GO-2024-2948 vulnerabilities

Vulnerabilities for packages: conftest-fips, kubescape, terraform, tflint, zarf, zot, k9s, terragrunt, conftest, kots, trivy, wolfictl, grype, tfsec, trivy-fips, snyk-cli...

GO-2024-2698 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, nuclei, mattermost-fips, k9s, gotenberg, filebrowser, kots, chainctl, wolfictl, terragrunt, vault...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: polaris, flux-operator-fips, stakater-reloader, victorialogs-fips, cert-manager-fips, grafana-operator, nova, terragrunt, flux-image-reflector-controller, grafana-fips, victoriametrics, flux-helm-controller, aws-load-balancer-controller-fips, grafana-operator-fips,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: kyverno-fips, rclone-fips, cerbos-fips, rancher-fleet-fips, amazon-ssm-agent, seaweedfs-rocksdb-fips, gitaly, gitlab-rails-ce, rclone, terragrunt, grafana-fips, teleport, packer, gitlab-rails-ce-fips, chainloop-cli, syft-fips, flux-fips, argo-cd, telegraf,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: undock, vcluster, opentofu, filebrowser, rancher-fleet, trivy, kubescape-operator, steampipe, zot, k9s, gitleaks, gptscript, terragrunt, envoy-gateway, zarf, trivy-operator, guac, nuclei, grafana-alloy, podman, trufflehog, xeol, nsc, gitness, tflint, terraform...

GO-2024-2698 vulnerabilities

Vulnerabilities for packages: wolfictl, zarf, kots, k9s, nuclei, filebrowser, terragrunt, kubescape...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, victoriametrics, dkron, polaris, steampipe, stakater-reloader, flux-notification-controller, nova, victoriametrics-cluster, podinfo, pluto, terragrunt, flux-image-automation-controller, go, grafana-rollout-operator, metacontroller,...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: opentofu, snyk-cli, trivy, tfsec, steampipe, zot, kots, k9s, task, conftest, terragrunt, syft, wolfictl, trivy-operator, zarf, kubescape, xeol, grype, tflint, terraform...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: malcontent, vcluster, witness, cri-tools, loki, nfpm, dgraph, prometheus, k3s, grafana, gitlab-runner, ollama, opentelemetry-collector-contrib, terragrunt, teleport, eksctl, redpanda, mcp-grafana, rclone, dagger, nuclei, grafana-alloy, lazygit, minio, k8sgpt,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, victoriametrics, dkron, polaris, steampipe, stakater-reloader, flux-notification-controller, nova, victoriametrics-cluster, podinfo, pluto, terragrunt, flux-image-automation-controller, go, grafana-rollout-operator, metacontroller,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cloudnative-pg, osv-scanner, grafana-agent-operator, k3d, ksops, rqlite, vcluster, step-ca, certificate-transparency, opa, trivy, fulcio, k3s, sops, kubernetes-csi-driver-hostpath, zot, kots, restic, ferretdb, step, opentelemetry-collector-contrib...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: syft, argo-cd, external-secrets-operator, rclone, scorecard, rancher-fleet, teleport, terragrunt, gitaly, cerbos, telegraf...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: syft, flux, argo-cd, external-secrets-operator, rclone, scorecard, rancher-fleet, teleport, terragrunt, gitaly, cerbos, telegraf...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: rekor, cortex, grafana-agent-operator, ksops, up, flux-image-reflector-controller, step-ca, timestamp-authority, trivy, boring-registry, flux-kustomize-controller, cosign, fulcio, argo-workflows, tekton-chains, flyte, sops, zot, chezmoi, py3-azure-identity, hugo,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: rekor, oauth2-proxy, gitsign, flux-kustomize-controller, fulcio, cosign, argo-workflows, tekton-chains, sops, aactl, kots, terragrunt, slsa-verifier, dex, spire-server, kubescape, cloudflared, tkn, vexctl, flux-source-controller...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: rekor, oauth2-proxy, skopeo, gitsign, step-ca, timestamp-authority, dgraph, flux-kustomize-controller, cosign, fulcio, argo-workflows, ko, tekton-chains, sops, caddy, zot, aactl, kots, step, rook, falcoctl, terragrunt, gomplate, dex, grpc-health-probe, slsa-verifier,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rekor, k3d, ksops, skopeo, gitsign, crossplane-provider-azure-storage, flux-image-reflector-controller, snyk-cli, step-ca, crossplane-provider-azure-sql, timestamp-authority, actions-runner-controller, scorecard, flux-kustomize-controller, cosign, fulcio,...

CLEANSTART-2026-VK07836 Security fixes in terragrunt-fips 0.94.0-r3

Package terragrunt-fips version 0.94.0-r3 fixes 13 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-XN39304 Security fixes in terragrunt-fips 0.94.0-r1

Package terragrunt-fips version 0.94.0-r1 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-TR90585 Security fixes in terragrunt-fips 0.97.2-r3

Package terragrunt-fips version 0.97.2-r3 fixes 3 vulnerabilities: CVE-2026-34986, ghsa-xmrv-pmrh-hhx2, ghsa-xmrv-pmrh-hhx2...