GO-2025-3770 vulnerabilities

Vulnerabilities for packages: step-issuer, rclone-fips, gitness, step-ca-fips, dapr-fips, tkn-fips, step, telegraf, karma, caddy, caddy-fips, step-fips, step-issuer-fips, kyverno-policy-reporter-ui-fips, step-ca, tkn, rclone, dapr, gogatekeeper, kyverno-policy-reporter-ui, sftpgo, buf, cloudflare...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, oauth2-proxy, metacontroller, terraform-provider-sendgrid, tekton-chains, kubernetes-csi-external-provisioner, step, volume-modifier-for-k8s, grafana-operator, nodetaint, vertical-pod-autoscaler, crossplane-provider-aws-kinesis,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, frp, kubo, caddy, spegel, q, traefik, k8sgateway, dkron, kargo, kyverno-policy-reporter-ui, k3s, ipfs-cluster...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: gitness, caddy, tkn, cloudflared, rclone, step-ca, karma, step, step-issuer, buf, gogatekeeper, kyverno-policy-reporter-ui, sftpgo...

GO-2026-5577 Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui...

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Summary Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses v-html for the else branch of the URL check, meaning any non-URL string value flows...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, frp, kubo, caddy, spegel, q, traefik, k8sgateway, dkron, kargo, kyverno-policy-reporter-ui, k3s, ipfs-cluster...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: coredns, spegel-fips, kubo-fips, traefik, kubernetes-dns-node-cache, syncthing-fips, kubernetes-dns-node-cache-fips, k3s, kubo, dkron-fips, frp, q, caddy, caddy-fips, eks-distro, ipfs-cluster, k8sgateway-fips, syncthing, kyverno-policy-reporter-ui-fips, k8sgateway,...