GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opa, kubernetes-csi-external-provisioner, certificate-transparency, k3s, kube-rbac-proxy, melange, restic, spire-server, vcluster, fulcio, dagger, spicedb, sigstore-scaffolding, k8sgpt-operator, rqlite, gomplate, kubernetes-csi-driver-hostpath, k8sgpt,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, go, k3s, ctop, kubernetes-replicator, policy-controller, buildah, trino, glab, aws-node-termination-handler, apisix-ingress-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, kubernetes-dns-node-cache, k3s, pguser, restic, ctop, kubernetes-replicator, aws-signer-notation-plugin, policy-controller, dkron, crossplane-provider-aws-elasticache, mc, harbor-registry, crossplane-provider-aws-rds,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: metacontroller, spire-server, victoriametrics, newrelic-infra-operator, go, kubewatch, aws-load-balancer-controller, goreleaser, nfs-subdir-external-provisioner, oras, dgraph, dataplaneapi, dkron, supercronic, ingress-nginx-controller, sftpgo-plugin-eventsearch,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cortex, crossplane-provider-azure-authorization, go, k3s, docker-cli, policy-controller, k8s-device-plugin, buildah, dkron, sftpgo, kpt, aws-node-termination-handler, apisix-ingress-controller, knative-operator, trivy-operator, kyverno, mc, opa-envoy, descheduler,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, go, flux-operator-fips, pluto, polaris-fips, metacontroller, flux-source-controller-fips, clickhouse-operator, karpenter, pluto-fips, apko, atlas-fips, karpenter-fips, victoriametrics-fips, fluxcd-kustomize-mutating-webhook-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, go, flux-operator-fips, pluto, polaris-fips, metacontroller, flux-source-controller-fips, clickhouse-operator, karpenter, pluto-fips, apko, atlas-fips, karpenter-fips, victoriametrics-fips, fluxcd-kustomize-mutating-webhook-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, chisel-fips, grafana-mimir, apache-exporter, metacontroller, crossplane-aws-provider-fips, manifest-tool, nri-f5-fips, jupyterhub-k8s-image-awaiter, cert-manager-openshift-routes-fips, pgpool2exporter, milvus, azure-workload-identity-webhook,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: aactl, spire-server, certificate-transparency, k3s, telegraf, dgraph, fulcio, spicedb, sftpgo, timestamp-authority, nri-mysql, argo-workflows, trufflehog, jitsucom-bulker, openfga, step-issuer, step-kms-plugin, temporal-server, tkn, temporal, sqlexporter,...