GO-2024-2978 vulnerabilities

Vulnerabilities for packages: zarf, k3s, grafana-agent-operator, kubernetes-csi-external-provisioner, step-ca, dagger, smarter-device-manager, zot, pulumi-language-dotnet, kaniko, rqlite, minio, osv-scanner, ksops, terraform-provider-google, grafana-mimir, grpc-health-probe, temporal,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, kubernetes-csi-external-provisioner, kube-vip, net-kourier, slsa-verifier, frp, bank-vaults, pgpool2exporter, terraform-provider-acme, step-ca, flyte, cert-manager-webhook-pdns, crossplane-provider-aws-elasticache,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, k3s, cosign, doppler-kubernetes-operator, kubernetes-csi-external-provisioner, kyverno-policy-reporter-ui, esbuild, bank-vaults, frp, nerdctl, pgpool2exporter, nri-f5, ytt, pvc-autoresizer, crossplane-provider-aws-elasticache, conjur-cli,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventsearch, fluxcd-kustomize-mutating-webhook, pluto, smarter-device-manager, aws-network-policy-agent, kubewatch, karpenter, metacontroller, secrets-store-csi-driver-provider-aws, local-path-provisioner, smokescreen, grafana-operator, osv-scanner,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, cloud-provider-aws, k3s, cosign, kube-vip, kyverno-policy-reporter-ui, nerdctl, net-kourier, bank-vaults, contour, scorecard, slsa-verifier, step-ca, nuclei, chartmuseum, openbao, cerbos, helm-mapkubeapis, apisix-ingress-controller, kubescape,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, commercial-chainloop-backend, aws-privateca-issuer-fips, supercronic-fips, aws-eks-pod-identity-agent-fips, flux-source-watcher, nvidia-nsight-compute-13.4, go, victoriametrics-cluster-fips, github-mcp-server, nodetaint, k8s-metacollector...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, commercial-chainloop-backend, aws-privateca-issuer-fips, supercronic-fips, aws-eks-pod-identity-agent-fips, flux-source-watcher, nvidia-nsight-compute-13.4, go, victoriametrics-cluster-fips, github-mcp-server, nodetaint, k8s-metacollector...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-fips, gatus, crossplane-aws-provider, newrelic-fluent-bit-output, speedtest-go, tetragon-fips, nrdot-collector-k8s-fips, bank-vaults-fips, neuvector-scanner-fips, crossplane-provider-aws-rds-fips, harbor-registry-fips, flux-source-watcher,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: k3s, step-issuer, splunk-otel-collector, sftpgo, step-ca, tkn, nuclei, argo-workflows, caddy, loki, openbao, trillian, croc, cerbos, minio, juicefs, seaweedfs, db-operator, ksops, witness, temporal, jitsucom-bulker, certificate-transparency, envoy-gateway, rekor, age...