GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, pulumi...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, rancher-agent, grafana-alloy, trivy-operator, buildah, ko, rancher, datadog-agent, skopeo, zot, spire-server, envoy-gateway, podman, cri-tools, aws-otel-collector, docker-credential-gcr, rancher-machine, nuclei,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: ksops, flyte, flux-image-reflector-controller, prometheus-operator, flux, step, up, harbor-registry, sigstore-scaffolding, rook, step-ca, druid, hugo-extended, zarf, cosign, py3-cassandra-medusa, opentelemetry-collector, opentelemetry-collector-contrib, fulcio, rclon...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-workload-identity-webhook, delve, runc, flux, helm-push, kiali, dynamic-localpv-provisioner, harbor-registry, sigstore-scaffolding, rook, terraform-provider-acme, kyverno, aws-efs-csi-driver, bento, gogatekeeper, calico, chisel...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: policy-controller, teleport, ratify, kubescape, kyverno-notation-aws, aactl, kyverno, zot, crossplane, slsa-verifier, trivy-operator, trivy...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: flux, kiali, cerbos, harbor-registry, bento, knative-operator, opentelemetry-collector-contrib, kube-logging-operator, gitaly, zot, headlamp, spicedb, kserve, kubeflow-pipelines, opentofu, kots, net-kourier, kubo, cilium, buildkitd, argo-workflows, distribution,...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: prometheus-operator, flux, kyverno, telegraf, loki, zot, aactl, minio, kaf, k3d, spire-server, helm, k3s, kine, snyk-cli, falco-no-driver, kots, nerdctl, containerd...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: teleport, kyverno, gitsign, zarf, trivy-operator, ko, neuvector-sigstore-interface, goreleaser, ratify, kyverno-notation-aws, aactl, spire-server, crossplane, kubescape, slsa-verifier, policy-controller, tflint, falcoctl, tekton-chains, tkn...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, cortex, scorecard, up, kubescape, kubevela, aactl, k3d, src, kubeflow, buildkitd, dgraph, slsa-verifier, spark-operator...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: helm-push, incert, knative-operator, gitness, buildah, custom-pod-autoscaler, fscrypt, sftpgo-plugin-eventstore, docker-cli, gitaly, zot, esbuild, istio, certificate-transparency, grpcurl, nri-haproxy, juicefs-csi-driver, yunikorn-k8shim, cluster-autoscaler, temporal...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux, terraform-provider-acme, kyverno, chisel, buildah, rancher, crossplane-provider-aws-iam, fscrypt, apko, pulumi-kubernetes-operator, zot, istio, kaf, k9s, witness, k8sgpt, argo-cd, terraform-provider-tls, crossplane-provider-family-azure,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: rancher-agent, prometheus-operator, flux, cloud-provider-aws, docker-cli-buildx, kyverno, external-dns, cert-manager, buildah, opentelemetry-collector, telegraf, rancher, fscrypt, loki, external-secrets-operator, zot, aactl, minio, prometheus, kaf, istio, gitlab-kas,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: runc, rancher-helm, kubeflow-katib, conftest, src, bento, terraform-provider-pagerduty, traefik, aws-flb-cloudwatch, thanos-operator, ferretdb, gitness, tfsec, external-dns, cosign, k8sgateway, ingress-nginx-controller, steampipe, telegraf, eksctl, goreleaser,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, azure-workload-identity-webhook, runc, kor, dynamic-localpv-provisioner, harbor-registry, bento, rancher-system-agent, terraform-provider-pagerduty, gitness, calico, chisel, gogatekeeper, tfsec,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: teleport, sigstore-scaffolding, docker-cli-buildx, kyverno, gitsign, zarf, skaffold, trivy-operator, cosign, ko, gh, neuvector-sigstore-interface, goreleaser, ratify, kyverno-notation-aws, zot, aactl, trivy, vexctl, docker, spire-server, crossplane, witness, kubescap...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: teleport, sigstore-scaffolding, gitsign, zarf, skaffold, trivy-operator, cosign, ko, gh, neuvector-sigstore-interface, rekor, goreleaser, ratify, kyverno-notation-aws, zot, aactl, trivy, vexctl, docker, spire-server, witness, kubescape, flux-source-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, azure-service-operator, delve, flux, helm-push, kor, cerbos, harbor-registry, pluto, rancher-system-agent, nodetaint, kube-logging-operator, oauth2-proxy, docker-cli, zot, headlamp, nri-haproxy, kubernetes-dashboard-auth, witness,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: ksops, flux-image-reflector-controller, flux, crossplane-provider-azure-managedidentity, kubevela, rook, sigstore-scaffolding, step-ca, crossplane-provider-azure-storage, gitsign, zarf, rabbitmq-messaging-topology-operator, cosign, opentelemetry-collector, gh, fulcio...

PT-2026-72117

Name of the Vulnerable Software and Affected Versions iCagenda versions prior to 2.0.0-4.0.11 Description Authenticated backend operators with permissions to access the extension can perform SQL injection. This occurs due to an unescaped numeric filter, allowing the injection of malicious SQL...

CVE-2026-71570: Improper Access Control

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...