GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, docker-credential-acr-env-fips, dgraph, docker-credential-acr-env...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, gitness, dgraph...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, delve, ctop, kubernetes-replicator, crossplane-provider-aws-kms, knative-serving, grafana-rollout-operator, kubeflow, temporal-ui-server, controller-gen, opa, crossplane-provider-aws-cloudformation, glab, grafana-operator, cluster-api,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: up, wireguard-go, temporal-ui-server, kubeflow, flux-image-automation-controller, gitness, falcoctl, fulcio, cfssl, atlantis, git-lfs, cilium-cli, spire-server, aactl, terragrunt, caddy, helm, terraform-provider-aws, crossplane-provider-azure-authorization, rekor,...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, delve, ctop, wireguard-go, ip-masq-agent, gitness, oras, opa, falcoctl, lazygit, capslock, glab, grafana-operator, fulcio, kyverno-policy-reporter-kyverno-plugin, skaffold, go-md2man, cfssl, atlantis, configmap-reload, mkcert, snyk-cli,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: delve, aws-sigv4-proxy, neuvector-sigstore-interface, yunikorn-k8shim, fulcio, cluster-proportional-autoscaler, kubernetes-csi-driver-hostpath, flannel, rancher-loglevel, tofu-controller, kubernetes-csi-livenessprobe, nfs-subdir-external-provisioner, manifest-tool,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: delve, ctop, kubernetes-replicator, wireguard-go, aws-sigv4-proxy, ip-masq-agent, kubeflow, neuvector-sigstore-interface, protoc-gen-go, oras, controller-gen, spire-controller-manager, terraform-provider-random, falcoctl, renovate, capslock, vault-env, yunikorn-k8shi...