GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trino, net-kourier, docker-machine-driver-linode, opa, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, crossplane-provider-azure-storage, spire-server, kubeflow-pipelines, k3s, node-problem-detector, xeol, flux-image-reflector-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: gitleaks, docker-machine-driver-linode, lvm-driver, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, spire-server, xeol, kubeflow-pipelines, k3s, restic, wgcf, sriov-network-device-plugin, grafana-operator, kubernetes-csi-external-attacher,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, snyk-cli, k3d, rook, src-fingerprint, aactl, crossplane-provider-azure-storage, gh, spire-server, k3s, zot, flux-image-reflector-controller, kubernetes-event-exporter, terragrunt, ksops, gitsign, neuvector-sigstore-interface, nuclei,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: karpenter, mariadb-operator, kubewatch, newrelic-infra-operator, gh, spire-server, secrets-store-csi-driver-provider-aws, dataplaneapi, dgraph, metacontroller, supercronic, volume-modifier-for-k8s, stakater-reloader, flux-image-reflector-controller, grafana-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mariadb-operator, k3s, weaviate, wgcf, flux-image-reflector-controller, opentofu, swagger, knative-operator, dive, tailscale, kargo, prometheus-operator, nodetaint, step, custom-pod-autoscaler, libnvidia-container, direnv, smokescreen, hugo, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, gomplate-fips, cerbos-fips, crossplane-provider-keycloak, trufflehog-fips, argo-rollouts-fips, crossplane-provider-aws-cognitoidentity, external-secrets-operator, buildkitd, atlantis, ratify, docker-fips, skaffold,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: opa, k3s, restic, flux-image-reflector-controller, petname, opentofu, op-geth, hydra, terraform-provider-azurerm, dive, tailscale, kargo, prometheus-operator, rootlesskit, nodetaint, custom-pod-autoscaler, hugo, prometheus-adapter, kubernetes-csi-external-provisioner...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: opa, crossplane-provider-aws-cloudfront, k3s, restic, weaviate, flux-image-reflector-controller, opentofu, azcopy, op-geth, hydra, terraform-provider-azurerm, dive, tailscale, kargo, rootlesskit, nodetaint, step, crossplane-provider-aws-ec2, prometheus-adapter,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: opa, crossplane-provider-aws-cloudfront, k3s, restic, weaviate, flux-image-reflector-controller, opentofu, azcopy, op-geth, hydra, terraform-provider-azurerm, dive, tailscale, kargo, rootlesskit, nodetaint, step, crossplane-provider-aws-ec2, prometheus-adapter,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: opa, k3s, restic, wgcf, flux-image-reflector-controller, petname, opentofu, azcopy, swagger, tailscale, rootlesskit, nodetaint, step, libnvidia-container, direnv, linkerd2-proxy-init, cargobump, prometheus-adapter, cluster-proportional-autoscaler,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: opa, k3s, restic, wgcf, flux-image-reflector-controller, petname, opentofu, azcopy, swagger, tailscale, rootlesskit, nodetaint, step, libnvidia-container, direnv, linkerd2-proxy-init, cargobump, prometheus-adapter, cluster-proportional-autoscaler,...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: trivy, crossplane-provider-azure-storage, spire-server, xeol, k3s, restic, weaviate, zot, flux-image-reflector-controller, terragrunt, opentofu, azcopy, op-geth, scorecard, openfga, hydra, terraform-provider-azurerm, kargo, step, pulumi-kubernetes-operator, octo-sts,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: restic, wgcf, petname, swagger, dive, prometheus-operator, nodetaint, direnv, linkerd2-proxy-init, prometheus-adapter, git-lfs, hello-world-golang, nri-cassandra, crossplane-provider-aws, supercronic, litestream, atlantis, croc, mage, govulncheck, cortex, kafka-proxy...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, atlantis, kubewatch, nats, terraform-docs, slsa-verifier, crossplane-provider-aws-rds, gitness, metacontroller, kubescape, scorecard, caddy-fips, cass-operator-fips, temporal-fips, dex, falcoctl-fips, minio, k9s, boring-registry, grype,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: tkn, boring-registry, kubevela, sops, grype, crossplane-provider-aws-cloudformation, cosign, pulumi-language-dotnet, zot, goreleaser, flux-kustomize-controller, crossplane-provider-aws-ec2, pulumi-kubernetes-operator, actions-runner-controller, skaffold, zarf,...