GO-2025-3720 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, cri-tools, rancher, undock, amazon-cloudwatch-agent-operator, portieris, buildah, grafana-alloy, aws-otel-collector, envoy-gateway, trivy, ko, nuclei, docker-credential-gcr, nerdctl, opentelemetry-operator, grafana, datadog-agent, kpt,...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, nats, argo-rollouts, coredns, splunk-otel-collector, grafana-alloy, jaeger, opentelemetry-collector, aws-otel-collector, opentelemetry-collector-contrib, verticadb-operator, kargo, k3s, argo-cd, vale, kine, datadog-agent, kubeflow-pipelines,...

GO-2026-5617 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, cri-tools, rancher, undock, amazon-cloudwatch-agent-operator, portieris, buildah, grafana-alloy, aws-otel-collector, envoy-gateway, trivy, ko, nuclei, docker-credential-gcr, nerdctl, opentelemetry-operator, grafana, datadog-agent, kpt,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, amazon-cloudwatch-agent-operator, pulumi...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, envconsul, gitea, trino, podinfo, kuma, terraform-provider-azuread, neuvector-scanner, tailscale, knative-client, rancher-fleet, bank-vaults, rancher-webhook, argo-events, mongodb-kubernetes-operator, terraform-provider-azapi, harbo...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, vault-k8s, newrelic-nri-kube-events, argocd-image-updater, spark-operator, amazon-cloudwatch-agent-operator, containerd, crossplane-provider-aws-rds, pulumi-kubernetes-operator, local-path-provisioner, trino, nfs-subdir-external-provisioner,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, vault-k8s, spark-operator, pulumi-kubernetes-operator, nfs-subdir-external-provisioner, k8sgpt-operator, bank-vaults, prometheus-pushgateway, metrics-server, flux-image-automation-controller, crossplane-provider-aws,...

GO-2023-1754 vulnerabilities

Vulnerabilities for packages: ko, apko, aactl...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, envconsul, vault-k8s, newrelic-nri-kube-events, argocd-image-updater, spark-operator, terraform-docs, amazon-cloudwatch-agent-operator, containerd, crossplane-provider-aws-rds, dbmate, goreleaser, local-path-provisioner,...

GO-2026-4354 vulnerabilities

Vulnerabilities for packages: skaffold, gh, kyverno-notation-aws, zarf, goreleaser, tkn, slsa-verifier, neuvector-sigstore-interface, gitsign, tflint, ratify, trivy, ko, policy-controller, cosign, buildkitd, witness, teleport, kubescape, falcoctl, flux-source-controller, spire-server, zot,...

GO-2025-3595 vulnerabilities

Vulnerabilities for packages: dbmate, gitea, terraform-provider-azuread, neuvector-scanner, tailscale, knative-client, bank-vaults, argo-events, terraform-provider-azapi, kor, terraform-provider-grafana, grafana-mimir, kaniko, timoni, crossplane-provider-aws-sqs, crossplane-provider-keycloak,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: yace, dbmate, trino, neuvector-scanner, tailscale, bank-vaults, terraform-provider-azapi, terraform-provider-grafana, buildkitd, grafana-mimir, crane, kaniko, timoni, crossplane-provider-keycloak, spire-server, argo-workflows, kaf, falcosidekick, helm-docs, ctop,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: terraform, envconsul, spark-operator, undock, amazon-cloudwatch-agent-operator, containerd, step-kms-plugin, chart-testing, portieris, wait-for-port, rabbitmq-cluster-operator, nri-nginx, grafana-alloy, aws-otel-collector, nri-apache, eksctl, argo-events,...

GO-2024-3106 vulnerabilities

Vulnerabilities for packages: yace, dbmate, gitea, trino, neuvector-scanner, tailscale, rancher-fleet, bank-vaults, kor, buildkitd, grafana-mimir, crane, kaniko, timoni, crossplane-provider-aws-sqs, grafana-operator, kustomize, spire-server, argo-workflows, kaf, falcosidekick, helm-docs, ctop,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: skaffold, terraform, secrets-store-csi-driver-provider-azure, zarf, temporal, argo-rollouts, flyte, pulumi-kubernetes-operator, goreleaser, tkn, gitea, minio-operator, crossplane-provider-azure-storage, grafana-alloy, gitsign, atlantis, wal-g, scorecard,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: skaffold, zarf, goreleaser, tkn, wolfictl, slsa-verifier, neuvector-sigstore-interface, gitsign, apko, ko, policy-controller, melange, kubescape, falcoctl, flux-source-controller, spire-server, zot, tekton-chains, vexctl, aactl...

SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3604-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3604-1 advisory. This update for kubevirt fixes the following issue: - CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container esca...

CVE-2026-47766: UNIX Symbolic Link (Symlink) Following

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...