GO-2026-5666 vulnerabilities

Vulnerabilities for packages: cilium-cli, rancher-fleet, zarf, cert-manager-cmctl, flux-source-controller, flux, kuma, helm-push, kots...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: cilium-cli, rancher-fleet, zarf, cert-manager-cmctl, flux-source-controller, flux, kuma, helm-push, kots...

GO-2026-5289 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

GO-2026-5363 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: telegraf, crossplane-provider-azure-authorization, nuclei, crossplane-provider-azure-managedidentity, gobuster, crossplane-provider-family-azure, cert-manager, goreleaser, splunk-otel-collector, external-secrets-operator, nfpm, x509-certificate-exporter,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: zarf, chart-testing, helm-docs, helm-push, cilium-cli, chartmuseum, pluto, eksctl, trivy, rancher-helm, cluster-api-helm-controller, flux, k8ssandra-client, k9s, kubescape, tw, helm-operator, flux-helm-controller, cert-manager-cmctl, flux-source-controller, zot, kots...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zarf, chart-testing, helm-docs, helm-push, cilium-cli, rancher-fleet, chartmuseum, cerbos, pluto, eksctl, envoy-gateway, trivy, kargo, rancher-helm, linkerd2, cluster-api-helm-controller, k8ssandra-client, k9s, tw, helm-operator, flux-helm-controller,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, step-issuer, cert-manager-cmctl, cert-exporter, aws-privateca-issuer, cert-manager-webhook-pdns...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, step-issuer, cert-manager-cmctl, mariadb-operator, cert-manager-csi-driver, aws-privateca-issuer, percona-server-mongodb-operator, cert-manager-webhook-pdns, opentelemetry-operator...

GO-2026-5543 vulnerabilities

Vulnerabilities for packages: terraform, cert-manager-istio-csr, kyverno-notation-aws, rancher, cert-manager, gitea, cert-manager-csi-driver, kyverno, percona-server-mongodb-operator, k6, spqr, trufflehog, rancher-webhook, opentofu, ratify, juicefs, dex, nuclei, minio, openbao, harbor, seaweedfs,...

GO-2026-4958 vulnerabilities

Vulnerabilities for packages: skaffold, cert-manager-istio-csr, cri-tools, kubevela, argocd-image-updater, rancher, argo-rollouts, terraform-provider-kubernetes, zarf, hubble, percona-server-mongodb-operator, aws-node-termination-handler, velero, docker-cli-buildx, emissary, k8sgpt-operator,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, argocd-image-updater, undock, amazon-cloudwatch-agent-operator, cadvisor, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, step-kms-plugin, trino, podinfo, kuma, terraform-provider-azuread, crossplane-provider-aws-eks...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, sealed-secrets, crossplane-provider-aws-eks, atlantis, scorecard, sops, eksctl, argo-events, docker-machine-driver-linode,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, dbmate, goreleaser, pdfcpu, trino, rabbitmq-cluster-operator, kuma, nri-nginx, slsa-verifier, grafana-alloy, k3d, haproxy-ingress, atlantis, spqr, otel-cli,...

GO-2026-4945 vulnerabilities

Vulnerabilities for packages: envconsul, cert-manager-istio-csr, undock, containerd, goreleaser, step-kms-plugin, slsa-verifier, grafana-alloy, neuvector-scanner, scorecard, jitsucom-bulker, bank-vaults, gogatekeeper, kiali, sops, opencost, octo-sts, harbor, grafana-mimir, kaniko, restic, grafana...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, fluxcd-kustomize-mutating-webhook, terraform, cert-manager-istio-csr, vault-k8s, vertical-pod-autoscaler, spark-operator, terraform-docs, undock, yace, amazon-cloudwatch-agent-operator, dbmate, crossplane-provider-aws-rds, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform, envconsul, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, step-kms-plugin, chart-testing, portieris, wait-for-port, rabbitmq-cluster-operator, nri-nginx, grafana-alloy, aws-otel-collector, nri-apache, eksctl, argo-events,...

GO-2025-3485 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, argocd-image-updater, undock, containerd, goreleaser, step-kms-plugin, grafana-alloy, neuvector-scanner, bank-vaults, kiali, sops, octo-sts, grafana-mimir, hydra, podman, spire-server, argo-workflows, tekton-chains, melange, step-ca, rekor,...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, terraform, cert-manager-istio-csr, spark-operator, argocd-image-updater, terraform-docs, undock, amazon-cloudwatch-agent-operator, cadvisor, containerd, crossplane-provider-aws-rds, dbmate, goreleaser, pulumi-kubernetes-operator,...

WordPress Events Manager plugin < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability

Subscriber+ Booking Consent Record Tampering via SQL Injection vulnerability discovered by Jakub Herman in WordPress Plugin Events Manager versions 7.4.1...