GO-2023-2170 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

GO-2025-4188 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, docker-credential-gcr, newrelic-nri-statsd, gostatsd, neuvector-dbgen, terraform-provider-google, go-discover, php-fpmexporter, kpt, src-fingerprint, sonobuoy, kube-fluentd-operator, kubeflow, hello-world-golang, aws-flb-firehose, aws-flb-kinesis,...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: telegraf, minio, keda, datadog-agent, minio-object-browser, mcp-grafana, loki, tempo, grafana-pyroscope, cloud-sql-proxy, karma, istio, splunk-otel-collector, certificate-transparency, trillian, jaeger, aws-otel-collector, mc, prometheus-pushgateway, minio-operator...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer, step-issuer, mariadb-operator, opentelemetry-operator, cert-manager-csi-driver, cert-manager-webhook-pdns...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: prometheus-operator, minio, prometheus, keda, datadog-agent, amazon-cloudwatch-agent-operator, loki, tempo, fluent-bit-plugin-loki, node-problem-detector, grafana, metrics-server, cloud-sql-proxy, karma, istio, splunk-otel-collector, certificate-transparency, k8sgpt,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, argo-events, amazon-cloudwatch-agent, splunk-otel-collector, grafana-alloy, sqlexporter, cluster-api-aws-controller, opentelemetry-collector-contrib, bento...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: envconsul, temporal-ui-server, promxy, prometheus, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, cilium, traefik, crossplane-provider-aws-memorydb, nri-haproxy, trino, kube-logging-operator-custom-runner, kube-bench, kubeflow-pipelines,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy-operator, policy-controller, zot, ratify, aactl, teleport, trivy, kyverno-notation-aws, kubescape, kyverno, slsa-verifier, crossplane...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: witness, tekton-chains, falcoctl, kots, ratify, aactl, gitsign, kubescape, kyverno-notation-aws, skopeo, podman, kyverno, zarf, slsa-verifier, buildah, undock, flux-source-controller...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, teleport, tekton-chains, tflint, ko, falcoctl, tkn, kubescape, goreleaser, zarf, policy-controller, ratify, aactl, gitsign, neuvector-sigstore-interface, spire-server, slsa-verifier, crossplane, trivy-operator, kyverno...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, prometheus, flux-kustomize-controller, crossplane-provider-aws-cloudfront, nuclei, cilium, traefik, crossplane-provider-aws-memorydb, chezmoi, nerdctl, sealed-secrets, argo-events, crossplane-provider-keycloak, pulumi-language-yaml,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, teleport, tekton-chains, tflint, ko, zot, falcoctl, tkn, kubescape, goreleaser, witness, zarf, policy-controller, skaffold, ratify, aactl, gitsign, neuvector-sigstore-interface, spire-server, crossplane, cosign, vexctl, docker-cli-buildx, gh,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: policy-controller, zot, falcoctl, tkn, ratify, aactl, gitsign, kyverno-notation-aws, kyverno, goreleaser, witness, teleport, flux-source-controller...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy, kyverno-notation-aws, teleport, tekton-chains, tflint, ko, zot, falcoctl, tkn, kubescape, goreleaser, witness, zarf, policy-controller, skaffold, ratify, aactl, gitsign, buildkitd, docker, neuvector-sigstore-interface, spire-server, slsa-verifier, crossplane,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-redis, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: rekor, trivy, kyverno-notation-aws, teleport, tekton-chains, tflint, ko, zot, falcoctl, tkn, kubescape, goreleaser, witness, zarf, policy-controller, skaffold, ratify, aactl, gitsign, buildkitd, docker, neuvector-sigstore-interface, spire-server, slsa-verifier,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: envconsul, nri-redis, prometheus, swagger, nuclei, kubernetes-dashboard-auth, nri-haproxy, kube-bench, argo-events, nova, cluster-api-helm-controller, chartmuseum, rabbitmq-messaging-topology-operator, harbor-cli, kubernetes-dashboard, dex, terraform-provider-azapi,...

openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw

A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS Amazon Web Services signature to the /v3/ec2tokens ...

CVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

USN-8530-2 linux-aws-hwe vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...