GO-2026-5052 vulnerabilities

Vulnerabilities for packages: grafana, nuclei, traefik-fips, crossplane-provider-azure-servicelinker, crossplane-provider-azure-authorization, crossplane-provider-azure-notificationhubs, traefik, crossplane-provider-azure-network, goreleaser, grafana-fips, gobuster,...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: authentik, vault, azure-service-operator, cloudbeat-fips, rancher, azure-service-operator-fips, cloudbeat, authentik-fips, rancher-agent, vault-fips...

GO-2026-4909 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, trivy-fips, kubevela-fips, zarf-fips, guac, grype, syft, gitlab-rails-ce, google-osconfig-agent, kots, syft-fips, argocd-image-updater, gitea-fips, argo-cd, tfsec, skaffold-fips, apko-fips, chainctl-fips, pulumi-language-yaml,...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, k8sgpt, rke2-runtime, elastic-agent, jaeger, amazon-cloudwatch-agent-fips, verticadb-operator-fips, coredns-fips, elastic-agent-fips, amazon-cloudwatch-agent, coredns, k8sgateway-fips, opentelemetry-collector, aws-otel-collector, argo-cd, kine, keda,...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: thanos-operator, k8sgpt, azure-aad-pod-identity-mic, flux-kustomize-controller, prometheus-mysqld-exporter, aws-load-balancer-controller, yq, crossplane-provider-azure, kots, metacontroller, kubernetes-csi-external-resizer, minio, up, gke-gcloud-auth-plugin,...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, spire-server-fips, crossplane-provider-aws-s3, zot, flux-source-controller, grype, melange, crossplane-provider-aws-lambda, pulumi-language-dotnet, goreleaser, slsa-verifier, flux-kustomize-controller, syft,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, argo-cd-fips, kubernetes, kube-arangodb-fips, gitlab-rails-ce, gatekeeper-fips, harbor-fips, kots, argo-cd, knative-eventing-fips, minio, external-secrets-operator-fips, vitess, cert-manager, nemo, snyk-cli, telegraf, omnictl-multiarch,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: octo-sts, thanos-operator, wazero-fips, crossplane-provider-aws-emrserverless, newrelic-k8s-metadata-injection-fips, conftest-fips, nova-fips, nri-redis-fips, openbao-k8s-fips, yunikorn-k8shim-fips, hclmerge-fips, redka, paranoia, cyberark-secrets-provider-for-k8s,...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: octo-sts, distribution, conftest-fips, openbao-k8s-fips, syft, flux-kustomize-controller, harbor-fips, cloud-provider-azure-fips, kots, grafana-agent-operator, tfsec, crossplane-provider-azure-managedidentity, external-secrets-fips, spqr, weaviate,...

GO-2025-3420 vulnerabilities

Vulnerabilities for packages: octo-sts, emissary, thanos-operator, distribution, conftest-fips, openbao-k8s-fips, yunikorn-k8shim-fips, flux-kustomize-controller, redka, paranoia, harbor-fips, php-fpmexporter, cloud-provider-azure-fips, tfsec, falco-exporter, direnv, bazelisk,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: octo-sts, thanos-operator, conftest-fips, syft, flux-kustomize-controller, redka, paranoia, php-fpmexporter, kots, grafana-agent-operator, tfsec, envoy-ratelimit, up, spicedb, direnv, bazelisk, external-secrets-fips, spqr, weaviate, prometheus-alertmanager,...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, helm-mapkubeapis, crane, sftpgo-plugin-auth, ghaudit, knative-serving, mcp-grafana, neuvector-scanner, minio-operator, telegraf, kubernetes-dashboard-auth, podman, go, mkcert, juicefs-csi-driver, kube-bench, pguser, gobuster, nri-mongodb,...

Malicious code in @onereach/regular-expressions-test (npm)

npm/@onereach/regular-expressions-test is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

Malicious code in @servicetitan/assist-utils (npm)

npm/@servicetitan/assist-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11632 Malicious code in @onereach/si-code (npm)

npm/@onereach/si-code is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

MAL-2026-11910 Malicious code in @servicetitan/onboarding-ui (npm)

npm/@servicetitan/onboarding-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: snyk-cli, gomplate, gitlab-runner, skaffold, kots, k9s, knative-serving, flux, datadog-agent, telegraf, podman, scorecard, docker-machine-driver-harvester, flux-source-controller, witness, cloud-provider-aws, argo-events, gptscript, pulumi-language-dotnet, k3s,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, kine, external-secrets-operator, gitlab-kas, cilium-cli, skaffold, flux-image-automation-controller, istio, loki, kots, chisel, cert-manager, k9s, gitea, knative-serving, containerd, kyverno, aactl, mattermost, fscrypt, zot, cilium,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: snyk-cli, gomplate, gitlab-runner, skaffold, kots, k9s, knative-serving, flux, datadog-agent, telegraf, podman, scorecard, docker-machine-driver-harvester, flux-source-controller, witness, cloud-provider-aws, argo-events, gptscript, pulumi-language-dotnet, k3s,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, kine, external-secrets-operator, gitlab-kas, cilium-cli, skaffold, flux-image-automation-controller, istio, loki, kots, chisel, cert-manager, k9s, gitea, knative-serving, containerd, kyverno, aactl, mattermost, fscrypt, zot, cilium,...