GO-2026-6094 vulnerabilities

Vulnerabilities for packages: descheduler, crossplane, istio, pulumi-kubernetes-operator, cert-manager-webhook-pdns, kubescape-operator, rancher-system-agent, flux-kustomize-controller, telegraf, argocd-image-updater, cluster-api-provider-vsphere, cilium, hubble,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, zot, trivy-fips, rancher-fleet, kargo, flux, harbor-fips, flux-fips, chartmuseum, cerbos-fips, cerbos, chart-testing, harbor, chart-testing-fips, chartmuseum-fips, helm-docs, teleport, flux-helm-controller-fips, helm-operator-fips, linkerd2,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: zot, k9s, helm-push, zarf, trivy, eksctl, kubescape, kots, kubevela, flux-helm-controller, chartmuseum, helm-operator, k8sgpt, flux-source-controller, cilium-cli, up...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: zot, k9s, helm-push, zarf, trivy, eksctl, kubescape, kots, kubevela, flux-helm-controller, chartmuseum, helm-operator, k8sgpt, flux-source-controller, cilium-cli, up...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: conftest-fips, ocm-kubernetes-controller-fips, ratify, steampipe, conftest, linkerd2, kyverno, drone-fips, xeol, k8ssandra-client, opentofu-fips, consul-k8s-fips, xeol-fips, manifest-tool, tw, consul-k8s, rancher, kyverno-fips, cluster-api-helm-controller-fips,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: go, omnictl-multiarch, flux-fips, grafana-operator, grafana-operator-fips, grafana-rollout-operator, steampipe, aws-load-balancer-controller-fips, dkron, victorialogs, polaris, temporal-fips, flux-helm-controller, podinfo, terragrunt, flux-source-watcher, pgwatch,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: go, omnictl-multiarch, flux-fips, grafana-operator, grafana-operator-fips, grafana-rollout-operator, steampipe, aws-load-balancer-controller-fips, dkron, victorialogs, polaris, temporal-fips, flux-helm-controller, podinfo, terragrunt, flux-source-watcher, pgwatch,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: aws-fsx-csi-driver-fips, commercial-expanso-edge, cass-operator-fips, azure-service-operator-fips, flux, apm-server, crossplane-provider-terraform, azuredisk-csi-fips, gcp-compute-persistent-disk-csi-driver-fips, hubble-ui-backend-fips, kserve-rest-proxy,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, flux, jitsucom-bulker, velero-plugin-for-microsoft-azure, helm-docs, azuredisk-csi-fips, gcp-compute-persistent-disk-csi-driver-fips, linkerd2, kube-rbac-proxy-fips, temporal-ui-server, flux-image-automation-controller-fips,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: chartmuseum, eksctl, flux-helm-controller, helm-operator, cilium-cli, helm-push, kubevela, up, kubescape, zarf, trivy, k8sgpt, flux-source-controller, kots, zot, k9s...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: kubescape, pluto, tw, trivy, helm-docs, flux, flux-source-controller, eksctl, helm-push, zarf, cluster-api-helm-controller, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, cilium-cli, rancher-helm, kots, zot...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: chartmuseum, eksctl, flux-helm-controller, helm-operator, cilium-cli, helm-push, kubevela, up, kubescape, zarf, trivy, k8sgpt, flux-source-controller, kots, zot, k9s...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: dagger, headlamp, buildkitd, kubevela, nerdctl, opa, k3s, kubescape, tw, falco-no-driver, trivy, steampipe, flux-source-controller, docker, containerd, helm-mapkubeapis, eksctl, docker-compose, helm-push, neuvector-scanner, wolfictl, kubescape-operator, osv-scanner,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: buildkitd, kubevela, kubescape, gitness, trivy, flux-source-controller, eksctl, up, helm-push, k8sgpt, kaniko, flux-helm-controller, skaffold, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, cilium-cli, grype, melange, helm, k3d, kots, zot, ctop...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: pluto, tw, linkerd2, trivy, helm-docs, flux-source-controller, istio, eksctl, cerbos, helm-push, rancher-fleet, zarf, cluster-api-helm-controller, k8sgpt, k8ssandra-client, cert-manager-cmctl, k9s, helm-operator, flux-helm-controller, chart-testing, chartmuseum, karg...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, render-template, docker-cli, aws-otel-collector, flux, spark-operator, undock, timescaledb-tune, eksctl, cerbos, rancher-system-agent, k8sgpt, kubernetes-dashboard-web, dive, gcsfuse, rabbitmq-messaging-topology-operator, aactl, fulci...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: argo-events, goreleaser, crossplane-provider-family-azure, scorecard, flux-image-automation-controller, rook, buildkitd, kubevela, k3s, actions-runner-controller, crossplane-provider-azure-authorization, kubescape, snyk-cli, sigstore-scaffolding, terraform, vexctl,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: kaniko-fips, newrelic-infrastructure-agent-fips, packer-fips, steampipe, linkerd2, docker-compose-fips, xeol, consul-k8s-fips, xeol-fips, manifest-tool, newrelic-infrastructure-agent, tw, helmfile, consul-k8s, rancher, dagger, spegel, fuse-overlayfs-snapshotter,...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: scorecard, dagger, headlamp, buildkitd, tigera-operator, kubevela, opa, rancher-agent, k3s, kubescape, tw, linkerd2, steampipe, trivy, teleport, docker, containerd, helm-mapkubeapis, eksctl, docker-compose, helm-push, neuvector-scanner, wolfictl, kubescape-operator,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: scorecard, dagger, headlamp, buildkitd, tigera-operator, kubevela, opa, rancher-agent, k3s, kubescape, tw, linkerd2, steampipe, trivy, teleport, docker, containerd, helm-mapkubeapis, eksctl, docker-compose, helm-push, neuvector-scanner, wolfictl, kubescape-operator,...