GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, flux-kustomize-controller, ksops, litestream, sops, age...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, kubescape, aactl, cloudflared, terragrunt, vexctl, sops, flux-source-controller, flux-kustomize-controller, tkn, cosign, slsa-verifier, oauth2-proxy, kots, dex, argo-workflows, fulcio, gitsign, tekton-chains...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface, argocd-image-updater, cert-manager-webhook-pdns, gogatekeeper, jaeger-operator, kube-state-metrics, crossplane-provider-aws-elasticache, flannel, kubernetes, kuma, cloudnative-pg, q, tigera-operator, rabbitmq-cluster-operator,...

GO-2026-5952 vulnerabilities

Vulnerabilities for packages: tflint, trivy-operator, gitsign, ratify, kubescape, kyverno-notation-aws, neuvector-sigstore-interface, tekton-chains, aactl, tkn, zarf, kyverno, trivy, policy-controller, falcoctl, crossplane...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy-operator, teleport, ratify, slsa-verifier, kubescape, kyverno-notation-aws, aactl, zot, kyverno, trivy, policy-controller, crossplane...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: buildah, gitsign, ratify, skopeo, kubescape, kyverno-notation-aws, falco-no-driver, tekton-chains, aactl, zarf, kyverno, podman, kots, witness, slsa-verifier, flux-source-controller, undock, falcoctl...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: spire-server, melange, slsa-verifier, kubescape, ko, tkn, tekton-chains, cosign, aactl, skaffold, policy-controller, flux-source-controller, apko...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: spire-server, trivy-operator, teleport, kubescape, aactl, policy-controller, falcoctl, ratify, neuvector-sigstore-interface, zarf, tflint, tkn, kyverno-notation-aws, kyverno, slsa-verifier, crossplane, gitsign, goreleaser, ko, tekton-chains...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, crossplane-provider-aws-elasticache, terraform-provider-tls, kubernetes, nuclei, aactl, cloudflared, podman, glab, gh, chisel, splunk-otel-collector, crossplane-provider-aws-ec2, zot, buildkitd, apko, argo-events,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: spire-server, teleport, kubescape, docker-cli-buildx, aactl, vexctl, witness, policy-controller, falcoctl, gh, ratify, neuvector-sigstore-interface, zarf, skaffold, zot, flux-source-controller, tflint, tkn, kyverno-notation-aws, cosign, gitsign, goreleaser, ko,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: ferretdb, spire-server, traefik, rancher-helm, minio, src, ingress-nginx-controller, thanos-operator, aactl, bento, k8sgateway, kubo, terraform-provider-pagerduty, tfsec, cert-manager-cmctl, flux-image-automation-controller, flux-notification-controller, helm-operato...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: spire-server, trivy-operator, docker, teleport, kubescape, docker-cli-buildx, aactl, vexctl, witness, policy-controller, falcoctl, gh, ratify, neuvector-sigstore-interface, zarf, skaffold, zot, flux-source-controller, buildkitd, tflint, tkn, kyverno-notation-aws,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: teleport, gitsign, goreleaser, ratify, tkn, kyverno-notation-aws, aactl, zot, witness, policy-controller, flux-source-controller, falcoctl...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface, kuma, gogatekeeper, ip-masq-agent, crossplane-provider-aws-elasticache, flannel, fluxcd-kustomize-mutating-webhook, spire-controller-manager, terraform-provider-time, boring-registry, git-credential-oauth, gitleaks,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: spire-server, trivy-operator, docker, teleport, rekor, kubescape, aactl, vexctl, witness, policy-controller, falcoctl, gh, ratify, neuvector-sigstore-interface, zarf, skaffold, zot, flux-source-controller, buildkitd, tflint, tkn, kyverno-notation-aws, cosign, trivy,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, spire-controller-manager, nuclei, rabbitmq-cluster-operator, render-template, aactl, pluto, migrate, aws-privateca-issuer, harbor-cli, docker-credential-gcr, wait-for-port, wgcf, aws-application-networking-k8s, zot, buildkitd, gobump, argo-events,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: spire-server, melange, rekor, kubescape, aactl, vexctl, policy-controller, falcoctl, gh, neuvector-sigstore-interface, wolfictl, zarf, zot, flux-source-controller, apko, tkn, cosign, trivy, slsa-verifier, gitsign, tekton-chains, sigstore-scaffolding...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, pulumi-kubernetes-operator, rekor, crossplane-provider-azure-storage, kubescape, nuclei, flux-image-reflector-controller, aactl, terragrunt, timestamp-authority, vexctl, kargo, policy-controller, falcoctl, rook, glab, flux-image-automation-controller, g...

EUVD-2026-58555

A vulnerability has been found in DTStack Taier 1.4.0. Affected is the function MultipartFile.getOriginalFilename of the file UploadController.java of the component Upload Controller. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. Upgrading to...

CVE-2026-19761

A vulnerability has been found in DTStack Taier 1.4.0. Affected is the function MultipartFile.getOriginalFilename of the file UploadController.java of the component Upload Controller. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. Upgrading to...