GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi, crossplane-provider-family-azure, slsa-verifier, mods, gh, kubernetes-dashboard, gptscript, crossplane-provider-aws-sqs, terraform-provider-acme, pulumi-kubernetes-operator, crossplane-provider-aws-cloudfront, traefik, opentofu,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: pulumi, crossplane-provider-family-azure, slsa-verifier, mods, gh, kubernetes-dashboard, gptscript, pulumi-kubernetes-operator, opentofu, crossplane-provider-azure-authorization, gomplate, pulumi-language-java, zarf, cilium, ksops, steampipe,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: pulumi, kubernetes-dashboard, gptscript, pulumi-kubernetes-operator, opentofu, pulumi-language-java, gomplate, zarf, cilium, apko, telegraf, opentelemetry-collector, syft, pulumi-language-yaml, openbao, cilium-cli, flux-source-controller, kubescape, cloud-provider-aw...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, volume-modifier-for-k8s, minio-operator, kapp, slsa-verifier, mods, kubernetes-dashboard, lazygit, redka, gptscript, sftpgo-plugin-kms, bom, dbmate, chart-testing, conjur-cli, crossplane-provider-aws-cloudfront, docker-credential-gcr, flannel, git-lfs...

osv-scanner v2.5.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, omnictl-multiarch-fips, zarf, tekton-pipelines, etcd, istio, zot, gitea-fips, fscrypt, gitlab-workhorse-ce-fips, reports-server, argo-cd, gitlab-kas, falco-no-driver, opentelemetry-collector, harbor-fips, loki, skaffold-fips, omnictl-multiarch,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: pulumi, crossplane-provider-family-azure, slsa-verifier, mods, gh, kubernetes-dashboard, gptscript, pulumi-kubernetes-operator, opentofu, crossplane-provider-azure-authorization, gomplate, pulumi-language-java, zarf, cilium, ksops, steampipe,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, chisel, prometheus, k9s, containerd, kaf, kubernetes-dashboard, skaffold, osv-scanner, argocd-image-updater, rancher, zarf, cert-manager, cilium, prometheus-operator, k3s, falco-no-driver, istio, external-dns, rancher-agent,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: zarf, goreleaser, zot, gitea-fips, argo-cd, kaniko-fips, gptscript, skaffold-fips, argo-events-fips, kubevela-fips, crossplane, apko-fips, syft-fips, grafana, scorecard, amazon-ssm-agent, flux-source-controller, wolfictl, cerbos, nuclei, xeol-fips, kargo,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: kaniko, melange, cert-manager-cmctl, k8ssandra-client, linkerd2, xeol, skaffold, envoy-gateway, osv-scanner, wolfictl, helm-push, zarf, neuvector-scanner, dagger, grype, ctop, opa, k3s, fuse-overlayfs-snapshotter, docker-cli-buildx, cluster-api-helm-controller,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: delve, frp, ksops, cadvisor, ctop, karpenter-fips, policy-controller, kind, prometheus-postgres-exporter, k3d, wave, kustomize, grpcurl, hcloud, harbor-registry-fips, atlantis, wire-go, cert-manager-webhook-pdns-fips, etcd, skopeo, zot, harbor-cli, regclient,...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...