osv-scanner

使用 OSV-Scanner 查找影响项目依赖项的现有漏洞。 OSV-Scanner 为 OSV 数据库提供官方支持的前端，并为 OSV-Scalibr 提供 CLI 接口，可将项目的依赖项列表与影响它们的漏洞关联起来。 OSV-Scanner 支持多种项目类型、包管理器和功能，包括但不限于： 语言： C/C++, Dart, Elixir, Go, Java, Javascript, PHP, Python, R, Ruby, Rust。 包管理器： npm, pip, yarn, maven, go modules, cargo, gem, composer, nuget 等。...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: jaeger, osv-scanner, datadog-agent, gitlab-workhorse-ce-fips, opencost-fips, jaeger-fips, flux-operator, datadog-agent-fips, flux-operator-fips, gptscript, ferretdb, github-mcp-server, gitlab-workhorse-ce, opencost...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: jaeger, osv-scanner, glab, datadog-agent, gitlab-workhorse-ce-fips, opencost-fips, jaeger-fips, flux-operator, datadog-agent-fips, flux-operator-fips, ferretdb, livekit-cli, gitlab-workhorse-ce, opencost...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: skaffold, trivy, podman, cloudbeat-fips, docker-compose-fips, kubescape-server-fips, scorecard, buildah-fips, skaffold-fips, trivy-fips, conftest-fips, guac, cloudbeat, buildah, kaniko, docker-compose, trivy-operator, docker-cli-buildx, kubescape-server,...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: osv-scanner, glab, ferretdb, datadog-agent, opencost, jaeger...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: osv-scanner, ferretdb, gptscript, datadog-agent, opencost, github-mcp-server, jaeger...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: osv-scanner, glab, ferretdb, datadog-agent, opencost, jaeger...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, dagger, sigstore-scaffolding, spicedb, conftest, k3s, kubernetes-csi-external-provisioner, ksops, step-ca, terragrunt, k8sgpt-operator, zarf, trivy, grafana-mimir, pulumi-language-dotnet, smarter-device-manager, opentelemetry-collector, guac,...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: dagger, k3s, zarf, trivy, xeol, buildkitd, zot, syft, kargo, rancher-fleet, kaniko, cilium-cli, opa, kubescape, opa-envoy, osv-scanner, k8sgpt, flux-source-controller, helm-operator, kots, kubevela, wolfictl, fuse-overlayfs-snapshotter, docker-compose, helm,...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: buildah, osv-scanner, guac, scorecard, conftest, zot, docker-cli-buildx, docker-compose, skaffold, trivy-operator, trivy, kaniko, kubescape, podman...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: buildah, osv-scanner, guac, scorecard, conftest, zot, docker-cli-buildx, docker-compose, skaffold, trivy-operator, trivy, kaniko, kubescape, podman...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: dagger, argocd-image-updater, apko, gptscript, k9s, zarf, grafana-alloy, trivy, pulumi-language-dotnet, src-fingerprint, argo-events, pulumi-language-java, guac, flux-kustomize-controller, zot, syft, kargo, timoni, snyk-cli, flux-image-automation-controller, gitea,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: dagger, argocd-image-updater, apko, gptscript, k9s, zarf, grafana-alloy, trivy, pulumi-language-dotnet, src-fingerprint, argo-events, pulumi-language-java, guac, flux-kustomize-controller, zot, syft, kargo, timoni, snyk-cli, flux-image-automation-controller, gitea,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: dagger, cerbos, argocd-image-updater, apko, trufflehog, gptscript, k9s, kyverno, zarf, grafana-alloy, trivy, argo-cd, pulumi-language-dotnet, src-fingerprint, argo-events, pulumi-language-java, xeol, gitaly, guac, zot, syft, kargo, trivy-operator, gomplate,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, grafana, rancher, cri-tools, trivy, portieris, rancher-machine, buildah, kpt, undock, zot, trivy-operator, rancher-agent, skopeo, osv-scanner, k8sgpt, nuclei, kots, opentelemetry-operator, ko, envoy-gateway, amazon-cloudwatch-agent-operator,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, grafana, traefik, apko, rancher, cri-tools, zarf, trivy, portieris, openfga, rancher-machine, buildah, kpt, opentelemetry-collector, undock, zot, cluster-api, gatekeeper, trivy-operator, rancher-agent, skopeo, pulumi, osv-scanner, k8sgpt, nucle...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, grafana, traefik, apko, rancher, cri-tools, zarf, trivy, portieris, openfga, rancher-machine, buildah, kpt, opentelemetry-collector, undock, zot, cluster-api, gatekeeper, trivy-operator, rancher-agent, skopeo, pulumi, osv-scanner, k8sgpt, nucle...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: malcontent, mountpoint-s3-csi-driver, newrelic-infra-operator, supercronic, apko, pluto, grafana-rollout-operator, dgraph, smarter-device-manager, volume-modifier-for-k8s, flux-image-reflector-controller, dbmate, clickhouse-operator, polaris, stakater-reloader, gh,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: knative-serving, dask-gateway, nri-haproxy, step-ca, addon-resizer, nri-couchbase, chisel, istio, govulncheck, trino, vault-k8s, frp, rook, src-fingerprint, argo-rollouts, kapp-controller, azcopy, crossplane-provider-aws-cloudformation,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: external-dns, kine, istio, loki, opentelemetry-collector, zot, gomplate, nuclei, cilium, cert-manager, docker-machine-driver-harvester, docker-cli-buildx, melange, openbao, step-issuer, podman, go-discover, dagger, terragrunt, k3s, argocd-image-updater, apko, rancher...