GO-2024-3286 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, nodetaint, kubeflow-pipelines, kubernetes-dns-node-cache, k8s-device-plugin, aws-efs-csi-driver, argocd-image-updater, ip-masq-agent...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: zot, portieris, kots, gitness, argocd-image-updater, envoy-gateway...

GO-2025-3437 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: zot, portieris, kots, gitness, argocd-image-updater, envoy-gateway...

GO-2025-3934 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, zot, go-licenses, kots, nuclei, tfsec, grype, gitea, guac, pulumi, crossplane, k8sgpt, osv-scanner, scorecard, zarf, argo-workflows, k9s, melange, kargo, gptscript, wolfictl, trivy, syft, grafana-alloy, flux-image-automation-controller, snyk-cli...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, zot, go-licenses, kots, nuclei, tfsec, grype, gitea, guac, pulumi, crossplane, k8sgpt, osv-scanner, scorecard, zarf, argo-workflows, k9s, melange, kargo, gptscript, wolfictl, trivy, syft, grafana-alloy, flux-image-automation-controller, snyk-cli...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, zot, nfpm, kots, nuclei, rancher-fleet, tfsec, grype, gitlab-runner, gitea, guac, pulumi, crossplane, zarf, osv-scanner, scorecard, argo-workflows, k9s, melange, kargo, gptscript, argo-cd, wolfictl, trivy, syft, xeol, grafana-alloy,...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3720 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kubescape-operator, knative-eventing, tetragon, rekor, crossplane-provider-family-azure, crossplane-provider-aws-route53, rancher-fleet, sftpgo-plugin-auth, omnibump, crossplane-provider-aws-rds, continuity, promxy, container-object-storage-interface,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: aactl, bom, kubernetes-dashboard, kpt, argocd-image-updater...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, crossplane-provider-aws-route53, kine, crossplane-provider-aws-rds, grype, crossplane-provider-keycloak, cert-manager, gatus, melange, cosign, mods, wal-g, wolfictl, crossplane-provider-aws-eks, crossplane-provider-aws-dynamodb, syft...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: git-lfs, cert-manager-istio-csr, dex, kubescape-operator, tetragon, kine, sftpgo-plugin-auth, postgres-operator, crossplane-provider-aws-rds, yunikorn-k8shim, container-object-storage-interface, kubernetes-csi-external-attacher, kapp, cert-manager-cmctl, gatus,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: dex, kind, portieris, yunikorn-k8shim, kapp, wire-go, nri-mysql, libnvidia-container, rabbitmq-cluster-operator, cni-plugins, wait-for-port, wal-g, helm-push, spire-controller-manager, aws-privateca-issuer, cloud-provider-gcp-cloud-controller-manager, kuberlr,...

CVE-2026-48046

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote...

CVE-2026-48046 Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote...