GO-2024-2920 vulnerabilities

Vulnerabilities for packages: melange, dagger, guac, zot...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: melange, dagger, harbor-scanner-trivy-fips, kaniko, grype, harbor-scanner-trivy, policy-controller-fips, docker-compose, syft, wolfictl, buf, policy-controller, k3d, helm-push, neuvector-scanner, cri-tools...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argo-events-fips, flux-kustomize-controller, flux-source-controller-fips, nuclei, chezmoi, go-licenses, gitea, trivy-fips, argocd-image-updater-fips, gptscript, src-fingerprint-fips, task, pulumi-language-java, k8sgpt, nemo, scorecard, goreleaser, grafana-alloy, kots...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, gogatekeeper, cert-manager-cmctl, amazon-ecs-agent-fips, trivy-fips, helm, apm-server-fips, trivy-operator, kube-arangodb-fips, headlamp-fips, k8sgpt, helm-diff, teleport, zarf, docker-cli-buildx-fips, manifest-tool, google-osconfig-agent...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, gogatekeeper, cert-manager-cmctl, amazon-ecs-agent-fips, trivy-fips, helm, apm-server-fips, trivy-operator, kube-arangodb-fips, headlamp-fips, k8sgpt, helm-diff, teleport, zarf, docker-cli-buildx-fips, manifest-tool, google-osconfig-agent...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, trivy-fips, helm, kubescape-server, trivy-operator, kube-arangodb-fips, chaos-mesh-fips, headlamp-fips, k8sgpt, spegel-fips, zarf-fips, teleport, zarf, docker-cli-buildx-fips, kubescape-server-fips, manifest-tool, google-osconfig-agent,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: spire-server, argo-events-fips, github-mcp-server, flux-source-controller-fips, splunk-otel-collector-fips, kyverno-notation-aws, mockery, trivy-fips, trivy-operator, conftest, wgcf, ko, cloud-sql-proxy, zarf, kyverno, amazon-cloudwatch-agent-fips,...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: argo-events-fips, nuclei, trufflehog-fips, gitea, trivy-fips, kubescape-server, trivy-operator, zarf-fips, act, src-fingerprint, teleport, coder-fips, zarf, kyverno, kubescape-server-fips, google-osconfig-agent, chainloop-cli-fips, gomplate, amazon-ssm-agent-fips,...

GO-2026-5015 vulnerabilities

Vulnerabilities for packages: spire-server, argo-events-fips, splunk-otel-collector-fips, flux-source-controller-fips, nuclei, telegraf, chezmoi, podman-fips, trufflehog-fips, gitea, trivy-fips, helm, kubescape-server, vault-fips, trivy-operator, external-dns, kube-arangodb-fips,...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: datadog-agent, eksctl, terragrunt, witness, loki, weaviate, teleport, maru, prometheus, opentelemetry-collector, tempo, cri-tools, ollama, rclone, k3s, kubevela, lazygit, k8sgpt, nuclei, grafana-alloy, vcluster, dgraph, terraform-mcp-server, malcontent, gitlab-runner...

GO-2024-2920 vulnerabilities

Vulnerabilities for packages: zot, melange, guac, dagger...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: zarf, step, ferretdb, terragrunt, gomplate, falcosidekick, cloudnative-pg, kots, grpc-health-probe, k8sgpt-operator, temporal, dex, osv-scanner, grafana-mimir, kubernetes-csi-driver-hostpath, opentelemetry-collector, rqlite, restic, trivy, grafana-agent-operator,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: policy-controller, kaniko, k3d, syft, wolfictl, neuvector-scanner, helm-push, grype, buf, cri-tools, melange, docker-compose, harbor-scanner-trivy, dagger...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, pulumi-language-yaml, timoni, wolfictl, apko, kots, grype, osv-scanner, flux-source-controller, scorecard, kubescape, trivy, flux-image-automation-controller, argo-workflows, crossplane, chezmoi, tfsec, kargo, flux, skaffold, snyk-cl...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, pulumi-language-yaml, timoni, wolfictl, apko, kots, grype, osv-scanner, flux-source-controller, scorecard, kubescape, trivy, flux-image-automation-controller, argo-workflows, crossplane, chezmoi, tfsec, kargo, flux, skaffold, snyk-cl...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: zarf, pulumi, gptscript, gitsign, pulumi-language-yaml, witness, wolfictl, apko, gomplate, grype, kots, steampipe, rancher-fleet, teleport, osv-scanner, flux-source-controller, gitaly, scorecard, kubescape, trivy, flux-image-automation-controller, trivy-operator,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: up, ko, wolfictl, grype, buildkitd, ctop, kubescape, trivy, aactl, conftest, crossplane, docker-compose, kargo, spire-server, kaniko, syft, cadvisor, tkn, zot, buf, melange, cilium-cli, dagger...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: zarf, mattermost, crossplane-provider-aws-cloudwatchlogs, ko, gitlab-kas, crossplane-provider-aws-iam, buildkitd, go-discover, opentofu, prometheus, fscrypt, trivy-operator, nerdctl, external-dns, cloudflared, traefik, tflint, kargo, containerd,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: zarf, mattermost, ko, gitlab-kas, buildkitd, age, go-discover, opentofu, prometheus, fscrypt, trivy-operator, nerdctl, external-dns, kargo, containerd, k8sgpt, helm, pulumi-language-java, k9s, gitlab-runner, fulcio, terraform-provider-azurerm, atlantis, gptscript,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: zarf, mattermost, gitlab-kas, go-discover, opentofu, prometheus, fscrypt, trivy-operator, nerdctl, external-dns, containerd, helm, pulumi-language-java, k9s, gptscript, step, pulumi-language-yaml, cloud-provider-aws, apko, gomplate, kots, podman, osv-scanner,...