GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, percona-server-mongodb-operator, mariadb-operator, step-issuer, aws-privateca-issuer, cert-manager-cmctl, opentelemetry-operator, cert-manager-webhook-pdns, cert-manager-csi-driver...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: sqlexporter, jitsucom-bulker, amazon-cloudwatch-agent, cluster-api-aws-controller, opentelemetry-collector-contrib, argo-events, grafana-alloy, splunk-otel-collector, bento...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: mc, jaeger, minio-operator, amazon-cloudwatch-agent-operator, aws-otel-collector, metrics-server, istio, splunk-otel-collector, prometheus, trillian, prometheus-operator, certificate-transparency, datadog-agent, prometheus-pushgateway, k8sgpt, karma,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, policy-controller, aactl, kyverno, teleport, trivy-operator, ratify, kubescape, crossplane, zot, trivy, slsa-verifier...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kubernetes-csi-node-driver-registrar, knative-serving, nri-elasticsearch, mattermost, rancher-fleet, crossplane-provider-aws-kinesis, octo-sts, addon-resizer, flux-image-reflector-controller, rancher, kuberay-operator, conftest,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, trivy-operator, ratify, kubescape, gitsign, policy-controller, ko, kyverno, zarf, tflint, falcoctl, tkn, aactl, tekton-chains, teleport, neuvector-sigstore-interface, crossplane, spire-server, goreleaser, slsa-verifier...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kots, buildah, podman, aactl, kyverno, witness, zarf, falco-no-driver, falcoctl, ratify, kubescape, tekton-chains, gitsign, skopeo, flux-source-controller, slsa-verifier, undock...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: mattermost, crossplane-provider-aws-kinesis, step, melange, flux-image-automation-controller, rancher, splunk-otel-collector, docker, podman, helm, prometheus-operator, flux-notification-controller, pulumi-kubernetes-operator, opentofu, crossplane-provider-aws-eks,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sonobuoy, fuse-overlayfs-snapshotter, mc, mattermost, crossplane-provider-aws-kinesis, spegel, yunikorn-k8shim, step, octo-sts, wgcf, docker-credential-ecr-login, whereabouts, timescaledb-parallel-copy, flux-image-automation-controller, rancher-telemetry,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, policy-controller, tkn, witness, aactl, teleport, falcoctl, gitsign, ratify, zot, goreleaser, flux-source-controller...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, ratify, kubescape, gitsign, sigstore-scaffolding, flux-source-controller, policy-controller, witness, ko, zarf, tflint, falcoctl, zot, gh, tkn, aactl, cosign, tekton-chains, skaffold, docker-cli-buildx, teleport, neuvector-sigstore-interface,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, trivy-operator, ratify, kubescape, gitsign, sigstore-scaffolding, flux-source-controller, docker, policy-controller, witness, ko, kyverno, zarf, tflint, falcoctl, zot, gh, tkn, aactl, buildkitd, cosign, tekton-chains, skaffold, docker-cli-buildx...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, trivy-operator, ratify, kubescape, gitsign, sigstore-scaffolding, rekor, flux-source-controller, docker, policy-controller, witness, ko, zarf, tflint, falcoctl, zot, gh, tkn, aactl, buildkitd, cosign, tekton-chains, skaffold, trivy, teleport,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: harbor-cli, yunikorn-k8shim, nodetaint, wgcf, nri-mysql, kubernetes-dashboard-auth, conftest, migrate, kubeflow-katib, polaris, prometheus-operator, kubernetes-csi-external-health-monitor, opentofu, oauth2-proxy, harbor-registry, cilium-cli, hubble, k3s, kind,...

openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw

A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS Amazon Web Services signature to the /v3/ec2tokens ...

CVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

CVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

USN-8530-2 linux-aws-hwe vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

Malicious code in notafollower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e076dd548fea7ce80a77e7810b30c0a5d95c0b6ae4bf3d929281da70dbec1768 [email protected] declares preinstall and postinstall lifecycle scripts that run inline Node code targeting the AWS EC2 Instance Metadata Service. T...

MAL-2026-13986 Malicious code in notafollower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e076dd548fea7ce80a77e7810b30c0a5d95c0b6ae4bf3d929281da70dbec1768 [email protected] declares preinstall and postinstall lifecycle scripts that run inline Node code targeting the AWS EC2 Instance Metadata Service. T...