GO-2024-2554 vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy, zarf, zot, kubescape, k9s, kots, up, chartmuseum, helm-push, flux-helm-controller, k8sgpt, helm-operator, flux-source-controller, kubevela, eksctl...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy, zarf, zot, kubescape, k9s, kots, up, chartmuseum, helm-push, flux-helm-controller, k8sgpt, helm-operator, flux-source-controller, kubevela, eksctl...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: helm, bom, melange, up, ko, ctop, apko...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: helm, bom, melange, up, ko, ctop, apko...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: helm, bom, melange, up, ko, ctop, apko...

GO-2023-2048 vulnerabilities

Vulnerabilities for packages: k3s, up, ctop...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, trivy, zarf, cilium-cli, helm-operator, k8sgpt, k9s, chartmuseum, flux-helm-controller, zot, kubescape, eksctl, helm-push, kubevela, up...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, trivy, zarf, cilium-cli, helm-operator, k8sgpt, k9s, chartmuseum, flux-helm-controller, zot, kubescape, eksctl, helm-push, kubevela, up...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: k3s, buildkitd, prometheus-adapter, kubernetes, caddy, up, kubevela...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: flux-source-controller, grype, flux-helm-controller, kaniko, fuse-overlayfs-snapshotter, newrelic-infrastructure-agent, up, melange, zot, kubescape, trivy, skaffold, cilium-cli, k8sgpt, ctop, gitness, eksctl, kots, buildkitd, k3d, helm, helm-push, kubevela...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: bom, ko, ctop, melange, apko, up, helm...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: bom, ko, ctop, melange, apko, up, helm...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: bom, ko, ctop, melange, apko, up, helm...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-source-controller, harbor-registry, policy-controller, secrets-store-csi-driver-provider-azure, grafana-agent-operator, flux-kustomize-controller, grafana-mimir, wal-g, tkn, falcoctl, spire-server, fluent-bit-plugin-loki, fulcio, sigstore-scaffolding, pulumi,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: grype, tkn, spire-server, kaniko, wolfictl, crossplane, syft, up, docker-compose, kargo, melange, zot, kubescape, trivy, ko, dagger, cilium-cli, conftest, ctop, buf, aactl, buildkitd, cadvisor...

CVE-2026-61967

Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...

DEBIAN-CVE-2026-73620

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout and TagReference.create, allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band...

CVE-2026-16538

CVE-2026-16538 affects the Wallet for WooCommerce WordPress plugin prior to 1.6.10. The root issue is that the top-up processing does not verify the amount collected before crediting the user’s wallet balance, enabling a wallet balance inflation by topping up with less than the intended value. Do...

CVE-2026-16538 TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

CVE-2026-68396

In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsischeduleeh Drivers which use the scsischeduleeh function to run the error handler currently risk the error handler thread never waking once all commands are timed out or inactive. There...