GO-2026-5016 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gatekeeper-fips, melange, knative-serving, longhorn-cli-fips, juicefs, docker-machine-driver-harvester, redpanda-console, helm, pulumi-language-dotnet, gitlab-workhorse-ce, argo-workflows, kube-conformance, gitlab-kas, etcd, gitlab-runner,...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, nodetaint, aws-efs-csi-driver, kubernetes, spark-operator, ip-masq-agent, kubernetes-csi-driver-hostpath, local-static-provisioner, kubeflow-pipelines, kubernetes-dns-node-cache...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kubevela, flux-image-automation-controller, pulumi-language-java, chezmoi, grafana-alloy, argo-events, melange, pulumi-language-dotnet, src-fingerprint, k9s, flux-kustomize-controller, bom, flux-source-controller, dagger, k8sgpt, argo-workflows,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: scorecard, teleport, rancher-fleet, rclone, kyverno, cerbos, argo-cd, terragrunt, gitaly, syft...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GO-2026-5880 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, steampipe, helm-mapkubeapis, cert-manager-cmctl, grafana-operator, gogatekeeper, opa, rancher-agent, rancher-helm, helm, k9s, opa-envoy, flux-source-controller, zot, kyverno, xeol, headlamp, linkerd2, rancher, cilium-cli,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, steampipe, kubevela, flux-image-automation-controller, pulumi-language-java, chezmoi, grafana-alloy, argo-events, melange, witness, pulumi-language-dotnet, gomplate, src-fingerprint, k9s, bom, flux-source-controller, dagger, snyk-cli,...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, kubernetes-event-exporter, atlantis, argo-events, bento, goreleaser, argo-cd, kubewatch, argo-rollouts...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: scorecard, teleport, terragrunt, rancher-fleet, rclone, telegraf, kyverno, cerbos, argo-cd, flux, gitaly, syft...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, kubevela, flux-image-automation-controller, pulumi-language-java, chezmoi, grafana-alloy, argo-events, melange, pulumi-language-dotnet, src-fingerprint, k9s, flux-kustomize-controller, bom, flux-source-controller, dagger, k8sgpt, argo-workflows,...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: kine, coredns, grafana-alloy, verticadb-operator, argo-rollouts, nats, aws-otel-collector, vale, k8sgpt, argo-workflows, amazon-cloudwatch-agent, k3s, kargo, kserve, jaeger, opentelemetry-collector, k8sgateway, opentelemetry-collector-contrib, splunk-otel-collector,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: grafana-operator, runc, terraform-provider-acme, knative-serving, minio-operator, tekton-chains, aws-flb-cloudwatch, temporal-server, juicefs, helm, pdfcpu, apache-exporter, container-object-storage-interface, argo-workflows, nri-postgresql, vault-benchmark,...

GO-2026-4976 vulnerabilities

Vulnerabilities for packages: kubevela, k8s-device-plugin, mattermost, coredns, fluent-bit-plugin-loki, nerdctl, grafana-alloy, runc, aws-flb-kinesis, knative-serving, aws-flb-cloudwatch, juicefs, helm, prometheus-operator, zot, k3s, kyverno, flux, go, aactl, grafana, prometheus, cilium-cli, trin...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, runc, knative-serving, tekton-chains, temporal-server, aws-flb-cloudwatch, juicefs, helm, apache-exporter, argo-workflows, vault-benchmark, mesosphere-vsphere-csi, migrate, amazon-cloudwatch-agent-operator, go, opencost, aactl, scorecard,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: steampipe, crossplane-provider-aws-rds, src, terraform-provider-acme, melange, tekton-chains, crossplane-provider-azure-sql, helm, pulumi-language-dotnet, flux-kustomize-controller, gitlab-kas, gitlab-runner, ksops, vault-benchmark, crossplane-provider-family-aws,...

GHSA-P28V-F755-9QRG

creationtimestamp| type| source ---|---|--- 2026-08-13 21:32:39+00:00| seen| https://gist.github.com/alon710/9ad8f19dc4256e5aad5d6b3105b603da...

semgrep v1.173.0

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)

Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...