timoni, dagger, pulumi-language-java, task, melange, argocd-image-updater, zarf, k9s, tfsec,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi, pulumi-language-dotnet, src-fingerprint, zot, gomplate, pulumi-language-java, scorecard, gitness, bom, apko, pulumi-language-yaml, kots, flux-kustomize-controller, kubevela, go-licenses, pulumi-kubernetes-operator, nuclei, goreleaser...

GO-2026-4559 vulnerabilities

Vulnerabilities for packages: pluto, crossplane-provider-aws-route53, ollama, crossplane-provider-aws-sns, trivy-operator, external-dns, kube-vip, opentelemetry-collector-contrib, vertical-pod-autoscaler, grafana-mimir, ksops, datadog-agent, gitlab-runner, traefik, pulumi, linkerd2,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, flyte, guac, pulumi, cortex, chezmoi, flux, opentelemetry-collector, sigstore-scaffolding, timestamp-authority, druid, restic, hugo, argo-workflows, kubescape, spire-server, tekton-chains, zot, fulcio, wal-g, velero, cosign, tempo, airflow,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: karpenter, hubble, oras, github-mcp-server, flux, go, envoy-ratelimit, pluto, victoriametrics-cluster, grafana-rollout-operator, tailscale, spire-server, kubewatch, nfs-subdir-external-provisioner, dataplaneapi, dgraph, fluxcd-kustomize-mutating-webhook,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trufflehog, aws-nuke, guac, envconsul, kubeflow-katib, xeol, kbld, multus-cni, podinfo, sftpgo-plugin-auth, argo-rollouts, pinact, prometheus, secrets-store-csi-driver, src-fingerprint, witness, crossplane-provider-aws-route53, kaniko, runc, spire-server,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, ko, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, tflint, trivy-operator, tkn, zarf, slsa-verifier, policy-controller, ratify, teleport, goreleaser, falcoctl...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, tkn, zarf, flux-source-controller, gh, docker-cli-buildx, skaffold,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, guac, xeol, kyverno, sigstore-scaffolding, ko, witness, timestamp-authority, zot, kubescape, spire-server, tekton-chains, fulcio, crossplane, docker-compose, neuvector-sigstore-interface, aactl, cosign, tflint, trivy-operator, tkn,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k8sgateway, sonobuoy, guac, kubeflow-katib, kuberlr, nri-nginx, xeol, esbuild, kbld, kapp, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, secrets-store-csi-driver, src-fingerprint, restic, runc, spire-server, neuvector-sigstore-interface,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, docker, flux-source-controller, gh, docker-cli-buildx,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, flux-source-controller, gh, skaffold, slsa-verifier, trivy, policy-controller...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, aactl, flux-source-controller, kyverno, teleport, witness, falcoctl, tkn, policy-controller, zot, ratify, goreleaser...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: gitsign, kyverno-notation-aws, kyverno, sigstore-scaffolding, ko, witness, zot, kubescape, spire-server, tekton-chains, neuvector-sigstore-interface, crossplane, aactl, cosign, tflint, trivy-operator, tkn, zarf, docker, flux-source-controller, gh, skaffold,...