GO-2024-2920 vulnerabilities

Vulnerabilities for packages: melange, dagger, zot, guac...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, syft, buf, docker, helm-push, melange, cri-tools, grype, policy-controller, docker-compose, kaniko, harbor-scanner-trivy, harbor-scanner-trivy-fips, neuvector-scanner, dagger, wolfictl, k3d...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: trivy, argo-cd, tfsec, kubescape, argocd-image-updater-fips, kaniko-fips, pulumi-language-dotnet, guac, grafana-alloy, grafana-alloy-fips, melange, pulumi-kubernetes-operator, zarf, go-licenses, zot, argo-events-fips, pulumi-language-yaml, src-fingerprint-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kubescape, consul-k8s, cluster-api-helm-controller, melange, opa-fips-envoy, amazon-ecs-agent-fips, neuvector, k8ssandra-client, apm-server-fips, skaffold-fips, datadog-agent, google-osconfig-agent, buildkitd, ctop, docker, kubevela-fips,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kubescape, consul-k8s, cluster-api-helm-controller, melange, opa-fips-envoy, amazon-ecs-agent-fips, neuvector, k8ssandra-client, apm-server-fips, skaffold-fips, datadog-agent, google-osconfig-agent, buildkitd, ctop, docker, kubevela-fips,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, grype-db, kubescape, consul-k8s, cluster-api-helm-controller, amazon-ecs-agent-fips, neuvector, neuvector-fips, jfrog-cli, packer, skaffold-fips, datadog-agent, google-osconfig-agent, tigera-operator, buildkitd, ctop, docker,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: grype-db, nri-kubernetes, grafana-alloy, spark-operator-fips, opa-fips-envoy, tflint, mattermost, opentofu, atlantis-fips, nri-prometheus, seaweedfs, amazon-cloudwatch-agent-fips, kyverno, gcsfuse, cosign, pluto, podinfo, timestamp-authority, cloud-sql-proxy-fips,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: grype-db, kubescape, melange, grafana-alloy, external-secrets-operator, gitlab-runner, gitaly, pulumi-language-yaml, jfrog-cli, gptscript, nemo, kyverno, flux, packer, skaffold-fips, coder, google-osconfig-agent, flux-fips, snyk-cli, kubevela-fips, grafana-fips,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: apply-cve-bump, prometheus-elasticsearch-exporter, grype-db, gitlab-kas, reports-server, kubescape, melange, kubernetes-dashboard, external-secrets-operator, mattermost, opentofu, pulumi-language-yaml, jfrog-cli, gptscript, nemo, kyverno, flux, packer, skaffold-fips,...

GO-2024-2920 vulnerabilities

Vulnerabilities for packages: zot, melange, dagger, guac...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, dgraph, maru, nuclei, eksctl, grafana-alloy, datadog-agent, ollama, opentelemetry-collector-contrib, k8sgpt, gitlab-runner, nfpm, lazygit, kubevela, goreleaser, teleport, terraform-mcp-server, redpanda, minio, cri-tools, mcp-grafana, witness,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opa, tflint, grafana-mimir, cert-manager-cmctl, opentelemetry-collector, terraform-docs, gomplate, spire-server, guac, grpc-health-probe, kargo, ferretdb, kwok, opentelemetry-collector-contrib, rqlite, kube-rbac-proxy, smarter-device-manager, melange, k8sgpt, sops,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: cri-tools, docker-compose, melange, helm-push, policy-controller, docker, neuvector-scanner, dagger, syft, buf, k3d, wolfictl, harbor-scanner-trivy, grype, kaniko...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: bom, crossplane, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, flux-source-controller, flux, grype, flux-kustomize-controller, k9s, melange, argo-workflows, k8sgpt, snyk-cli, src-fingerprint, zarf, kubevela, goreleaser, scorecar...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, crossplane, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, flux-source-controller, flux, grype, flux-kustomize-controller, k9s, melange, argo-workflows, k8sgpt, snyk-cli, src-fingerprint, zarf, kubevela, goreleaser, scorecar...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: bom, crossplane, steampipe, gomplate, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, argo-cd, flux-source-controller, flux, grype, k9s, melange, argo-workflows, snyk-cli, cerbos, gitlab-runner, src-fingerprint, nfpm, zarf,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: docker-compose, crossplane, syft, kubescape, wolfictl, spire-server, kargo, ko, grype, melange, aactl, tkn, kaniko, cilium-cli, buf, cadvisor, trivy, up, conftest, dagger, buildkitd, zot, ctop...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: docker-compose, crossplane-provider-aws-memorydb, gomplate, atlantis, terraform-provider-azapi, guac, buildah, k9s, openbao, crossplane-provider-azure-managedidentity, scorecard, hcloud, opentofu, crossplane-provider-aws-cloudfront, kaf, cloudflared,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gomplate, atlantis, guac, buildah, k9s, openbao, crossplane-provider-azure-managedidentity, scorecard, hcloud, opentofu, age, kaf, pulumi-kubernetes-operator, cilium, pulumi, rancher, vault-benchmark, buildkitd, apko, terraform-provider-azurerm,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: gomplate, guac, buildah, k9s, openbao, scorecard, opentofu, kaf, pulumi-kubernetes-operator, cilium, pulumi, rancher, apko, syft, caddy, flux-source-controller, telegraf, chezmoi, fscrypt, cilium-cli, pulumi-language-yaml, step, step-kms-plugin, containerd, helm,...