GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trufflehog, aws-nuke, guac, envconsul, kubeflow-katib, xeol, kbld, multus-cni, podinfo, sftpgo-plugin-auth, argo-rollouts, pinact, prometheus, secrets-store-csi-driver, src-fingerprint, witness, crossplane-provider-aws-route53, kaniko, runc, spire-server,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: guac, grype, ko, witness, prometheus, syft, crossplane-provider-aws-route53, spire-server, fulcio, neuvector-sigstore-interface, docker-compose, hcloud, wal-g, loki, step-kms-plugin, crossplane-provider-aws-sns, crossplane-provider-keycloak, trivy-operator, tkn,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi, guac, flux, opentelemetry-collector, sigstore-scaffolding, src-fingerprint, timestamp-authority, zot, kubescape, crossplane-provider-azure-sql, spire-server, tekton-chains, fulcio, neuvector-sigstore-interface, terraform, aactl, gomplate,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: guac, grype, ko, witness, prometheus, syft, spire-server, fulcio, neuvector-sigstore-interface, hcloud, wal-g, loki, step-kms-plugin, trivy-operator, tkn, argocd-image-updater, fscrypt, helm, external-dns, prometheus-operator, kine, skaffold, policy-controller,...