GO-2026-5039 vulnerabilities

Vulnerabilities for packages: delve, stakater-reloader, cert-exporter, guac, crossplane-provider-aws-sns, authservice, crossplane-provider-aws-cloudformation, db-operator, octo-sts, sealed-secrets, terraform-provider-acme, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: stakater-reloader, guac, crossplane-provider-aws-sns, rancher-system-upgrade-controller, minio-object-browser, authservice, crossplane-provider-aws-cloudformation, db-operator, juicefs, octo-sts, opencost, sealed-secrets, wgcf, flux-notification-controller, kubeflow,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: gitsign, guac, src-fingerprint, vexctl, glab, crossplane-provider-azure, ksops, flux-notification-controller, crossplane-provider-azure-managedidentity, goreleaser, neuvector-sigstore-interface, flux-kustomize-controller, snyk-cli, sigstore-scaffolding,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: stakater-reloader, smokescreen, polaris, grafana-rollout-operator, flux-notification-controller, goreleaser, victoriametrics-cluster, dataplaneapi, supercronic, dgraph, flux-image-reflector-controller, external-secrets-operator, envoy-ratelimit, osv-scanner, go,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: stakater-reloader, rancher-system-upgrade-controller, smokescreen, opencost, kubernetes-dashboard-auth, crossplane-provider-azure-managedidentity, docker-machine-driver-harvester, dgraph, kbld, rancher-fleet, crossplane-provider-keycloak, envconsul, migrate, dockeriz...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: flux-source-controller, grafana-alloy-fips, helm-diff-fips, buildkitd-fips, helm-push, gitlab-operator-fips, src-fingerprint-fips, terraform-provider-pagerduty, packer, wolfictl, gitlab-runner-fips, crossplane-provider-aws-cloudfront-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: stakater-reloader, guac, nvidia-container-toolkit, rancher-system-upgrade-controller, opencost, kubernetes-dashboard-auth, dgraph, kbld, rancher-fleet, crossplane-provider-keycloak, nri-memcached, migrate, helm-docs, nuclei, sftpgo-plugin-eventstore, gomplate,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: guac, opencost, kubernetes-dashboard-auth, terraform-provider-acme, crossplane-provider-azure-managedidentity, docker-machine-driver-harvester, dgraph, kbld, crossplane-provider-keycloak, dockerize, eksctl, nuclei, crossplane-provider-azure-authorization,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: guac, opencost, kubernetes-dashboard-auth, terraform-provider-acme, crossplane-provider-azure-managedidentity, docker-machine-driver-harvester, dgraph, kbld, crossplane-provider-keycloak, dockerize, eksctl, nuclei, crossplane-provider-azure-authorization,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: guac, opencost, kubernetes-dashboard-auth, terraform-provider-acme, crossplane-provider-azure-managedidentity, dgraph, kbld, crossplane-provider-keycloak, nri-memcached, dockerize, helm-docs, aws-signer-notation-plugin, crossplane-provider-azure-authorization,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: guac, opencost, kubernetes-dashboard-auth, terraform-provider-acme, crossplane-provider-azure-managedidentity, dgraph, kbld, crossplane-provider-keycloak, nri-memcached, dockerize, helm-docs, aws-signer-notation-plugin, crossplane-provider-azure-authorization,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: gitsign, guac, opencost, octo-sts, filebrowser, kubernetes-dashboard-auth, flux-notification-controller, argo-rollouts, crossplane-provider-azure-managedidentity, azcopy, dgraph, kubeflow-katib, splunk-otel-collector, chezmoi, crossplane, thanos, eksctl,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: stakater-reloader, kubernetes-dashboard-auth, kbld, crossplane-provider-keycloak, dockerize, helm-docs, aws-signer-notation-plugin, kustomize, nuclei, sftpgo-plugin-eventstore, xcaddy, kube-metrics-adapter, nodetaint, lvm-driver, spiffe-helper, sonobuoy, wazero, yace...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: flux-source-controller, grpc-health-probe, sonobuoy, tekton-chains, secrets-store-csi-driver-provider-gcp, actions-runner-controller, eksctl, crossplane-provider-aws-s3, grafana-operator, hubble-fips, helm, hubble, caddy, osv-scanner, kpt,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-kustomize-controller, syft, terraform-provider-google, crossplane-provider-aws-lambda, argo-workflows, kaniko, tkn, crossplane-provider-aws-kinesis, apko, crossplane-provider-aws-firehose, rclone, skaffold, crossplane-provider-aws-kms,...