GO-2026-4970 vulnerabilities

Vulnerabilities for packages: flux, mattermost, nerdctl, pinact, kots, prometheus-operator, zarf, cerbos, glab, k8s-device-plugin, pulumi, dataplaneapi, melange, scorecard, pulumi-language-dotnet, karpenter, vexctl, buildah, timestamp-authority, redka, helm, falco-no-driver, kubeflow-katib, loki,...

GO-2026-5885 vulnerabilities

Vulnerabilities for packages: gogatekeeper, zarf, kots, k9s, conftest, gatekeeper, cluster-api-helm-controller, helm-operator, kubescape-operator, rancher, rancher-fleet, argo-cd, gitness, kube-arangodb, argocd-image-updater, kyverno-notation-aws, chartmuseum, trivy, vcluster, ratify, maru,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: zarf, nri-postgresql, kyverno-policy-reporter, glow, kyverno-policy-reporter-ui, splunk-otel-collector, openfga, opentofu, wolfictl, witness, boring-registry, terraform-provider-acme, tfsec, amazon-cloudwatch-agent, traefik, ko, goreleaser, envoy-gateway, mockery,...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-family-aws, zarf, vault-secrets-webhook, kyverno-policy-reporter, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, crossplane-provider-aws-route53, gitlab-runner, loki, crossplane-provider-aws-ec2,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, terraform-provider-random, crossplane-provider-family-aws, cri-tools, azure-service-operator, dkron, zarf, flux-image-automation-controller, step-kms-plugin, authservice, gatekeeper, knative-operator, step-ca, karma, spegel,...

GO-2025-4009 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4015 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4006 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: stern, http-echo, controller-gen, vexctl, amass, yunikorn-web, ip-masq-agent, fulcio, helm-set-status, mods, kapp, terraform-docs, ko, mockery, go-licenses, renovate, dagdotdev, direnv, k8sgpt-operator, ytt, docker-machine-driver-linode, timestamp-authority, fq, frp,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, cri-tools, stern, step-kms-plugin, vault-secrets-webhook, src-fingerprint, rancher-loglevel, http-echo, cluster-api-helm-controller, pgpool2exporter, php-fpmexporter, timescaledb-parallel-copy, git-credential-oauth, spicedb-operator,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, cri-tools, flux, flux-image-automation-controller, src-fingerprint, http-echo, php-fpmexporter, hubble-ui, kyverno-policy-reporter, controller-gen, gops, vexctl, amass, dynamic-localpv-provisioner, kuberay-operator,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, stern, http-echo, hubble-ui, controller-gen, amass, postgres-operator, nri-consul, yunikorn-web, git-sync, ip-masq-agent, kubernetes-dashboard-api, fulcio, mods, terraform-provider-acme, kubernetes-dashboard-auth, kapp, terraform-docs, ko,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, stern, dkron, http-echo, pulumi-language-dotnet, controller-gen, mountpoint-s3-csi-driver, gitlab-runner, datadog-agent, openfga, kserve, amass, postgres-operator, nri-consul, yunikorn-web, git-sync, rancher-security-scan, redpanda,...

GO-2024-2600 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, cri-tools, flux, flux-image-automation-controller, src-fingerprint, http-echo, php-fpmexporter, hubble-ui, kyverno-policy-reporter, controller-gen, gops, vexctl, amass, dynamic-localpv-provisioner, kuberay-operator,...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, stern, http-echo, hubble-ui, controller-gen, amass, postgres-operator, nri-consul, yunikorn-web, git-sync, ip-masq-agent, kubernetes-dashboard-api, fulcio, mods, terraform-provider-acme, kubernetes-dashboard-auth, kapp, terraform-docs, ko,...