GO-2026-5039 vulnerabilities

Vulnerabilities for packages: promxy, kiali, nri-mssql, opentofu, src-fingerprint, prometheus-adapter, kubernetes-csi-node-driver-registrar, delve, rancher, crossplane-provider-aws-dynamodb, neuvector-scanner, opa-envoy, terragrunt, harbor-registry, pulumi-kubernetes-operator, cass-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k8sgateway, rabbitmq-messaging-topology-operator, bom, minio-object-browser, flux-image-automation-controller, nri-postgresql, opencost, opentofu, src-fingerprint, terraform, wgcf, dex, kube-vip-cloud-provider, crossplane-provider-aws-dynamodb, git-lfs, external-dns,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, actions-runner-controller, crossplane-provider-azure-sql, flux, flux-image-automation-controller, falcoctl, kargo, scorecard, src-fingerprint, terraform, opentelemetry-collector, guac, gh, pulumi, skopeo, zarf,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: osv-scanner, victoriametrics, github-mcp-server, nfs-subdir-external-provisioner, mountpoint-s3-csi-driver, rabbitmq-messaging-topology-operator, actions-runner-controller, nova, flux, flux-image-automation-controller, go, karpenter, supercronic,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: etcd, opencost, supercronic, newrelic-k8s-metadata-injection, kafka-proxy, neuvector-scanner, hey, envoy-ratelimit, sriov-network-device-plugin, zot, fluxcd-kustomize-mutating-webhook, tkn, hugo-extended, clickhouse-operator, ghaudit, kyverno-notation-aws,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: helm-diff, terragrunt, crossplane-provider-aws-s3, pulumi-language-java, buildkitd-fips, livekit-cli, argocd-image-updater-fips, flux-notification-controller, gomplate-fips, gptscript, actions-runner-controller, cilium-cli, crossplane-provider-aws-efs,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubecolor, etcd, opencost, supercronic, newrelic-k8s-metadata-injection, kafka-proxy, hey, kube-metrics-adapter, gogatekeeper, rancher-system-agent, nri-cassandra, sriov-network-device-plugin, buildkitd, hugo-extended, gitlab-pages,...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: velero-plugin-for-csi, opencost, newrelic-k8s-metadata-injection, kafka-proxy, crossplane-provider-aws-dynamodb, neuvector-scanner, hey, cass-operator, crossplane-provider-aws-sns, kube-metrics-adapter, rancher-system-agent, envoy-ratelimit,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-csi, opencost, newrelic-k8s-metadata-injection, kafka-proxy, crossplane-provider-aws-dynamodb, neuvector-scanner, hey, cass-operator, crossplane-provider-aws-sns, kube-metrics-adapter, rancher-system-agent, envoy-ratelimit,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kubecolor, velero-plugin-for-csi, opencost, supercronic, gosu, neuvector-scanner, hey, cass-operator, kube-metrics-adapter, nri-cassandra, sriov-network-device-plugin, zot, buildkitd, tkn, flux-kustomize-controller, kyverno-notation-aws, ghaudit, velero-plugin-for-aw...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kubecolor, velero-plugin-for-csi, opencost, supercronic, gosu, neuvector-scanner, hey, cass-operator, kube-metrics-adapter, nri-cassandra, sriov-network-device-plugin, zot, buildkitd, tkn, flux-kustomize-controller, kyverno-notation-aws, ghaudit, velero-plugin-for-aw...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: promxy, openbao, openfga, flux-image-automation-controller, falcoctl, opencost, opentofu, thanos, opentelemetry-collector, opentelemetry-operator, terragrunt, harbor-registry, rclone, pulumi-kubernetes-operator, rook, kube-metrics-adapter, flyte, oauth2-proxy, kine,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: mockgen, kubecolor, velero-plugin-for-csi, supercronic, kafka-proxy, gosu, neuvector-scanner, hey, kubernetes-release, cass-operator, kube-metrics-adapter, nri-cassandra, flux-kustomize-controller, ghaudit, velero-plugin-for-aws, mage,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: terragrunt, vault-k8s, cilium-cli, local-path-provisioner, cortex, melange, grpc-health-probe, dex, bank-vaults-fips, kubewatch, grype, flux-kustomize-controller, oauth2-proxy, tkn, supercronic, k3d, scorecard, crossplane-provider-aws-dynamodb,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: flux, crossplane-provider-aws-elasticache, pulumi, terragrunt, crossplane-provider-aws-s3, pulumi-language-java, crossplane-provider-aws-ec2, gitness, flux-notification-controller, tekton-chains, actions-runner-controller, gitsign, skaffold,...