GO-2026-5039 vulnerabilities

Vulnerabilities for packages: promxy, atlantis, crossplane-provider-aws-route53, kubeflow-katib, redka, kube-bench, runc, tigera-operator, ctop, buildah, kaniko, docker-credential-acr-env, gomplate, manifest-tool, flux, vertical-pod-autoscaler, volume-modifier-for-k8s, argo-rollouts, terragrunt,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubeflow-katib, cfssl, redka, runc, kube-bench, nri-mongodb, ctop, wave, bom, cilium-cli, manifest-tool, terraform-provider-time, redis-operator, vertical-pod-autoscaler, pgtimetable, volume-modifier-for-k8s, blobfuse2,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, crossplane-provider-azure, bank-vaults, timestamp-authority, fulcio, tkn, flux-helm-controller, pulumi, gomplate, flux, policy-controller, scorecard, src-fingerprint, zot, terragrunt, rook, crossplane-provider-azure-storage,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubewatch, nfs-subdir-external-provisioner, metacontroller, nova, envoy-ratelimit, dkron, flux-helm-controller, oras, dataplaneapi, mountpoint-s3-csi-driver, volume-modifier-for-k8s, flux, tailscale, victoriametrics-cluster,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, redka, ctop, buildah, cilium-cli, vertical-pod-autoscaler, volume-modifier-for-k8s, kubernetes-dashboard, prometheus-adapter, vale, timescaledb-parallel-copy, kapp, github-mcp-server, dask-gateway, crossplane, dfc,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns-fips, crossplane-provider-aws-iam, q, flux-image-automation-controller-fips, external-secrets-operator, kubescape-server-fips, crossplane-provider-aws-s3, cluster-api-fips, crossplane-provider-aws-firehose-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: redka, ctop, nvidia-container-toolkit, kubernetes-dashboard, prometheus-adapter, kapp, github-mcp-server, dask-gateway, dfc, actions-runner-controller, podinfo, spqr, db-operator, kube-vip-cloud-provider, kuberlr, k8ssandra-client, mesosphere-vsphere-csi, mkcert,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, cfssl, ollama, buildah, vertical-pod-autoscaler, volume-modifier-for-k8s, kubernetes-dashboard, prometheus-adapter, kapp, crossplane, actions-runner-controller, spqr, cert-manager-istio-csr, kuberlr, aws-s3-controller,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, cfssl, ollama, buildah, vertical-pod-autoscaler, volume-modifier-for-k8s, kubernetes-dashboard, prometheus-adapter, kapp, crossplane, actions-runner-controller, spqr, cert-manager-istio-csr, kuberlr, aws-s3-controller,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, cfssl, redka, ctop, buildah, elvish, vertical-pod-autoscaler, volume-modifier-for-k8s, kubernetes-dashboard, prometheus-adapter, kapp, crossplane, go-bindata, actions-runner-controller, spqr, cert-manager-istio-csr,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, cfssl, redka, ctop, buildah, elvish, vertical-pod-autoscaler, volume-modifier-for-k8s, kubernetes-dashboard, prometheus-adapter, kapp, crossplane, go-bindata, actions-runner-controller, spqr, cert-manager-istio-csr,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, atlantis, kubeflow-katib, promxy, kaniko, gomplate, flux, argo-rollouts, terragrunt, openfga, temporal-server, crossplane-provider-azure-authorization, splunk-otel-collector, spire-server, aws-eks-pod-identity-agent,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, cfssl, redka, ctop, elvish, vertical-pod-autoscaler, volume-modifier-for-k8s, prometheus-adapter, kapp, dask-gateway, go-bindata, actions-runner-controller, kuberlr, k8ssandra-client, flux-notification-controller, kubewatch, mkcert,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-iam, prometheus-elasticsearch-exporter, capslock, kpt, node-problem-detector, hugo-extended, configmap-reload, kubernetes, bank-vaults, protoc-gen-go-grpc, gomplate, helm-operator-fips, supercronic, cloud-sql-proxy-fips, kubescape,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: kaniko, flux-notification-controller, crossplane-provider-aws-firehose, crossplane-provider-aws-iam, goreleaser, crossplane-provider-aws-ec2, actions-runner-controller, tkn, flux-kustomize-controller, sops, zarf, cosign-fips, crossplane-provider-aws-s3, gitsign,...