GO-2026-5039 vulnerabilities

Vulnerabilities for packages: apache-exporter, azure-workload-identity-webhook, cloud-provider-azure, buildah, kubevela, skopeo, gomplate, cluster-api, docker-machine-driver-linode, aws-efs-csi-driver, nova, redka, cloud-sql-proxy, argo-events, kapp-controller, crossplane-provider-aws-sns,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, apache-exporter, azure-workload-identity-webhook, k8sgateway, opencost, opensearch-k8s-operator, helm-set-status, docker-machine-driver-linode, spire-controller-manager, kubernetes-dns-node-cache, redka, blobfuse2, esbuild,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, kubernetes-event-exporter, cosign, kubevela, gh, rook, scorecard, skopeo, zot, falcoctl, glab, gomplate, step-ca, flux-kustomize-controller, sigstore-scaffolding, flux-image-automation-controller, guac, argo-events, buildkitd,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, victoriametrics, gh, smarter-device-manager, fluxcd-kustomize-mutating-webhook, dataplaneapi, stakater-reloader, omnibump, karpenter, github-mcp-server, nova, envoy-ratelimit, flux-image-automation-controller, oras, dbmate, tailscale,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, buildah, cue, docker-machine-driver-linode, github-mcp-server, nova, spire-controller-manager, podman, nri-kafka, knative-eventing, boring-registry, net-kourier, configmap-reload, mongo-tools, pgtimetable, hugo, kubebuilder,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, gomplate, guac, ratify-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-elasticache-fips, pulumi, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-cloudfront, docker-fips, opentofu, atlantis,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: github-mcp-server, nova, spire-controller-manager, go-jsonnet, podman, nri-kafka, boring-registry, octo-sts, mongo-tools, pgtimetable, hugo, kubebuilder, kubernetes-csi-external-health-monitor, terraform-docs, kube-logging-operator-custom-runner, pluto,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: flux-notification-controller, buildah, cue, skopeo, docker-machine-driver-linode, spire-controller-manager, podman, nri-kafka, crossplane-provider-aws-sns, crossplane-provider-aws-dynamodb, fq, octo-sts, mongo-tools, crossplane-provider-aws-ec2, xeol,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, buildah, cue, skopeo, docker-machine-driver-linode, spire-controller-manager, podman, nri-kafka, crossplane-provider-aws-sns, crossplane-provider-aws-dynamodb, fq, octo-sts, mongo-tools, crossplane-provider-aws-ec2, xeol,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, ini-file, buildah, skopeo, spire-controller-manager, nri-kafka, fq, octo-sts, mongo-tools, pgtimetable, pluto, nri-elasticsearch, kapp, wgcf, maru, secrets-store-csi-driver-provider-gcp, guac, tailscale, helm-docs, policy-controller,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: flux-notification-controller, ini-file, buildah, skopeo, spire-controller-manager, nri-kafka, fq, octo-sts, mongo-tools, pgtimetable, pluto, nri-elasticsearch, kapp, wgcf, maru, secrets-store-csi-driver-provider-gcp, guac, tailscale, helm-docs, policy-controller,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, zot, opencost, gomplate, gitea, buildkitd, boring-registry, octo-sts, mongo-tools, hydra, eksctl, grafana-alloy, xeol, ksops, flux, terraform-provider-azurerm, aws-eks-pod-identity-agent, dgraph, opentofu, weaviate, jitsucom-bulker,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: flux-notification-controller, ini-file, skopeo, spire-controller-manager, podman, fq, boring-registry, octo-sts, configmap-reload, terraform-docs, pluto, kapp, wgcf, secrets-store-csi-driver-provider-gcp, helm, stakater-reloader, nsc, temporal-ui-server,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: gomplate, pulumi, dex, certificate-transparency, dgraph, kubernetes-dashboard-fips, prometheus-pushgateway-fips, gotenberg, atlantis-fips, grpcurl, terragrunt, cloud-sql-proxy-fips, temporal-fips, newrelic-infrastructure-agent, terraform-provider-sendgrid-fips,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, pulumi-language-java, gomplate, actions-runner-controller, crossplane-provider-aws-eks, gitsign, pulumi, spire-server, apko, crossplane-provider-aws-cloudfront, scorecard, syft, crossplane-provider-aws-cloudformation,...