GO-2025-3900 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, docker-compose-fips, kyverno, gitlab-cng-fips, neuvector-sigstore-interface-fips, pluto-fips, gitlab-cng, kyverno-notation-aws-fips, k9s-fips, ratify-fips, grafana-fips, beats, grafana, rancher-security-scan, istio-fips, mattermost-fips,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: cosign, terragrunt, weaviate, tkn, kots, rancher-agent, policy-controller-fips, bank-vaults-fips, temporal-ui-server, cloudflared, kubernetes-dashboard, aactl, skaffold, bank-vaults, rekor-fips, external-secrets-fips, minio-fips, ko-fips, argo-workflows, vexctl, frp,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: tkn, guac, sqlpad, up, timestamp-authority, py3-azure-identity, chezmoi, cortex, harbor-registry, step-ca, flyte, flux-source-controller, airflow, step, trino, hugo, rclone, bank-vaults, prometheus-operator, boring-registry, sops, spire-server, velero, buildkitd,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: tkn, flux-image-automation-controller, guac, timestamp-authority, crossplane-provider-family-azure, step-ca, flux-source-controller, crossplane-provider-azure, crossplane-provider-azure-authorization, neuvector-sigstore-interface, slsa-verifier,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: podman, packer, prometheus-mongodb-exporter-fips, prometheus-podman-exporter-fips, weaviate, listmonk, commercial-expanso-edge, frankenphp-8.2, containerd, step-issuer, kaniko, milvus, cloudprober, bank-vaults-fips, envconsul, google-guest-agent-manager,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter-fips, packer, weaviate, containerd, kubevela-fips, kaniko, cloudprober, bank-vaults-fips, kubernetes-csi-external-provisioner, kubescape-operator, percona-server-mongodb-operator, google-osconfig-agent, gitlab-workhorse-ce-fips, kaniko-fip...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, docker-compose-fips, kyverno, gitlab-cng-fips, neuvector-sigstore-interface-fips, pluto-fips, gitlab-cng, kyverno-notation-aws-fips, k9s-fips, ratify-fips, grafana-fips, beats, grafana, rancher-security-scan, istio-fips, mattermost-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: ferretdb, azure-ipam, kubescape-operator, shfmt, spqr, bank-vaults, velero, buildkitd, docker-machine-driver-linode, harbor, task, frp, kwok, kiali, terraform-provider-tls, grafana-agent-operator, php-fpmexporter, gke-gcloud-auth-plugin, ytt, undock, nodetaint,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-vip-cloud-provider, linkerd2-proxy-init, addon-resizer, newrelic-fluent-bit-output, shfmt, vault-k8s, bank-vaults, container-object-storage-interface, ctop, confluent-common-docker, k8sgpt-operator, dagdotdev, terraform-provider-time, pvc-autoresizer, vexctl,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: kube-vip-cloud-provider, linkerd2-proxy-init, addon-resizer, newrelic-fluent-bit-output, shfmt, vault-k8s, bank-vaults, container-object-storage-interface, ctop, confluent-common-docker, k8sgpt-operator, dagdotdev, terraform-provider-time, pvc-autoresizer, vexctl,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: tkn, guac, sqlpad, up, timestamp-authority, py3-azure-identity, chezmoi, cortex, harbor-registry, step-ca, flyte, flux-source-controller, airflow, step, trino, hugo, rclone, bank-vaults, prometheus-operator, boring-registry, sops, spire-server, velero, buildkitd,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, tkn, guac, timestamp-authority, dgraph, step-ca, flux-source-controller, step, slsa-verifier, kots, temporal, bank-vaults, skopeo, spire-server, sops, zarf, kargo, wolfictl, cloudflared, sigstore-scaffolding, weaviate, nerdctl,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, spark-operator, kubevela, kiam, up, terraform-provider-sendgrid, dgraph, k3d, src, falcoctl-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow-fips, prometheus-adapter-fips, conftest-fips, metrics-server-fips,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: cosign, prometheus-mongodb-exporter-fips, up, weaviate, prometheus-operator, tkn, kots, prometheus-postgres-exporter, src, nodetaint, vault-k8s-fips, flux-helm-controller, configmap-reload-fips, cue, pulumi, kube-logging-operator, kubernetes-csi-livenessprobe,...