GO-2025-3900 vulnerabilities

Vulnerabilities for packages: mattermost-fips, docker-compose-fips, pluto-fips, k9s-fips, tkn-fips, grafana-fips, ratify-fips, kyverno, boring-registry-fips, beats, gitlab-cng-fips, neuvector-sigstore-interface-fips, rancher-security-scan, zitadel, beats-fips, bank-vaults, grafana,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: skopeo, aactl, goreleaser, rabbitmq-messaging-topology-operator, caddy, oauth2-proxy, kube-rbac-proxy, vault, spire-server, flux-kustomize-controller, rook, grpc-health-probe, timestamp-authority, caddy-fips, falcoctl, vexctl, terragrunt, slsa-verifier, minio, rekor,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: pulumi, step-ca, step, tkn, trivy, grafana-mimir, fluent-bit-plugin-loki, kubescape, nuclei, wal-g, sqlpad, guac, timestamp-authority, restic, opentelemetry-collector-contrib, secrets-store-csi-driver-provider-azure, up, k8sgpt, buildkitd, prometheus-operator, chezmo...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: pulumi, crossplane-provider-family-azure, skopeo, actions-runner-controller, step-ca, k3d, crossplane-provider-azure-authorization, tkn, kubernetes-event-exporter, grafana-mimir, flux-image-automation-controller, kubescape, nuclei, slsa-verifier, guac,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: spiffe-helper, thanos, seaweedfs-fips, aactl, gitaly, xeol-fips, scorecard, packer, spire-controller-manager, knative-kafka-broker-fips, terragrunt-fips, openbao, step-issuer, ory-kratos-fips, ory-kratos, rook-fips, rook, kyverno-notation-aws,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache-fips, thanos, apm-server-fips, k6-fips, gitaly, cass-operator, scorecard, podinfo-fips, kong-ingress-controller, packer, knative-kafka-broker-fips, terragrunt-fips, cert-manager-webhook-pdns-fips, helm-operator, cloud-provider-azure-fips,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: mattermost-fips, docker-compose-fips, pluto-fips, k9s-fips, tkn-fips, grafana-fips, ratify-fips, kyverno, boring-registry-fips, beats, gitlab-cng-fips, neuvector-sigstore-interface-fips, rancher-security-scan, zitadel, beats-fips, bank-vaults, grafana,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: oras, atlantis, nsc, temporal, helm-push, pvc-autoresizer, aws-s3-controller, swagger, q, pguser, http-echo, cert-exporter, ferretdb, terraform-provider-kubernetes, wait-for-port, vertical-pod-autoscaler, dataplaneapi, protoc-gen-go, terraform-provider-tls,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, sftpgo-plugin-pubsub, confluent-common-docker, blobfuse2, hivemind, sftpgo-plugin-geoipfilter, kserve-rest-proxy, kube-vip-cloud-provider, kubeflow-katib, nats, vault-k8s, docker-credential-ecr-login, container-object-storage-interface,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, sftpgo-plugin-pubsub, confluent-common-docker, blobfuse2, hivemind, sftpgo-plugin-geoipfilter, kserve-rest-proxy, kube-vip-cloud-provider, kubeflow-katib, nats, vault-k8s, docker-credential-ecr-login, container-object-storage-interface,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: pulumi, step-ca, step, tkn, trivy, grafana-mimir, fluent-bit-plugin-loki, kubescape, nuclei, wal-g, sqlpad, guac, timestamp-authority, restic, opentelemetry-collector-contrib, secrets-store-csi-driver-provider-azure, up, k8sgpt, buildkitd, prometheus-operator, chezmo...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: skopeo, step-ca, kubernetes-dashboard, step, tkn, kubescape, wolfictl, oauth2-proxy, kube-rbac-proxy, slsa-verifier, cloudflared, guac, ko, rabbitmq-messaging-topology-operator, timestamp-authority, nerdctl, temporal, falcoctl, caddy, minio, rook, goreleaser, skaffol...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, kube-oidc-proxy, kubescape, aws-efs-csi-driver-fips, aactl, metrics-server-fips, src, cortex, prometheus-stackdriver-exporter, terraform-provider-sendgrid, slsa-verifier, buildkitd, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, scorecard,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: prometheus-operator, thanos-operator, aws-load-balancer-controller-fips, kube-state-metrics, kubernetes-csi-external-resizer, terraform, kpt, aactl, vault-k8s-fips, wavefront-collector-for-kubernetes, aws-load-balancer-controller, kubeflow,...