GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kapp-controller, keda, kube-rbac-proxy, k3s, argocd-image-updater, azure-service-operator, cluster-api-gcp-controller, rke2-cloud-provider, tekton-pipelines, descheduler, cert-manager-webhook-pdns, grafana, kube-state-metrics, rancher-agent, metallb,...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: rancher, rancher-agent, azure-service-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k8sgateway, cis-operator, k3s, azure-service-operator, amazon-cloudwatch-agent-operator, wait-for-port, regclient, cni-plugins, kubernetes-dashboard-api, fzf, nri-apache, containerd, swagger, harbor-cli, emissary, timescaledb-tune, dex, migrate, zot, nri-nginx,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: argo-cd, ucd, rke2-runtime-fips, falcosidekick, knative-operator, cortex-fips, crossplane-provider-aws-sesv2-fips, trufflehog-fips, ops-agent, kubescape-operator-fips, stunnerd, yunikorn-k8shim, cert-manager-google-cas-issuer-fips, kserve-localmodelnode-agent-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: argo-cd, ucd, rke2-runtime-fips, falcosidekick, knative-operator, cortex-fips, crossplane-provider-aws-sesv2-fips, trufflehog-fips, ops-agent, kubescape-operator-fips, stunnerd, yunikorn-k8shim, cert-manager-google-cas-issuer-fips, kserve-localmodelnode-agent-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: hydra-fips, step-ca-fips, rke2-runtime-fips, falcosidekick, commercial-chainloop-backend, grafana-fips, gitness, splunk-otel-collector, hydra, opentelemetry-collector-contrib, rke2-runtime, commercial-expanso-edge, caddy, kine, argo-workflows, gitlab-cng-fips,...

CVE-2025-22874 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, regclient, cortex, go-licenses, sbom-scorecard, croc, vault-secrets-webhook, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, cloud-provider-aws, clickhouse-operator, nri-rabbitmq, k8ssandra-client, openbao-k8s,...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, regclient, cortex, go-licenses, sbom-scorecard, croc, vault-secrets-webhook, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, cloud-provider-aws, clickhouse-operator, nri-rabbitmq, k8ssandra-client, openbao-k8s,...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, regclient, cortex, gofumpt, go-licenses, sbom-scorecard, croc, vault-secrets-webhook, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, cloud-provider-aws, nri-memcached, clickhouse-operator, nri-rabbitmq, k8ssandra-client,...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: dagdotdev, wait-for-port, regclient, cortex, gofumpt, go-licenses, sbom-scorecard, croc, vault-secrets-webhook, nri-redis, protoc-gen-go, litestream, libnvidia-container, petname, cloud-provider-aws, nri-memcached, clickhouse-operator, nri-rabbitmq, k8ssandra-client,...