GO-2026-4601 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, redpanda, trino, kuma, podman, crossplane-provider-aws-eks, crossplane-provider-aws-cloudwatchlogs, step, kube-vip-cloud-provider, azure-ipam, swagger, pgpool2exporter, wuzz, k8s-device-plugin, kubernetes-csi-driver-nfs, pulumi,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, redpanda, trino, kuma, podman, crossplane-provider-aws-eks, crossplane-provider-aws-cloudwatchlogs, step, kube-vip-cloud-provider, azure-ipam, swagger, pgpool2exporter, wuzz, k8s-device-plugin, kubernetes-csi-driver-nfs, pulumi,...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: kaniko, kargo, kots, snyk-cli, bom, argo-cd, gomplate, melange, syft, gitaly, crossplane, terragrunt, k9s, zot, flux-source-controller, external-secrets-operator, argo-workflows, osv-scanner, dagger, goreleaser, grype, gitlab-runner, xeol, pulumi-language-dotnet,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, cri-tools, crossplane-provider-azure-storage, terraform-provider-acme, crossplane, k9s, falco-no-driver, frp, argo-rollouts, crossplane-provider-aws-elasticache, hubble-ui, kubernetes-csi-node-driver-registrar, glab, kubescape-operator, kum...

GO-2026-5970 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, cri-tools, redis-operator, go-licenses, sqlexporter, crossplane-provider-azure-storage, terraform-provider-acme, crossplane, k9s, falco-no-driver, frp, kubescape-operator, crossplane-provider-aws-elasticache, hubble-ui, redpanda, trino,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, redpanda, kuma, podman, crossplane-provider-aws-eks, crossplane-provider-aws-cloudwatchlogs, trivy-operator, step, gitsign, kube-vip-cloud-provider, witness, terraform-docs, k8s-device-plugin, kubernetes-csi-driver-nfs, pulumi,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: kaniko, kargo, melange, syft, crossplane, zot, up, cilium-cli, ctop, dagger, grype, conftest, buildkitd, aactl, tkn, wolfictl, spire-server, docker-compose, ko, cadvisor, buf, kubescape, trivy...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: melange, k9s, falco-no-driver, zot, podman, loki, trivy-operator, step, skaffold, prometheus, prometheus-operator, rancher, witness, act, gptscript, pulumi, step-issuer, argo-cd, gomplate, terragrunt, syft, cloud-provider-aws, cilium-cli, helm, kubernetes,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: melange, crossplane-provider-azure-storage, terraform-provider-acme, k9s, falco-no-driver, sealed-secrets, zot, crossplane-provider-aws-elasticache, glab, podman, docker, loki, crossplane-provider-family-aws, crossplane-provider-aws-cloudfront, wal-g, traefik,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: melange, k9s, falco-no-driver, zot, podman, docker, loki, wal-g, trivy-operator, skaffold, prometheus, prometheus-operator, rancher, witness, act, gptscript, pulumi, datadog-agent, argo-cd, gomplate, terragrunt, syft, cloud-provider-aws, cilium-cli, helm, kubernetes,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: go-licenses, redpanda, podman, paranoia, git-credential-oauth, trivy-operator, step, gitsign, aws-flb-cloudwatch, envconsul, swagger, witness, pgpool2exporter, terraform-docs, wuzz, k8s-device-plugin, kubernetes-csi-driver-nfs, pulumi, trillian, portieris, cadvisor,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: tekton-chains, crossplane, zot, cosign, flux-source-controller, docker, policy-controller, tflint, neuvector-sigstore-interface, vexctl, goreleaser, gh, falcoctl, ratify, buildkitd, aactl, trivy-operator, tkn, skaffold, gitsign, docker-cli-buildx, kyverno-notation-aw...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: tekton-chains, zot, cosign, flux-source-controller, policy-controller, tflint, neuvector-sigstore-interface, vexctl, goreleaser, gh, falcoctl, ratify, aactl, tkn, skaffold, gitsign, docker-cli-buildx, kyverno-notation-aws, witness, spire-server, ko, teleport, zarf,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, spegel, cri-tools, redis-operator, go-licenses, mongodb-kubernetes-operator, falco-no-driver, frp, kubescape-operator, crossplane-provider-aws-elasticache, hubble-ui, nri-couchbase, kuma, sealed-secrets, cluster-api-gcp-controller, kustomiz...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, regclient, zot, gcsfuse, aws-application-networking-k8s, rclone, gobump, wal-g, aws-privateca-issuer, grafana-rollout-operator, mockgen, kpt, nri-mysql, prometheus, prometheus-operator, timescaledb-tune, envconsul, kapp, swagger,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: tekton-chains, kargo, snyk-cli, gomplate, terragrunt, crossplane-provider-azure-managedidentity, crossplane-provider-azure-storage, flux-helm-controller, rekor, cosign, terraform, terraform-provider-azurerm, zot, glab, flux-source-controller, grafana-mimir, fulcio,...

EUVD-2026-58481

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

Zyxel USG FLEX 50(W) / USG20(W)-VPN 4.16 < 5.43 / ATP 4.32 < 5.43 / USG FLEX 4.50 < 5.43 Path Traversal

The firmware version of the Zyxel ZLD firewall device is affected by a path traversal vulnerability. A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from...

GHSA-MXCG-P696-RM94

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

CVE-2026-73479

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...