GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gitaly, pulumi, pulumi-language-java, witness, nuclei, osv-scanner, kaniko, zot, skaffold, crossplane, steampipe, dagger, flux-image-automation-controller, gitea, wolfictl, src-fingerprint, gomplate, zarf, scorecard, grype, kyverno, nfpm, kubevela, trivy, cerbos,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi, pulumi-language-java, nuclei, osv-scanner, kaniko, zot, skaffold, crossplane, dagger, flux-image-automation-controller, gitea, wolfictl, src-fingerprint, zarf, flux-kustomize-controller, scorecard, grype, kubevela, trivy, argo-workflows, argo-events, bom,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, buildah, ko, nuclei, aws-otel-collector, envoy-gateway, osv-scanner, rancher, zot, amazon-cloudwatch-agent-operator, docker-credential-gcr, trivy, rancher-machine, spire-server, trivy-operator, kpt, nerdctl, skopeo, undock, kots, datadog-agen...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, pulumi, buildah, ko, newrelic-infrastructure-agent, nuclei, aws-otel-collector, envoy-gateway, osv-scanner, neuvector-scanner, rancher, docker, zot, wolfictl, amazon-cloudwatch-agent-operator, docker-credential-gcr, zarf, gatekeeper, scorecar...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, pulumi, buildah, ko, newrelic-infrastructure-agent, nuclei, aws-otel-collector, envoy-gateway, osv-scanner, neuvector-scanner, rancher, docker, zot, wolfictl, amazon-cloudwatch-agent-operator, docker-credential-gcr, zarf, gatekeeper, trivy,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: aws-network-policy-agent, grafana-operator, polaris, oras, github-mcp-server, stakater-reloader, osv-scanner, metacontroller, clickhouse-operator, karpenter, envoy-ratelimit, gh, flux-image-automation-controller, aws-load-balancer-controller, mariadb-operator,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: spqr, cluster-api-helm-controller, aws-flb-cloudwatch, rook, tofu-controller, kyverno-policy-reporter-kyverno-plugin, kubernetes, paranoia, stakater-reloader, rabbitmq-cluster-operator, knative-serving, tetragon, crossplane-provider-aws-cloudfront, wuzz, nri-couchbas...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: kubernetes, fulcio, wolfictl, falcoctl, gomplate, kyverno, nfpm, argo-events, witness, gitlab-runner, cilium-cli, melange, external-dns, go-discover, crossplane-provider-azure-managedidentity, nerdctl, crossplane-provider-azure-sql, containerd, k8sgpt, kots, glab,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: kubernetes, wolfictl, gomplate, kyverno, nfpm, witness, argo-events, cilium-cli, melange, external-dns, go-discover, nerdctl, containerd, kots, step, kine, snyk-cli, k9s, cert-manager, pulumi, pulumi-language-java, caddy, osv-scanner, skaffold,...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, filebrowser, oras, cert-manager-cmctl, kubernetes, paranoia, rook, tofu-controller, aws-flb-kinesis, falcoctl, crane, k8ssandra-client, kyverno, redpanda, coredns, go, envconsul, witness, cilium-cli, external-dns, goreleaser, helm-set-status,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: kubernetes, crossplane-provider-aws-cloudfront, fulcio, wolfictl, falcoctl, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, gomplate, kyverno, nfpm, crossplane-provider-aws-cloudwatchlogs, argo-events, witness, gitlab-runner, cilium-cli, melang...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: kubernetes, crossplane-provider-aws-cloudfront, fulcio, wolfictl, falcoctl, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, gomplate, kyverno, nfpm, crossplane-provider-aws-cloudwatchlogs, argo-events, witness, gitlab-runner, cilium-cli, melang...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spqr, restic, pvc-autoresizer, aws-flb-cloudwatch, tofu-controller, cert-manager-cmctl, kyverno-policy-reporter-kyverno-plugin, paranoia, boring-registry, stakater-reloader, rabbitmq-cluster-operator, nri-rabbitmq, whereabouts, tetragon, crossplane-provider-sql,...

osv-scanner v2.5.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

@holocronlab/botruntime-adk (2.5.4), @holocronlab/brt (0.9.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.5.4)

@holocronlab/botruntime-runtime NPM version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.5.4 - @holocronlab/brt 0.9.3 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.4.2), @holocronlab/brt (0.7.25) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.4.2)

@holocronlab/botruntime-runtime NPM version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.4.2 - @holocronlab/brt 0.7.25 Source cves: unknown CVE Source advisor...

@holocronlab/botruntime-adk (2.6.4), @holocronlab/brt (0.9.8) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.4)

@holocronlab/botruntime-runtime NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.4 - @holocronlab/brt 0.9.8 Source cves: unknown CVE Source advisory...

@ccfly/setup (0.1.3) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.3)

@ccfly/setup-linux-x64 NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@apicity/mcp-server (0.8.3) potentially affected by unknown CVE via @apicity/meta (0.8.3)

@apicity/meta NPM version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

comiconv (>=0.1.0, <=0.1.2), waifu-diffuser-types (0.0.0) potentially affected by unknown CVE via sevenz-rust (0.2.10)

sevenz-rust CARGO version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on sevenz-rust and may be impacted: - comiconv =0.1.0, =0.1.2 - waifu-diffuser-types 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0245...