GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: hubble, keda, pvc-autoresizer, cert-manager-cmctl, syft, nuclei, seaweedfs, kubernetes, victoriametrics-cluster, falcosidekick, rancher, sftpgo-plugin-pubsub, gitlab-kas, aws-eks-pod-identity-agent, trino, openbao, tkn, minio-object-browser,...

GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster, guac, trino, docker-credential-ecr-login, rancher-system-upgrade-controller, prometheus-operator, flux-notification-controller, verticadb-operator, kitty, runc, argo-rollouts, git-credential-oauth, otel-cli, influx, kapp, wave, containerd,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: nri-jmx, victoriametrics-cluster, sbom-convert, guac, trino, docker-credential-ecr-login, rancher-system-upgrade-controller, prometheus-operator, flux-notification-controller, verticadb-operator, kitty, runc, argo-rollouts, git-credential-oauth, otel-cli, influx, kap...

GO-2023-2379 vulnerabilities

Vulnerabilities for packages: kubescape, cosign-fips, falcoctl-fips, gitsign, tekton-chains, vexctl, falcoctl...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign-fips, slsa-verifier, gh, cosign...

GO-2024-3141 vulnerabilities

Vulnerabilities for packages: spire-server, tfsec, conftest, kots, policy-controller, k8sgpt, spire-server-fips, zarf, policy-controller-fips, kubescape, cosign-fips, zot, cosign, snyk-cli, opa, conftest-fips...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: spire-server, minio, spire-server-fips, boring-registry, kubescape, external-secrets-fips, cosign-fips, falcoctl-fips, gitsign, tekton-chains, mc, vexctl, falcoctl...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, nerdctl-fips, timestamp-authority-fips, terraform-provider-acme, trivy-fips, aws-otel-collector, gitlab-cng-fips, seaweedfs, chainctl, kyverno-fips, opa-envoy, pgtimetable, nri-kubernetes, cilium-cli, syft-fips, kyverno-policy-reporter,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: chartmuseum, kube-logging-operator, kubernetes-dashboard, fuse-overlayfs-snapshotter, kube-state-metrics, node-problem-detector, vault-csi-provider, kpt, kubernetes-csi-external-provisioner, aws-load-balancer-controller, skaffold, rqlite, gomplate, buildkitd,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: rekor-fips, kubernetes-dashboard, timestamp-authority-fips, cilium, kargo, fulcio, vault-csi-provider, kubernetes-dashboard-fips, skaffold, gomplate, melange, temporal-ui-server, guac, falcoctl-fips, goreleaser, zarf, apko, rancher-agent, external-secrets-fips,...

GO-2024-2512 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, policy-controller, dagger, nerdctl, policy-controller-fips, crane, rancher-machine, up, kargo, falcoctl, docker-machine-driver-harvester, kpt, cadvisor-fips, argo-workflows, k3s, ko-fips, helm-operator, skaffold, eksctl, cosign-fips,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: melange, apko, aactl, spire-server, policy-controller, spire-server-fips, skaffold, kubescape, falcoctl-fips, tekton-chains, flux-source-controller, cosign, ko, slsa-verifier, tkn...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, ratify-fips, crossplane, policy-controller-fips, cloudbeat-fips, trivy-fips, tflint, falcoctl, ko-fips, tkn-fips, chainctl, kyverno-policy-reporter-plugins-kyverno, kyverno-policy-reporter-plugins-kyverno-fips, kyverno-fips,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: rekor-fips, ratify-fips, timestamp-authority-fips, trivy-fips, fulcio, chainctl, undock, skaffold, kyverno-fips, buildkitd, trivy-operator-fips, xeol, guac, falcoctl-fips, goreleaser, portieris-fips, zarf, trivy-operator, witness, gitsign, skopeo-fips, tflint,...

GO-2026-4610 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, ratify-fips, kargo, openbao-fips, kyverno-fips, minio-operator, google-osconfig-agent, scorecard, paranoia, manifest-tool, trivy-operator-fips, xeol, flux-image-reflector-controller, rancher-system-agent, guac, falcoctl-fips, k3d, flux,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, rekor-fips, ratify-fips, crossplane, policy-controller-fips, cloudbeat-fips, trivy-fips, tflint, falcoctl, ko-fips, tkn-fips, chainctl, kyverno-policy-reporter-plugins-kyverno, kyverno-policy-reporter-plugins-kyverno-fips,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, rekor-fips, ratify-fips, crossplane, policy-controller-fips, cloudbeat-fips, trivy-fips, tflint, falcoctl, ko-fips, tkn-fips, chainctl, kyverno-policy-reporter-plugins-kyverno, kyverno-policy-reporter-plugins-kyverno-fips,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, policy-controller, policy-controller-fips, trivy-fips, falcoctl, wolfictl, tkn-fips, chainctl, gh, tekton-chains-fips, cosign-fips, flux-source-controller, rekor, sigstore-scaffolding, melange, neuvector-sigstore-interface-fips, kubescape,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: chartmuseum, argo-cd, splunk-otel-collector-fips, distribution-fips, rekor-fips, crossplane-provider-azure-managedidentity, timestamp-authority-fips, trivy-fips, nuclei, kargo, harbor-registry-fips, fulcio, seaweedfs, kube-metrics-adapter, chainctl, openbao-fips,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: chartmuseum, argo-cd, crossplane-provider-azure-managedidentity, trivy-fips, nuclei, chainctl, openbao-fips, skaffold, temporal-server, minio-operator, scorecard, azuredisk-csi, buildkitd, kubernetes-dashboard-auth-fips, secrets-store-csi-driver-provider-azure,...