GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: dgraph, docker-credential-acr-env, gitness, docker-credential-acr-env-fips...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, docker-credential-acr-env, dgraph...

GO-2025-4188 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, neuvector-dbgen, kubeflow, aws-flb-cloudwatch, kpt, kube-fluentd-operator, smokescreen, go-discover, hello-world-golang, newrelic-nri-statsd, sonobuoy, gostatsd, aws-flb-kinesis, src-fingerprint, php-fpmexporter, terraform-provider-google,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, nri-prometheus, envoy-ratelimit, controller-gen, prometheus-operator, speedtest-go, nerdctl, gomplate, helm-operator, docker-credential-gcr, aws-flb-firehose, kubevela, newrelic-infrastructure-agent, kube-state-metrics, dagger,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, crossplane-provider-aws-sns, ksops, coredns, cloud-provider-azure, neuvector-dbgen, act, controller-gen, atlantis, nri-prometheus, redpanda, terraform-provider-grafana, speedtest-go, gomplate, kyverno, spqr, chisel, grafana-alloy,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: amass, terraform-provider-aws, atlantis, nerdctl, gomplate, sigstore-scaffolding, spire-server, frp, kube-state-metrics, git-lfs, kube-fluentd-operator, kubernetes, src-fingerprint, cilium-cli, buf, fulcio, libssh2, crossplane-provider-aws, ferretdb, terraform-docs,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: headlamp, controller-gen, prometheus-operator, ipfs-cluster, grafana-alloy, helm-operator, docker-credential-gcr, aws-application-networking-k8s, pluto, steampipe, cni-plugins, cilium-cli, fulcio, neuvector-sigstore-interface, mockgen, nova, prometheus, kapp,...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, ksops, nri-prometheus, flux-notification-controller, atlantis, gomplate, ghaudit, spqr, helm-operator, docker-credential-gcr, redka, spicedb, frp, kube-state-metrics, git-lfs, fuse-overlayfs-snapshotter, src-fingerprint, overmind, cilium-cl...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, coredns, cloud-provider-azure, terraform-provider-aws, envoy-ratelimit, flux-notification-controller, atlantis, redpanda, prometheus-operator, nerdctl, kyverno, spqr, x509-certificate-exporter, syft, newrelic-infrastructure-agent,...

EUVD-2026-9077

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using filepath.Joindest, cleanedName without enforcing that the final path stays within dest. A ta...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, neuvector-dbgen, kubeflow, aws-flb-cloudwatch, kpt, kube-fluentd-operator, smokescreen, go-discover, hello-world-golang, newrelic-nri-statsd, sonobuoy, gostatsd, aws-flb-kinesis, src-fingerprint, php-fpmexporter, terraform-provider-google,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, neuvector-dbgen, kubeflow, aws-flb-cloudwatch, kpt, kube-fluentd-operator, smokescreen, go-discover, hello-world-golang, newrelic-nri-statsd, sonobuoy, gostatsd, aws-flb-kinesis, src-fingerprint, php-fpmexporter, terraform-provider-google,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: headlamp, ipfs-cluster, gomplate, spqr, steampipe, kubernetes, external-dns, aws-flb-cloudwatch, harbor, nri-memcached, openbao, ingress-nginx-controller, pdfcpu, nri-cassandra, sonobuoy, thanos-operator, rootlesskit, opensearch-k8s-operator, newrelic-infra-operator,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: headlamp, ipfs-cluster, gomplate, spqr, steampipe, kubernetes, external-dns, aws-flb-cloudwatch, harbor, nri-memcached, openbao, ingress-nginx-controller, pdfcpu, nri-cassandra, sonobuoy, thanos-operator, rootlesskit, opensearch-k8s-operator, newrelic-infra-operator,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: atlantis, ipfs-cluster, spqr, kubevela, fulcio, conjur-cli, mockgen, ferretdb, harbor, metacontroller, kwok, sonobuoy, thanos-operator, rootlesskit, opensearch-k8s-operator, mongodb-kubernetes-operator, skaffold, grpcurl, nuclei, smarter-device-manager,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, amass, kubelet-csr-approver, neuvector-dbgen, nri-prometheus, controller-gen, atlantis, speedtest-go, restic, ipfs-cluster, nerdctl, ghaudit, spqr, chisel, k6, docker-credential-gcr, redka, kubevela, kubernetes-csi-external-attacher,...