GO-2024-2920 vulnerabilities

Vulnerabilities for packages: guac, dagger, zot, melange...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: grype, harbor-scanner-trivy-fips, helm-push, policy-controller-fips, buf, melange, harbor-scanner-trivy, cri-tools, kaniko, policy-controller, docker-compose, neuvector-scanner, docker, syft, k3d, wolfictl, dagger...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: zarf, grype, pulumi-language-java, flux-fips, snyk-cli, apko, nuclei, argo-events-fips, src-fingerprint, tfsec, trivy-fips, flux-image-automation-controller, kubevela, tekton-pipelines, go-licenses, nemo, gptscript, kaniko-fips, flux-source-controller-fips, kaniko,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, gitlab-operator, gogatekeeper, kubevela, consul-k8s-fips, nerdctl-fips, opa-envoy, k8sgpt, flux-source-controller, cert-manager-cmctl, chartmuseum-fips, trivy-operator-fips, gitlab-rails-ce-fips,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, gitlab-operator, gogatekeeper, kubevela, consul-k8s-fips, nerdctl-fips, opa-envoy, k8sgpt, flux-source-controller, cert-manager-cmctl, chartmuseum-fips, trivy-operator-fips, gitlab-rails-ce-fips,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: grype, chart-testing, tekton-chains, boring-registry, argo-events-fips, hcloud, falcoctl, aws-otel-collector, chart-testing-fips, harbor-cli, spire-server-fips, filebrowser, kyverno-notation-aws, cosign-fips, agentbeat, kyverno-policy-reporter-fips, nerdctl-fips,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, argo-events-fips, cloudbeat, kubevela, chainctl-fips, chainloop-cli-fips, apko-fips, gitsign, external-secrets-operator-fips, grype-fips, grafana, kyverno-fips, guac, argocd-image-updater, jfrog-cli, coder, trivy-operator-fips, grype-db,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-java, reports-server, knative-kafka-broker, k3s, podman, argo-events-fips, cloudbeat, commercial-expanso-edge, external-dns, keda-fips, frankenphp-8.3, chainctl-fips, gitlab-kas, chainloop-cli-fips, apko-fips, terraform, apply-cve-bump,...

GO-2024-2920 vulnerabilities

Vulnerabilities for packages: dagger, guac, melange, zot...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: mcp-grafana, gitlab-runner, datadog-agent, k3s, nuclei, dgraph, terraform-mcp-server, teleport, goreleaser, tempo, grafana-alloy, dagger, minio, cri-tools, k8sgpt, eksctl, ollama, kubevela, vcluster, grafana, redpanda, loki, opentelemetry-collector, weaviate,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: temporal, sigstore-scaffolding, conftest, spire-server, falcosidekick, certificate-transparency, grafana-mimir, kargo, k3s, zarf, fulcio, dex, grpc-health-probe, ksops, kaniko, kube-rbac-proxy, rqlite, tempo, step-ca, cloudnative-pg, dagger, minio, osv-scanner,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: buf, kaniko, neuvector-scanner, wolfictl, syft, docker, k3d, policy-controller, dagger, docker-compose, grype, helm-push, melange, harbor-scanner-trivy, cri-tools...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argo-workflows, task, gptscript, gitea, k9s, bom, flux-kustomize-controller, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, go-licenses, kaniko, goreleaser, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, timoni, pulumi-language-dotnet,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argo-workflows, task, gptscript, gitea, k9s, bom, flux-kustomize-controller, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, go-licenses, kaniko, goreleaser, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, timoni, pulumi-language-dotnet,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argo-workflows, gptscript, gitea, gitlab-runner, k9s, trufflehog, bom, rancher-fleet, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, xeol, kaniko, teleport, snyk-cli, grafana-alloy, dagger, apko, osv-scanner, witness, pulumi-language-dotnet,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: buildkitd, conftest, spire-server, kargo, crossplane, syft, buf, kaniko, ko, dagger, melange, tkn, ctop, trivy, zot, cilium-cli, cadvisor, kubescape, docker-compose, grype, wolfictl, up, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildkitd, splunk-otel-collector, cilium, helm, kubernetes-dashboard, crossplane-provider-aws-eks, src, nuclei, zarf, syft, step-kms-plugin, act, crossplane-provider-aws-kinesis, crossplane-provider-aws-rds, buildah, trivy, external-secrets-operator, trivy-operator,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildkitd, splunk-otel-collector, cilium, helm, kubernetes-dashboard, nuclei, zarf, syft, step-kms-plugin, act, buildah, trivy, external-secrets-operator, trivy-operator, step, external-dns, kots, opentelemetry-collector, fscrypt, nfpm, nerdctl, cosign, terragrunt,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: cilium, helm, kubernetes-dashboard, nuclei, zarf, syft, step-kms-plugin, act, buildah, trivy, external-secrets-operator, trivy-operator, step, external-dns, kots, opentelemetry-collector, fscrypt, nfpm, nerdctl, terragrunt, flux-source-controller,...