GO-2026-5019 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, istio, rootlesskit, snyk-cli, wolfictl, helm, buildah, apko, docker-cli-buildx, buildkitd, gptscript, openbao, gomplate, zot, dagger, melange, telegraf, ksops, falcoctl, kubernetes, opentofu, atlantis, kubernetes-dashboard, minio,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, external-secrets-operator, istio, rootlesskit, snyk-cli, wolfictl, helm, buildah, crossplane-provider-aws-kms, tw, crossplane-provider-keycloak, apko, docker-cli-buildx, buildkitd, gptscript, openbao, gomplate, zot, dagger, melange,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k3d, newrelic-infra-operator, crossplane-provider-aws-dynamodb, gostatsd, kor, pgtimetable, timescaledb-parallel-copy, vertical-pod-autoscaler, wave, extism, mesosphere-vsphere-csi, kubo, rancher-telemetry, restic, amass, rabbitmq-default-user-credential-updater,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: terraform, k9s-fips, argo-workflows-fips, flux-source-controller, drone, prometheus-operator, harbor-fips, gitlab-kas, knative-kafka-broker, kubernetes, osv-scanner, seaweedfs-rocksdb-fips, flux, knative-kafka-broker-fips, gitlab-rails-ce, frankenphp-8.5, prometheus,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: external-secrets-operator, istio, rootlesskit, snyk-cli, wolfictl, helm, buildah, apko, docker-cli-buildx, buildkitd, gptscript, openbao, gomplate, zot, dagger, melange, telegraf, ksops, falcoctl, kubernetes, opentofu, atlantis, kubernetes-dashboard, minio,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: spire-server, external-secrets-operator, mattermost, istio, kyverno, snyk-cli, helm, cilium, containerd, opentelemetry-collector, flux-source-controller, kots, gitlab-kas, cloud-provider-aws, kaf, k9s, argocd-image-updater, knative-serving, rancher, k3s, prometheus,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: k9s-fips, argo-workflows-fips, flux-source-controller, nuclei, osv-scanner, flux, terragrunt-fips, gitlab-rails-ce, crossplane-fips, chainloop-cli-fips, gitsign, scorecard, witness, external-secrets-operator-fips, gitaly, tfsec, snyk-cli, chainloop-cli, goreleaser,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: docker-compose, helm-operator, syft, helm-push, wolfictl, helm, linkerd2, flux-source-controller, kots, docker-cli-buildx, buildkitd, rancher-fleet, eksctl, k3s, zot, envoy-gateway, dagger, melange, neuvector-scanner, trivy, fuse-overlayfs-snapshotter, kaniko, nerdct...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: addon-resizer-fips, prometheus-elasticsearch-exporter-fips, gke-gcloud-auth-plugin, mkcert, volume-modifier-for-k8s, wave-fips, argo-workflows-fips, flux-source-controller, harbor-scanner-trivy-fips, trust-manager, cue-fips, kubebuilder, atlantis-fips,...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...