GO-2023-2383 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, amass, hubble-ui, kubernetes-csi-livenessprobe-fips, docker-cli, helm-push, ip-masq-agent, flannel-cni-plugin, petname, go-bindata, metrics-server, hey, aactl, gosu, k3d, nsc, dgraph, cass-operator, prometheus-beat-exporter-fips, wait-for-por...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, sftpgo-plugin-auth, longhorn-instance-manager, prometheus-adapter-fips, longhorn-cli, kubernetes-csi-external-provisioner, prometheus-nats-exporter-fips, syncthing, terraform-ls, sealed-secrets, chart-testing, newrelic-nri-statsd, age-fips,...

GO-2025-3487 vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, amazon-ssm-agent, terraform-provider-azuread, newrelic-nri-statsd, age-fips, fscrypt, kiali-fips, tflint, promxy, spqr, docker-compose-fips, falcoctl-fips, prometheus-pushgateway, gomplate, gitleaks, grafana-alloy, nats, gobuster, cosign-fips...

GO-2025-3420 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, sftpgo-plugin-auth, prometheus-adapter-fips, overmind, newrelic-nri-statsd, age-fips, fscrypt, kiali-fips, tflint, minify-fips, nri-rabbitmq, promxy, docker-compose-fips, falcoctl-fips, opentelemetry-collector-contrib-fips, thanos-operator-fips,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, overmind, newrelic-nri-statsd, tflint, minify-fips, nri-rabbitmq, spqr, newrelic-infra-operator, falcoctl-fips, thanos-operator-fips, kyverno-policy-reporter, prometheus-pushgateway, gomplate, gitleaks, grpcurl, nats,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: zot, chainctl, flux-source-controller, policy-controller, spire-server-fips, aactl, melange, kubescape, ko-fips, gitsign, falcoctl, neuvector-sigstore-interface, falcoctl-fips, slsa-verifier, zarf, tekton-chains-fips, tkn, ko, policy-controller-fips, goreleaser,...

GO-2025-3892 vulnerabilities

Vulnerabilities for packages: snyk-cli, tflint, terragrunt, rancher-fleet, zot, xeol, zarf, kots, conftest, opentofu, tfsec, k9s, wolfictl, trivy, grype, terraform, trivy-operator, kubescape, steampipe, syft...

GO-2026-5435 vulnerabilities

Vulnerabilities for packages: chart-testing, headlamp, nova, tigera-operator, kubescape, pluto, rancher-fleet, helm-docs, zot, zarf, cerbos, kuma, kots, kube-arangodb, envoy-gateway, harbor, tw, helm-operator, cluster-api-helm-controller, helm-set-status, flux-source-controller, k9s, istio,...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: chart-testing, headlamp, nova, pluto, rancher-fleet, helm-docs, zot, zarf, cerbos, kots, envoy-gateway, flux-helm-controller, tw, helm-operator, cluster-api-helm-controller, helm-set-status, flux-source-controller, k9s, istio, linkerd2, k8ssandra-client, trivy,...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: src-fingerprint, bom, go-licenses, gitness, gitsign, nuclei, goreleaser, pulumi-kubernetes-operator, scorecard...

GO-2026-4909 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, argocd-image-updater, chezmoi, snyk-cli, pulumi-language-yaml, nfpm, pulumi-language-java, witness, grafana-alloy, bom, trufflehog, gitlab-runner, rancher-fleet, pulumi-kubernetes-operator, gptscript, zot, xeol, zarf, cerbos, argo-workflows...

GO-2025-3956 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, vault-benchmark, secrets-store-csi-driver-provider-aws, ctop, git-lfs, addon-resizer, terraform-provider-time, rancher-machine, vault-k8s, lvm-driver, confluent-common-docker, k8sgpt-operator, sftpgo-plugin-pubsub, kube-vip, nats, gitsign,...

GO-2026-5158 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, promxy, crossplane-provider-aws-route53, vault-env, crossplane-provider-family-aws, thanos, grafana-alloy, cluster-api-gcp-controller, addon-resizer, azure-service-operator, migrate, neuvector-scanner, k3s, rancher-webhook, keda,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, argocd-image-updater, snyk-cli, pulumi-language-yaml, nfpm, pulumi-language-java, act, grafana-alloy, witness, bom, trufflehog, terragrunt, gitlab-runner, rancher-fleet, pulumi-kubernetes-operator, gptscript, zot, xeol, zarf, cerbos,...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: chezmoi, addon-resizer, mattermost, spqr, terraform-provider-sendgrid, kubernetes-event-exporter, rancher-loglevel, swagger, wal-g, gatus, nri-redis, cluster-autoscaler, kserve-rest-proxy, http-echo, runc, cert-manager, redpanda, openbao-k8s, aws-flb-firehose,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: wire-go, capslock, kubernetes-event-exporter, rancher-loglevel, swagger, kserve-rest-proxy, http-echo, runc, kubernetes-release, openbao-k8s, aws-flb-firehose, direnv, paranoia, vendir, spiffe-helper, whereabouts, undock, nri-f5, redka, boring-registry, helm-operator...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: falcoctl, aactl, ko, zot, zarf, tekton-chains, gitsign, slsa-verifier, apko, melange, flux-source-controller, spire-server, wolfictl, goreleaser, vexctl, neuvector-sigstore-interface, tkn, policy-controller, kubescape, skaffold...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-54541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54541 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 Tenable has extracted...

CVE-2026-56443

Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...

CVE-2026-73573

In Zimbra Collaboration ZCS before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages parameter. An authenticated attacker can exploit this vulnerability by supplying a crafted path traversal sequence,...