GO-2026-5676 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, eks-distro-fips, kubernetes-dns-node-cache-fips, syncthing-fips, q, dkron-fips, opentelemetry-operator, teleport-operator-fips, dkron, kyverno-policy-reporter-plugins-trivy, kyverno-policy-reporter-fips, k3s, kubedock-fips, mediamtx,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: hubble-ui, dagger, k8sgpt, pulumi-language-dotnet, spire-server, smarter-device-manager-fips, falcosidekick, fulcio, temporal-fips, external-secrets-fips, cloudnative-pg-fips, trivy, terragrunt, grafana-agent-operator, ferretdb, kaniko, gomplate, step-ca,...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, aws-flb-firehose, terraform-provider-tls, tetragon, gitlab-operator, k8s-metacollector, google-guest-agent, descheduler, spire-server, k8s-metacollector-fips, crossplane-provider-aws-servicediscovery, longhorn-share-manager-fips, helm-mapkubeapis,...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, helm-push, argo-events-fips, k9s-fips, actions-runner-controller, packer, crossplane-provider-aws-rds, gitlab-operator, dagger, crossplane-provider-aws-sqs, helm-diff, crossplane-provider-aws-cloudfront-fips, pulumi-language-dotnet,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy-fips, vexctl, neuvector-sigstore-interface, tkn-fips, kyverno-notation-aws-fips, tflint-fips, aactl, cosign, chainctl, ratify-fips, spire-server-fips, teleport-operator-fips, docker-cli-buildx-fips, goreleaser, cosign-fips, flux-source-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, tetragon, redis-operator-fips, helm-diff, consul-k8s, k8s-metacollector, yace, livekit-server, descheduler, crossplane-provider-aws-s3, kapp, nova-fips, kafkaexporter-fips, spire-server, pvc-autoresizer-fips,...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: gitaly, teleport, external-secrets-operator, terragrunt, guac...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, dex, tekton-chains, terragrunt, tkn, gitsign, flux-kustomize-controller, cloudflared, argo-workflows, aactl, slsa-verifier, spire-server, fulcio, rekor, sops, kubescape, cosign, flux-source-controller, vexctl, kots...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, gitlab-runner, cluster-api, crossplane-provider-aws-cloudfront, openbao, flux-kustomize-controller, rclone, argo-workflows, rancher-fleet, pulumi-kubernetes-operator, crossplane-provider-aws-firehose, src-fingerprint, kyverno,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: bazelisk, velero-plugin-for-microsoft-azure, flux-kustomize-controller, nri-couchbase, helm-operator, spire-server, prometheus-adapter, configmap-reload, k6, pdfcpu, thanos, local-static-provisioner, oauth2-proxy, direnv, undock, falcosidekick, smarter-device-manager...

Supporting Intel(R) SGX on Multi-Package Platforms

Intelr Software Guard Extensions SGX was originally released on client platforms and later extended to single socket server platforms. As developers have become familiar with the capabilities of the technology, the applicability of this capability in the cloud has been tested. Various Cloud Servi...

Malicious code in url-multi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5715c2f7477bfb9fb101c5486a17aa63e012dfc2bf9cb4e8c54bf6b1879e1eba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...