312 matches found
GO-2022-0493 vulnerabilities
Vulnerabilities for packages: ctop, dynamic-localpv-provisioner, k3d, kind, grpcurl, terraform-provider-sendgrid, kubeflow...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: kots, gomplate, falcosidekick, tflint, cert-manager-cmctl, ksops, cilium-cli, k8sgpt, kaniko, kube-rbac-proxy, minio, kubernetes-csi-driver-hostpath, terragrunt, grafana-agent-operator, melange, zot, terraform-provider-google, dex, hubble-ui,...
GO-2024-2491 vulnerabilities
Vulnerabilities for packages: kots, syft, grype, newrelic-infrastructure-agent, docker, kaniko, skaffold, cadvisor, zot, ctop, skopeo, kubernetes, nerdctl, podman, k9s, trivy, zarf, runc, kubescape, buildkitd, k3d, wolfictl, k3s...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: kots, grype, newrelic-infrastructure-agent, eksctl, cilium-cli, k8sgpt, kaniko, skaffold, melange, zot, helm-push, ctop, up, flux-source-controller, trivy, helm, fuse-overlayfs-snapshotter, kubescape, kubevela, buildkitd, k3d, gitness, flux-helm-controller...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: helm-push, docker-compose, syft, policy-controller, neuvector-scanner, grype, buf, dagger, k3d, kaniko, wolfictl, harbor-scanner-trivy, cri-tools, melange...
GO-2026-5841 vulnerabilities
Vulnerabilities for packages: kots, kine, containerd, minio, kaf, telegraf, zot, loki, spire-server, prometheus-operator, nerdctl, kyverno, flux, snyk-cli, helm, k3d, aactl, k3s, falco-no-driver...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: mockgen, cluster-api-helm-controller, cluster-api-azure-controller, rabbitmq-default-user-credential-updater, tflint, k8sgpt, aws-application-networking-k8s, gptscript, helm-operator, ip-masq-agent, nri-redis, nri-apache, zot, regclient, prometheus-operator, hubble,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: cosign, gomplate, flux-kustomize-controller, kubernetes-event-exporter, bank-vaults, kargo, terraform-provider-azurerm, ksops, terragrunt, zot, slsa-verifier, opentelemetry-collector-contrib, policy-controller, skopeo, pulumi-kubernetes-operator, spire-server, fulcio...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: commercial-kyverno, minio, containerd, reports-server, commercial-expanso-edge, k3d, flux, kyverno, zot, terraform, kots, prometheus-mongodb-exporter, backup-restore-operator, zitadel, elastic-agent-fips, k3s, omnictl-multiarch-fips, telegraf, helm, kaf, prometheus,...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: kots, kine, containerd, minio, kaf, telegraf, zot, loki, spire-server, prometheus-operator, nerdctl, kyverno, flux, snyk-cli, helm, k3d, aactl, k3s, falco-no-driver...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: chezmoi, karpenter, istio, kine, kots, gitlab-pages, ingress-nginx-controller, dask-gateway, kaf, cilium-cli, kubernetes-dashboard, gitlab-kas, aws-flb-firehose, kube-fluentd-operator, telegraf, zot, go, spire-server, gitaly, prometheus-operator, kubernetes,...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: chezmoi, karpenter, istio, kine, kots, gitlab-pages, ingress-nginx-controller, dask-gateway, kaf, cilium-cli, kubernetes-dashboard, gitlab-kas, aws-flb-firehose, kube-fluentd-operator, telegraf, zot, go, spire-server, gitaly, prometheus-operator, kubernetes,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: chezmoi, kine, docker-credential-ecr-login, kubernetes-csi-node-driver-registrar, oras, victoriametrics, whereabouts, rancher-webhook, gitaly, kubernetes-replicator, crane, chisel, hubble, k8sgpt-operator, pguser, runc, rancher-agent, git-sync, s5cmd,...
Malicious code in sierra-k3d-project (npm)
The package sierra-k3d-project was found to contain malicious code...
MAL-2025-33203 Malicious code in sierra-k3d-project (npm)
The package sierra-k3d-project was found to contain malicious code...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: yq, cfssl, docker-credential-ecr-login, gomplate, kine, tflint, oras, protoc-gen-go-grpc, temporal-server, golangci-lint, kaf, k8sgpt, skaffold, kube-rbac-proxy, aws-flb-firehose, nri-nagios, cadvisor, helm-operator, ip-masq-agent, nri-redis, nri-apache, tailscale,...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: yq, cfssl, docker-credential-ecr-login, gomplate, kine, tflint, oras, protoc-gen-go-grpc, temporal-server, golangci-lint, kaf, k8sgpt, skaffold, kube-rbac-proxy, aws-flb-firehose, nri-nagios, cadvisor, helm-operator, ip-masq-agent, nri-redis, nri-apache, tailscale,...
GHSA-2JWV-JMQ4-4J3R vulnerabilities
Vulnerabilities for packages: litestream, cfssl, docker-credential-ecr-login, gomplate, falcosidekick, rabbitmq-default-user-credential-updater, oras, bank-vaults, boring-registry, golangci-lint, kaf, k8sgpt, skaffold, jitsucom-bulker, cadvisor, helm-operator, ip-masq-agent, zot, mockery, ctop,...