GO-2026-4514 vulnerabilities

Vulnerabilities for packages: dgraph, k8sgpt, prometheus, nuclei, opentelemetry-collector, eksctl, mcp-grafana, nfpm, k3s, redpanda, grafana, datadog-agent, ollama, teleport, vcluster, weaviate, loki, kubevela, minio, goreleaser, dagger, opentelemetry-collector-contrib, tempo, cri-tools,...

GO-2026-5320 vulnerabilities

Vulnerabilities for packages: gptscript, nuclei, vale, crossplane-provider-aws-firehose, glow, crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-sqs, crossplane-provider-aws-kms...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: nuclei, timoni, gptscript, dataplaneapi...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: chezmoi, kots, syft, undock, gptscript, nuclei, k9s, gitleaks, filebrowser, trufflehog, wolfictl, zarf, grype, kubescape...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, crossplane-provider-azure-managedidentity, grafana, crossplane-provider-azure-authorization, nuclei, telegraf, gobuster, splunk-otel-collector, crossplane-provider-azure-storage, crossplane-provider-family-azure,...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: bom, scorecard, src-fingerprint, go-licenses, nuclei, gitness, pulumi-kubernetes-operator, gitsign, goreleaser...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: chezmoi, kots, bom, k8sgpt, pulumi-language-yaml, gptscript, scorecard, melange, flux-source-controller, nuclei, src-fingerprint, snyk-cli, argocd-image-updater, crossplane, task, kargo, skaffold, syft, timoni, pulumi-language-java, kubevela, goreleaser, dagger, guac...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: chezmoi, kots, bom, k8sgpt, pulumi-language-yaml, gptscript, scorecard, melange, flux-source-controller, nuclei, src-fingerprint, snyk-cli, argocd-image-updater, crossplane, task, kargo, skaffold, syft, timoni, pulumi-language-java, kubevela, goreleaser, dagger, guac...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: kots, bom, pulumi-language-yaml, scorecard, src-fingerprint, gomplate, nuclei, pulumi-language-java, kubevela, goreleaser, pulumi-kubernetes-operator, pulumi, gitsign, zot, apko, flux-kustomize-controller, go-licenses, gitness, pulumi-language-dotnet...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: chezmoi, external-secrets-operator, bom, kots, pulumi-language-yaml, gptscript, scorecard, melange, flux-source-controller, gomplate, nuclei, src-fingerprint, snyk-cli, argocd-image-updater, cerbos, crossplane, argo-cd, nfpm, kargo, skaffold, steampipe, syft, kyverno...

GO-2026-4526 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-aws-firehose, crossplane-provider-aws-route53, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kinesis, amazon-cloudwatch-agent, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-sqs, datadog-agent,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: chezmoi, up, k8sgpt, thanos, flux-source-controller, nuclei, opentelemetry-collector, sqlpad, cortex, bank-vaults, flyte, rook, step, grafana-mimir, sigstore-scaffolding, grafana-agent-operator, timestamp-authority, spire-server, flux-image-reflector-controller, hugo...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: kots, external-secrets-operator, bom, pulumi-language-yaml, gptscript, scorecard, melange, flux-source-controller, gomplate, nuclei, src-fingerprint, snyk-cli, argocd-image-updater, cerbos, crossplane, argo-cd, kargo, skaffold, steampipe, syft, kyverno, teleport,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: k8sgpt, istio, containerd, flux-source-controller, nuclei, snyk-cli, atlantis, argo-cd, crossplane-provider-aws-cloudwatchlogs, datadog-agent, opentofu, neuvector-sigstore-interface, crossplane-provider-aws-memorydb, gitlab-pages, knative-serving, loki, dagger,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, k8sgpt, skopeo, istio, containerd, nuclei, atlantis, cilium-certgen, argo-cd, timestamp-authority, datadog-agent, dask-gateway, k8ssandra-client, kubevela, goreleaser, falco-no-driver, opencost, karpenter, grafana-pyroscope,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: rancher-helm, kubeflow, rancher-telemetry, flux-source-controller, cerbos, neuvector-dbgen, grafana-mimir, kyverno-policy-reporter-kyverno-plugin, timestamp-authority, nri-apache, tofu-controller, metrics-agent, portieris, spark-operator, act, paranoia, dive,...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: istio, containerd, flux-source-controller, nuclei, snyk-cli, argo-cd, datadog-agent, opentofu, loki, knative-serving, dagger, guac, gitlab-runner, k9s, osv-scanner, act, chisel, apko, trivy-operator, trivy, witness, flux-image-automation-controller, kots, rootlesskit...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: istio, containerd, flux-source-controller, nuclei, snyk-cli, argo-cd, datadog-agent, opentofu, loki, knative-serving, dagger, guac, gitlab-runner, k9s, osv-scanner, act, chisel, apko, trivy-operator, trivy, witness, flux-image-automation-controller, kots, rootlesskit...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, k8sgpt, skopeo, istio, containerd, nuclei, atlantis, cilium-certgen, argo-cd, timestamp-authority, datadog-agent, dask-gateway, k8ssandra-client, kubevela, goreleaser, falco-no-driver, opencost, karpenter, grafana-pyroscope,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: chezmoi, kots, dgraph, croc, nuclei, nri-mysql, dbmate, cerbos, step, k3s, age, openbao, caddy, temporal-server, ratify, timestamp-authority, telegraf, sqlexporter, spire-server, sftpgo, amass, mattermost, juicefs, kine, step-kms-plugin, temporal, trufflehog, loki,...