bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

syft

Syft Uno strumento CLI e una libreria Go per generare una Software Bill of Materials SBOM da immagini container e filesystem. Eccezionale per il rilevamento delle vulnerabilità se utilizzato con uno scanner comeGrype...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: wolfictl, syft, grype, zarf, kubescape, k9s...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: opentofu, kubescape-server-fips, k9s-fips, tflint-fips, terraform, kubescape-server, crossplane-provider-terraform-fips, kubescape, grype-db, steampipe, syft-fips, tflint, wolfictl, terraform-fips, terragrunt-fips, zarf, conftest-fips, tfsec, cg, zot, trivy-fips, kot...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: k9s-fips, mattermost, gptscript, undock, kubescape, grype-db, syft-fips, wolfictl, trufflehog-fips, zarf, cg, kots, mattermost-fips, gotenberg, nuclei, filebrowser, chainctl, chezmoi, k9s, gitleaks, grype, syft, grype-fips, trufflehog...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: buildkitd, newrelic-infrastructure-agent, kubescape, skaffold, wolfictl, ctop, zarf, zot, nerdctl, k3s, kots, kaniko, trivy, kubernetes, k9s, docker, runc, cadvisor, podman, k3d, grype, syft, skopeo...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, neuvector-scanner, opentelemetry-collector-contrib, buildah, cadvisor-fips, grafana-alloy, cluster-autoscaler, eks-distro-fips, ctop, cluster-autoscaler-fips, k3s, eks-distro, node-feature-discovery, neuvector, opentelemetry-collector-contrib-fips,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: cri-tools, helm-push, neuvector-scanner, buf, harbor-scanner-trivy-fips, kaniko, wolfictl, docker-compose, k3d, grype, harbor-scanner-trivy, policy-controller, syft, dagger, policy-controller-fips, melange, docker...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: buildkitd, opa-fips-envoy, kubevela, neuvector-scanner, consul-k8s, helm-operator, docker-compose-fips, newrelic-infrastructure-agent, flux-helm-controller, buildkitd-fips, eksctl, cluster-api-helm-controller-fips, kubescape, skaffold, rancher, kargo,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: crossplane, gatekeeper, consul-k8s, datadog-agent, rancher, kargo, headlamp-fips, rancher-helm, syft-fips, newrelic-infrastructure-agent-fips, harvester-fips, harvester, helm-operator-fips, kaniko, kube-mgmt-fips, chainctl-fips, kgateway, dagger, kube-mgmt, packer,...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: grype, k9s, zarf, wolfictl, kubescape, syft...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: tflint, steampipe, xeol, kots, task, tfsec, trivy, opentofu, k9s, zarf, wolfictl, kubescape, conftest, trivy-operator, terraform, snyk-cli, grype, terragrunt, zot, syft...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kots, grype, wolfictl, syft, undock, nuclei, trufflehog, gitleaks, k9s, zarf, chezmoi, gptscript, kubescape, filebrowser...

GO-2025-4098 vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, podman, buildah, checksec, xeol, nvidia-container-toolkit, containerd, kubernetes-csi-driver-nfs, kots, envoy-gateway, trivy, falco-no-driver, grafana-alloy, k9s, zarf, wolfictl, kubescape, docker, k8s-device-plugin, sriov-network-device-plugi...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: podman, cadvisor, k3d, kots, trivy, k9s, zarf, wolfictl, kubescape, docker, kaniko, kubernetes, k3s, runc, skaffold, grype, ctop, skopeo, zot, buildkitd, newrelic-infrastructure-agent, syft, nerdctl...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kargo, linkerd2, xeol, k8ssandra-client, kots, envoy-gateway, helm, trivy, zarf, wolfictl, cilium-cli, kubescape, docker, helm-operator, opa, kaniko, kubevela, helm-push, rancher-fleet, chartmuseum, docker-cli-buildx, flux-source-controlle...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, grype, syft, ctop, grafana-alloy, podman, kubernetes, buildah, k3s, cadvisor, runc, neuvector-scanner, docker, opentelemetry-collector-contrib...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: kaniko, grype, wolfictl, syft, buf, helm-push, dagger, cri-tools, harbor-scanner-trivy, docker-compose, policy-controller, melange, neuvector-scanner, docker, k3d...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: buf, buildah, kargo, cadvisor, goreleaser, trivy, openfga, k9s, zarf, wolfictl, falcoctl, syft, splunk-otel-collector, docker-cli-buildx, apko, melange, opentelemetry-collector-contrib, osv-scanner, grype, opentelemetry-collector, dagger, trufflehog, spire-server, zo...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: go-licenses, argo-workflows, argocd-image-updater, flux-kustomize-controller, bom, kargo, pulumi-language-java, pulumi, src-fingerprint, goreleaser, crossplane, guac, kots, task, tfsec, trivy, grafana-alloy, pulumi-language-dotnet, gitea, k9s, zarf, wolfictl,...