GO-2024-2978 vulnerabilities

Vulnerabilities for packages: step, kaniko, minio, kwok, k8sgpt-operator, trivy, conftest, grafana-mimir, opentelemetry-collector-contrib, vcluster, rqlite, pulumi-language-dotnet, spegel, grpc-health-probe, tflint, tempo, kargo, zot, gomplate, hubble-ui, kube-rbac-proxy, dagger, dex, zarf,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: envconsul, temporal-ui-server, promxy, prometheus, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, cilium, traefik, crossplane-provider-aws-memorydb, nri-haproxy, trino, kube-logging-operator-custom-runner, kube-bench, kubeflow-pipelines,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-redis, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: go, sftpgo-plugin-eventsearch, grafana-rollout-operator, metacontroller, actions-runner-controller, flux-notification-controller, hubble, victoriametrics-cluster, oras, flux-image-automation-controller, grafana-operator, dgraph, nova, malcontent,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: argo-cd, envconsul, temporal-ui-server, promxy, contour, prometheus, kwok, swagger, cortex, falco-no-driver, k8sgpt-operator, juicefs-csi-driver, kubernetes-csi-external-attacher, nuclei, kubernetes-dashboard-auth, newrelic-fluent-bit-output, cilium, nerdctl, cadviso...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: malcontent, k8s-metacollector-fips, victoriametrics-fips, osv-scanner, nodetaint, metacontroller, local-path-provisioner, clickhouse-operator, dbmate, flux-operator-fips, omnibump, nemo, dataplaneapi, kyverno-policy-reporter-plugins-kyverno-fips, pgwatch,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: malcontent, k8s-metacollector-fips, victoriametrics-fips, osv-scanner, nodetaint, metacontroller, local-path-provisioner, clickhouse-operator, dbmate, flux-operator-fips, omnibump, nemo, dataplaneapi, kyverno-policy-reporter-plugins-kyverno-fips, pgwatch,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: emissary, opencost, etcd, osv-scanner, terraform-provider-tls-fips, syncthing-fips, cluster-proportional-autoscaler, rke2-cloud-provider-fips, syncthing, crossplane-provider-aws-ssm, k9s-fips, amazon-eks-ami, aws-nuke, dex, omnibump, hugo-extended, prometheus-adapter...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: rekor, step, telegraf, minio, flux-kustomize-controller, age, hydra, nuclei, juicefs, croc, step-issuer, sftpgo-plugin-eventstore, caddy, loki, chezmoi, kubeflow-pipelines, wolfictl, gitea, dgraph, nri-mysql, apko, tkn, argo-workflows, grafana-alloy, db-operator,...