GO-2025-3770 vulnerabilities

Vulnerabilities for packages: gogatekeeper, sftpgo, kyverno-policy-reporter-ui-fips, tkn-fips, rclone, dapr-fips, buf, gitness, tkn, step-issuer, rclone-fips, step-fips, step-ca-fips, kyverno-policy-reporter-ui, telegraf, caddy, step-issuer-fips, karma, dapr, caddy-fips, step, cloudflared, step-c...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: ollama, docker-compose, aws-efs-csi-driver-fips, dagger, timestamp-authority-fips, prometheus-mongodb-exporter, minio, boring-registry, external-secrets-fips, wavefront-collector-for-kubernetes, restic, volume-modifier-for-k8s, kaf, flux-notification-controller,...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: k8sgateway, ipfs-cluster, kubernetes-dns-node-cache, dkron, spegel, kargo, frp, kyverno-policy-reporter-ui, q, traefik, kubo, caddy, k3s...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: cloudflared, step, gogatekeeper, rclone, step-issuer, tkn, gitness, buf, karma, kyverno-policy-reporter-ui, sftpgo, step-ca, caddy...

GO-2026-5577 Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui...

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Summary Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses v-html for the else branch of the URL check, meaning any non-URL string value flows...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: k8sgateway, ipfs-cluster, kubernetes-dns-node-cache, dkron, spegel, kargo, frp, kyverno-policy-reporter-ui, q, traefik, kubo, caddy, k3s...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: kubo, k3s, traefik, kyverno-policy-reporter-ui-fips, kubo-fips, k8sgateway, spegel, spegel-fips, syncthing, eks-distro-fips, syncthing-fips, dkron-fips, eks-distro, q, kargo, coredns, ipfs-cluster, ipfs-cluster-fips, kubernetes-dns-node-cache-fips,...