GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, cluster-api, crossplane-provider-aws-route53, ctop, terraform-provider-acme, kubo, tofu-controller, sftpgo-plugin-pubsub, docker-machine-driver-harvester, tekton-pipelines, kube-vip, chisel, crossplane-provider-azure-managedidentity, ksops,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ctop, kuberlr, kubo, tofu-controller, sftpgo-plugin-pubsub, yace, external-dns, lvm-driver, chisel, ksops, osv-scanner, vale, flux-kustomize-controller, crossplane-provider-aws-s3, scorecard, blobfuse2, gke-gcloud-auth-plugin, kubernetes-replicator, rancher-telemetry...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: glab, gitsign, crossplane-provider-azure-authorization, opentelemetry-collector, sigstore-scaffolding, argo-events, flux-notification-controller, fulcio, terraform-provider-azurerm, crossplane-provider-azure, crossplane-provider-azure-managedidentity, ksops, gomplate...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: dbmate, local-path-provisioner, victoriametrics-cluster, external-secrets-operator, grafana-rollout-operator, apko, karpenter, flux-notification-controller, dkron, newrelic-infra-operator, tailscale, victoriametrics, osv-scanner, pluto, actions-runner-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, yace, vendir, chisel, osv-scanner, aws-s3-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, cluster-api-ipam-provider-in-cluster, gitlab-kas, lazygit, aws-flb-cloudwatch,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, crossplane-provider-aws-cloudformation-fips, crossplane-provider-azure-storage, cg, kubescape-server-fips, buildkitd-fips, snyk-cli, gitea, terragrunt, opentofu-fips, grafana, kyverno-fips, rancher-fleet, helm-diff, trivy-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, thanos, chisel, osv-scanner, scorecard, gops, gitlab-kas, aws-flb-cloudwatch, nri-f5, slsa-verifier, glow, terraform-provider-random, ip-masq-agent, cluster-api-aws-controller, go-licenses, harbor-registry, percona-server-mongodb-operator,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, thanos, zarf, flux-kustomize-controller, aws-s3-controller, scorecard, flux-source-controller, crossplane-provider-sql, vertical-pod-autoscaler, slsa-verifier, glow, terraform-provider-random, ip-masq-agent,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-route53, thanos, zarf, flux-kustomize-controller, aws-s3-controller, scorecard, flux-source-controller, crossplane-provider-sql, vertical-pod-autoscaler, slsa-verifier, glow, terraform-provider-random, ip-masq-agent,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: yace, flux-kustomize-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, aws-flb-cloudwatch, nri-f5, slsa-verifier, terraform-provider-random, ip-masq-agent, flyte, kyverno-notation-aws, go-licenses,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: yace, flux-kustomize-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, aws-flb-cloudwatch, nri-f5, slsa-verifier, terraform-provider-random, ip-masq-agent, flyte, kyverno-notation-aws, go-licenses,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, thanos, crossplane-provider-azure-managedidentity, ksops, zarf, flux-kustomize-controller, scorecard, zot, grafana-alloy, flux-source-controller, opentofu, oauth2-proxy, boring-registry, falcosidekick, k8sgpt, terraform, flyte,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, yace, thanos, vendir, osv-scanner, flux-kustomize-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, gops, aws-flb-cloudwatch, nri-f5, slsa-verifier, glow, ip-masq-agent,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, kube-state-metrics, crossplane-provider-aws-cloudwatchlogs, aws-ebs-csi-driver, aws-efs-csi-driver-fips, up, flannel, tekton-chains, spicedb, cert-exporter-fips, prometheus-node-exporter-fips, thanos, kiam, logstash-exporter-fips,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: cosign, syft, terragrunt, crossplane-provider-family-aws, pulumi-language-yaml, crossplane-provider-aws-s3, pulumi-language-java, crossplane-provider-aws-cloudwatchlogs, falcoctl-fips, crossplane-provider-aws-elasticache, tkn, crossplane-provider-aws-ec2,...