GO-2025-3900 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, zitadel, kyverno, ratify-fips, pluto-fips, k9s-fips, grafana-fips, beats-fips, beats, mattermost-fips, kyverno-notation-aws-fips, docker-compose-fips, jitsucom-bulker, rancher-security-scan, tkn-fips, neuvector-sigstore-interface-fips, istio-fip...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: rancher-agent, wolfictl, argo-workflows, weaviate, kargo, k3s, temporal-ui-server-fips, falcoctl, vault-csi-provider, terragrunt, vault, kubescape, rook, frp, goreleaser, temporal-fips, cosign-fips, sigstore-scaffolding, timestamp-authority-fips, fulcio-fips, apko,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: falcoctl, thanos, trino, py3-cassandra-medusa, zarf, druid, rclone, guac, cosign, flux, bank-vaults, prometheus-operator, policy-controller, restic, airflow, flux-source-controller, argo-events, pulumi, spire-server, rekor, rook, ksops, terragrunt, goreleaser,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-notification-controller, gitsign, crossplane-provider-azure, glab, kubevela, crossplane-provider-azure-storage, kargo, skopeo, zarf, crossplane-provider-azure-sql, gh, guac, flux-helm-controller, cosign, flux, bank-vaults,...

CLEANSTART-2026-DW12764 Security fixes in bank-vaults 1.32.1-r1

Package bank-vaults version 1.32.1-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: chainloop-control-plane, teleport, gatus, gitlab-cng, containerd, falcosidekick, buildah-fips, gitlab-runner-fips, src, hydra-fips, vault-csi-provider, kubescape, rook, steampipe, flux-kustomize-controller-fips, fulcio-fips, melange, sqlexporter, elastic-agent-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: spicedb-operator, argocd-image-updater-fips, secrets-store-csi-driver-provider-gcp-fips, teleport, eck-operator, gitlab-cng, containerd, falcosidekick, azurefile-csi, gitlab-runner-fips, src, hydra-fips, prometheus-adapter-fips, aws-ebs-csi-driver-fips, kubescape,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, bank-vaults...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: boring-registry-fips, zitadel, kyverno, ratify-fips, pluto-fips, k9s-fips, grafana-fips, beats-fips, beats, mattermost-fips, kyverno-notation-aws-fips, docker-compose-fips, jitsucom-bulker, rancher-security-scan, tkn-fips, neuvector-sigstore-interface-fips, istio-fip...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: gops, azure-ipam, kube-rbac-proxy, otel-cli, go-tools, s5cmd, cloud-provider-gcp-cloud-controller-manager, dagdotdev, nfpm, cloud-sql-proxy, pvc-autoresizer, coredns, mockery, dockerize, cert-manager-webhook-pdns, kubeflow, kwok, fscrypt, falcoctl, kafkaexporter,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, gitsign, kuberay-operator, kube-vip-cloud-provider, ctop, rancher-machine, dagdotdev, local-path-provisioner, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws, mongodb-kubernetes-operator, bank-vaults, pvc-autoresizer,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, gitsign, kuberay-operator, kube-vip-cloud-provider, ctop, rancher-machine, dagdotdev, local-path-provisioner, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws, mongodb-kubernetes-operator, bank-vaults, pvc-autoresizer,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: falcoctl, thanos, trino, py3-cassandra-medusa, zarf, druid, rclone, guac, cosign, flux, bank-vaults, prometheus-operator, policy-controller, restic, airflow, flux-source-controller, argo-events, pulumi, spire-server, rekor, rook, ksops, terragrunt, goreleaser,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: falcoctl, kube-rbac-proxy, gitsign, ko, kargo, skopeo, zarf, nerdctl, guac, cosign, bank-vaults, rabbitmq-messaging-topology-operator, policy-controller, dex, k3s, flux-source-controller, vexctl, spire-server, rekor, gomplate, rook, terragrunt, goreleaser,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe-fips, aws-efs-csi-driver-fips, kube-oidc-proxy, cortex, kiam, conftest-fips, aactl, up, falcoctl-fips, terraform-provider-sendgrid-fips, slsa-verifier, kubernetes-csi-livenessprobe, dynamic-localpv-provisioner-fips, bank-vaults-fips,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, terraform-provider-sendgrid-fips, weaviate, prometheus-elasticsearch-exporter, prometheus-node-exporter, k3s, kube-logging-operator, kube-state-metrics, k3d, prometheus-node-exporter-fips, src, gke-gcloud-auth-plugin, prometheus-postgres-exporter-fip...