GO-2025-3368 vulnerabilities

Vulnerabilities for packages: melange, argo-events, gitsign, flux-kustomize-controller, flux-image-automation-controller, bom, scorecard, argocd-image-updater, pulumi-language-java, chezmoi, go-licenses, snyk-cli, zarf, guac, apko, osv-scanner, pulumi-language-dotnet, kots, flux,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: melange, argo-events, xeol, gitsign, gitaly, flux-image-automation-controller, bom, rancher-fleet, scorecard, cerbos, argocd-image-updater, steampipe, pulumi-language-java, chezmoi, snyk-cli, zarf, guac, apko, osv-scanner, pulumi-language-dotnet, kots, flux,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: undock, melange, gatekeeper, docker, rancher, cri-tools, buf, nerdctl, spire-server, aws-otel-collector, cluster-api, neuvector-scanner, opentelemetry-operator, traefik, zarf, ko, apko, envoy-gateway, osv-scanner, kpt, rancher-machine, kots, wolfictl, grafana-alloy,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: undock, rancher, cri-tools, nerdctl, spire-server, aws-otel-collector, opentelemetry-operator, ko, envoy-gateway, osv-scanner, kpt, rancher-machine, kots, grafana-alloy, amazon-cloudwatch-agent-operator, nuclei, skopeo, zot, trivy-operator, podman,...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: undock, melange, gatekeeper, docker, rancher, cri-tools, buf, nerdctl, spire-server, aws-otel-collector, scorecard, cluster-api, neuvector-scanner, opentelemetry-operator, traefik, zarf, ko, apko, envoy-gateway, osv-scanner, kpt, rancher-machine, kots, wolfictl,...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventsearch, hubble, victoriametrics, rabbitmq-messaging-topology-operator, flux-notification-controller, flux-helm-controller, flux-image-automation-controller, omnibump, aws-load-balancer-controller, spire-server, nodetaint, actions-runner-controller,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, telegraf, nri-couchbase, kubernetes, kubernetes-replicator, omnibump, tetragon, frp, manifest-tool, vcluster, cluster-api, flyte, argocd-image-updater, opa, traefik, pulumi-language-java, docker-machine-driver-harvester,...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: telegraf, spegel, kubernetes, kube-arangodb, bom, cosign, helm-mapkubeapis, pulumi-language-java, ko, apko, prometheus-operator, step-ca, rancher-machine, k8s-device-plugin, rancher-helm, kots, vault-env, newrelic-fluent-bit-output, tigera-operator, oras, dask-gatewa...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: melange, telegraf, kubernetes, cosign, argocd-image-updater, traefik, pulumi-language-java, terraform-provider-tls, ko, apko, prometheus-operator, step-issuer, crossplane-provider-aws-eks, rancher-machine, pulumi-language-dotnet, kots, k9s,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: melange, telegraf, kubernetes, cosign, argocd-image-updater, pulumi-language-java, terraform-provider-tls, docker-machine-driver-harvester, ko, apko, prometheus-operator, step-issuer, rancher-machine, pulumi-language-dotnet, kots, k9s, act, kine, trivy-operator,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: melange, telegraf, kubernetes, argocd-image-updater, pulumi-language-java, docker-machine-driver-harvester, apko, prometheus-operator, step-issuer, pulumi-language-dotnet, kots, k9s, act, kine, trivy-operator, aactl, falco-no-driver, pulumi-kubernetes-operator,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: melange, telegraf, kubernetes, cosign, argocd-image-updater, traefik, pulumi-language-java, terraform-provider-tls, ko, apko, prometheus-operator, step-issuer, crossplane-provider-aws-eks, rancher-machine, pulumi-language-dotnet, kots, k9s,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, gatekeeper, telegraf, nri-couchbase, spegel, kubernetes-replicator, tetragon, bom, cluster-api-gcp-controller, cosign, frp, manifest-tool, nri-postgresql, traefik, kube-vip-cloud-provider, k3d, nri-mongodb, postgres-operator,...

osv-scanner v2.5.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

@holocronlab/botruntime-adk (2.5.4), @holocronlab/brt (0.9.3) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.5.4)

@holocronlab/botruntime-runtime NPM version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.5.4 - @holocronlab/brt 0.9.3 Source cves: unknown CVE Source advisory...

@holocronlab/botruntime-adk (2.4.2), @holocronlab/brt (0.7.25) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.4.2)

@holocronlab/botruntime-runtime NPM version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.4.2 - @holocronlab/brt 0.7.25 Source cves: unknown CVE Source advisor...

@holocronlab/botruntime-adk (2.6.4), @holocronlab/brt (0.9.8) potentially affected by unknown CVE via @holocronlab/botruntime-runtime (2.6.4)

@holocronlab/botruntime-runtime NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on @holocronlab/botruntime-runtime and may be impacted: - @holocronlab/botruntime-adk 2.6.4 - @holocronlab/brt 0.9.8 Source cves: unknown CVE Source advisory...

@ccfly/setup (0.1.3) potentially affected by unknown CVE via @ccfly/setup-linux-x64 (0.1.3)

@ccfly/setup-linux-x64 NPM version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on @ccfly/setup-linux-x64 and may be impacted: - @ccfly/setup 0.1.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13418...

@apicity/mcp-server (0.8.3) potentially affected by unknown CVE via @apicity/meta (0.8.3)

@apicity/meta NPM version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @apicity/meta and may be impacted: - @apicity/mcp-server 0.8.3 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13412...

comiconv (>=0.1.0, <=0.1.2), waifu-diffuser-types (0.0.0) potentially affected by unknown CVE via sevenz-rust (0.2.10)

sevenz-rust CARGO version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on sevenz-rust and may be impacted: - comiconv =0.1.0, =0.1.2 - waifu-diffuser-types 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0245...