GO-2025-3488 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher-fips, k3d, addon-resizer-fips, prometheus-pushgateway, dcgm-exporter-fips, flux-source-controller, kube-vip-fips, kube-logging-logging-operator, chezmoi, velero-plugin-for-aws-fips, prometheus-mongodb-exporter,...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: pombump, melange...

GO-2024-2618 vulnerabilities

Vulnerabilities for packages: falcosidekick, guac...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: argo-cd, gitaly, teleport, external-secrets-operator, terragrunt, kyverno, guac...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kots, istio, eksctl, chartmuseum, cert-manager-cmctl, cilium-cli, k8sgpt, chart-testing, k8ssandra-client, cerbos, helm-operator, linkerd2, helm-push, zot, headlamp, helm-docs, flux-source-controller, envoy-gateway, flux, k9s, trivy, zarf...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: kots, buf, newrelic-infrastructure-agent, buildah, rancher, docker, k8sgpt, grafana, amazon-cloudwatch-agent, grafana-alloy, cri-tools, amazon-cloudwatch-agent-operator, melange, aws-otel-collector, ko, zot, undock, opentelemetry-collector-contrib, skopeo,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: kots, buildah, rancher, grafana, amazon-cloudwatch-agent, grafana-alloy, cri-tools, amazon-cloudwatch-agent-operator, aws-otel-collector, ko, zot, undock, skopeo, spire-server, nerdctl, envoy-gateway, podman, opentelemetry-operator, trivy, datadog-agent,...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, litestream, gomplate, falcosidekick, tflint, temporal-server, bank-vaults, boring-registry, k8sgpt, jitsucom-bulker, zot, crossplane-provider-aws-firehose, spire-server, gitaly, trufflehog, velero, crossplane-provider-aws-dynamodb,...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: chezmoi, licenseclassifier, kine, oras, rancher, mesosphere-vsphere-csi, kaf, aws-flb-firehose, sriov-network-device-plugin, redpanda, zot, spire-server, regclient, gitaly, prometheus-operator, crane, cert-manager, nerdctl, hubble, extism, step-ca, datadog-agent, hel...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: mockgen, cfssl, docker-credential-ecr-login, kine, falcosidekick, protoc-gen-go-grpc, whereabouts, kubernetes-replicator, chisel, hubble, pguser, crossplane-provider-aws-cloudformation, runc, go-jsonnet, git-sync, harbor-registry, s5cmd, sftpgo-plugin-auth,...

CLEANSTART-2026-NA71469 Security fixes in syft 1.43.0-r1

Package syft version 1.43.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips, authentik, authentik-fips...

osv-scanner v2.5.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

vet v1.18.0

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...

dep-scan v6.3.0

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

vuln-scanner-agent

vuln-scanner-agent A multi-agent vulnerability scanner for Gi...

@arnica-io/dependency-scan (>=1.0.30, <=1.0.33), @herodevs/cli (>=1.0.0-beta.2, <=2.0.0-beta.4) +2 more potentially affected by unknown CVE via @cyclonedx/cdxgen (>=10.11.0, <=11.11.0)

@cyclonedx/cdxgen NPM version =10.11.0, =1.0.30, =1.0.0-beta.2, =0.10.0, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-QHH4-458H-XWH2...

security-review-skill

Security Review Skill for Claude Code A comprehensive securit...

EUVD-2019-6558

Malware in sbrugna...

DependencyCheck

This is an open-source project for a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies. The project is called OWASP dependency-check. The project is written in Java and is designed to be used in a variety of environments, including...