GO-2025-4098 vulnerabilities

Vulnerabilities for packages: cni-plugins-fips, amazon-k8s-cni-fips, eks-distro-fips, rancher-agent, blob-csi-fips, docker-fips, volcano, trivy-operator, prometheus-node-exporter-fips, k3s, kaniko-fips, cg, dagger, virt-launcher, trivy-fips, google-osconfig-agent, envoy-gateway, zot, k9s,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips, spire-controller-manager-fips, gitlab-pages, steampipe, agentbeat, prometheus-mongodb-exporter, wazero-fips, hugo-fips, yace-fips, envconsul-fips, ingress-nginx-controller, gitlab-kas-fips, kiam, cortex-fips, prometheus-statsd-exporter,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-datasync-fips, crossplane-provider-azure-solutions, gitlab-operator-fips, spire-controller-manager-fips, gitlab-pages, agentbeat, prometheus-mongodb-exporter, crossplane-provider-aws-lexmodels-fips, envconsul-fips, gitlab-kas-fips, cortex-fips...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-datasync-fips, crossplane-provider-azure-solutions, gitlab-operator-fips, prometheus-mongodb-exporter, hugo-fips, crossplane-provider-aws-lexmodels-fips, mapotf, cortex-fips, crossplane-fips, eks-distro-fips, rabbitmq-cluster-operator,...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: nri-memcached, gitlab-operator-fips, spire-controller-manager-fips, gitlab-pages, steampipe, yace-fips, ingress-nginx-controller, db-operator, gitlab-kas-fips, crossplane-fips, actions-runner-controller-fips, vault-csi-provider-fips, eks-distro-fips,...

GO-2025-3488 vulnerabilities

Vulnerabilities for packages: spire-controller-manager-fips, prometheus-mongodb-exporter, ingress-nginx-controller, velero-plugin-for-microsoft-azure, kiam, cortex-fips, prometheus-statsd-exporter, actions-runner-controller-fips, eks-distro-fips, rabbitmq-cluster-operator, helm-operator,...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: melange, pombump...

GO-2024-2618 vulnerabilities

Vulnerabilities for packages: guac, falcosidekick...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: teleport, external-secrets-operator, terragrunt, guac, gitaly...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: trivy-operator, kots, flux-helm-controller, k8ssandra-client, helm-set-status, trivy, helm-docs, cluster-api-helm-controller, linkerd2, tw, flux-source-controller, flux, zarf, pluto, helm-push, helm-mapkubeapis, headlamp, cert-manager-cmctl, eksctl, chartmuseum, nova...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: trivy-operator, kots, nuclei, trivy, portieris, aws-otel-collector, spire-server, rancher-machine, opentelemetry-operator, docker-credential-gcr, podman, skopeo, undock, ko, amazon-cloudwatch-agent-operator, grafana, k8sgpt, rancher-agent, buildah, envoy-gateway, zot...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: trufflehog, grype, sops, crossplane-provider-aws-iam, cloudprober, opentofu, vitess, temporal, crossplane-provider-aws-elasticache, k8sgpt, terragrunt, velero-plugin-for-aws, gitlab-runner, falcoctl, gitaly, trivy-operator, snyk-cli, xeol, crossplane-provider-aws-s3,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: trivy-operator, kots, splunk-otel-collector, newrelic-infrastructure-agent, nuclei, traefik, trivy, portieris, wolfictl, aws-otel-collector, pulumi, spire-server, goreleaser, zarf, rancher-machine, opentelemetry-operator, neuvector-scanner, docker-credential-gcr,...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: licenseclassifier, openbao, splunk-otel-collector, vault-benchmark, helm-set-status, redka, karpenter, kine, external-secrets-operator, kubernetes, external-dns, coredns, prometheus, sriov-network-device-plugin, opentofu, gitness, helm-mapkubeapis, bom,...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: redka, aws-signer-notation-plugin, spqr, kubernetes-dashboard-api, wave, sriov-network-device-plugin, gobuster, bom, fuse-overlayfs-snapshotter, grafana-operator, openbao-k8s, tetragon, crossplane-provider-aws-elasticache, yunikorn-k8shim, ferretdb, metallb,...

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik, openstack-horizon-2026.1, authentik-fips...

security-review-skill

Security Review Skill for Claude Code A comprehensive securit...

EUVD-2019-6558

Malware in sbrugna...

DependencyCheck

This is an open-source project for a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies. The project is called OWASP dependency-check. The project is written in Java and is designed to be used in a variety of environments, including...

CVE-2024-50611

CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation,...