GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, kube-logging-operator-custom-runner, flyte, kubernetes-csi-external-snapshotter, terragrunt, ctop, kubernetes-event-exporter, q, sftpgo-plugin-pubsub, azcopy, fuse-overlayfs-snapshotter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, volume-modifier-for-k8s, whereabouts, kube-logging-operator-custom-runner, crossplane-provider-aws-iam, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, ctop, kubernetes-event-exporter, maru, sftpgo-plugin-pubsub,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, flux, rekor, kargo, k3s, ksops, tkn, terragrunt, vexctl, kubernetes-event-exporter, grafana-mimir, gitsign, actions-runner-controller, sigstore-scaffolding, flux-kustomize-controller, src-fingerprint, bank-vaults, gomplate,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, smarter-device-manager, volume-modifier-for-k8s, flux, secrets-store-csi-driver-provider-aws, hubble, supercronic, victoriametrics-cluster, clickhouse-operator, dbmate, nova, dataplaneapi, sftpgo-plugin-eventsearch, actions-runner-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: trivy, nsc, supercronic, external-dns, kubernetes-dashboard-metrics-scraper, kbld, nri-f5, php-fpmexporter, zot, rook, spire-server, kubernetes-csi-driver-nfs, cosign, grafana-agent-operator, nginx-prometheus-exporter, mailpit, dask-gateway, nri-elasticsearch,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-events-fips, crossplane-provider-aws-eks, crossplane-provider-family-azure, pulumi, boring-registry, openbao, cert-manager-cmctl, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-eks-fips, crossplane-provider-aws-route53-fips, wolfictl,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, nsc, supercronic, external-dns, kubernetes-dashboard-metrics-scraper, kserve, spicedb, kbld, go-jsonnet, metrics-server, nri-f5, php-fpmexporter, prometheus-alertmanager, spire-server, kubernetes-csi-driver-nfs,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: tflint, trivy, ollama, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper, spicedb, kbld, metrics-server, zot, prometheus-alertmanager, spire-server, kubernetes-csi-driver-nfs, yq, falcosidekick, grafana-agent-operator, nginx-prometheus-exporter,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: tflint, trivy, ollama, crossplane-provider-aws-s3, kubernetes-dashboard-metrics-scraper, spicedb, kbld, metrics-server, zot, prometheus-alertmanager, spire-server, kubernetes-csi-driver-nfs, yq, falcosidekick, grafana-agent-operator, nginx-prometheus-exporter,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: tflint, supercronic, trivy, kubernetes-dashboard-metrics-scraper, kbld, metrics-server, nri-f5, zot, prometheus-alertmanager, spire-server, kubernetes-csi-driver-nfs, yq, falcosidekick, grafana-agent-operator, nginx-prometheus-exporter, mailpit, nri-elasticsearch,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: tflint, supercronic, trivy, kubernetes-dashboard-metrics-scraper, kbld, metrics-server, nri-f5, zot, prometheus-alertmanager, spire-server, kubernetes-csi-driver-nfs, yq, falcosidekick, grafana-agent-operator, nginx-prometheus-exporter, mailpit, nri-elasticsearch,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: tempo, kargo, flyte, terragrunt, vexctl, op-geth, sftpgo-plugin-pubsub, trivy, azcopy, thanos, sigstore-scaffolding, kubernetes, sqlexporter, weaviate, traefik, sftpgo-plugin-kms, zot, argo-workflows, rook, kubescape, flux-image-automation-controller, gitness, glab,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: tflint, nsc, supercronic, kubernetes-dashboard-metrics-scraper, kserve, kbld, metrics-server, nri-f5, php-fpmexporter, prometheus-alertmanager, spire-server, yq, cosign, falcosidekick, nginx-prometheus-exporter, dask-gateway, dockerize, mage, nuclei,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, cert-exporter-fips, boring-registry, nfs-subdir-external-provisioner-fips, helm-operator, docker-compose, kustomize, vexctl, sigstore-scaffolding-fips, secrets-store-csi-driver-provider-gcp, nri-prometheus, zot, cilium,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: slsa-verifier, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, scorecard, crossplane-provider-aws-cloudfront, skaffold, apko, spire-server, crossplane-provider-aws-lambda, pulumi, boring-registry, gitness, grype,...