GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, dgraph, docker-credential-acr-env, docker-credential-acr-env-fips...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: dgraph, gitness, docker-credential-acr-env...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: skopeo, zot, gomplate, nri-kafka, buildkitd, fq, boring-registry, mongo-tools, hugo, kube-fluentd-operator, melange, trillian, dockerize, prometheus-adapter, apko, eksctl, prometheus-alertmanager, terraform-docs, gobuster, flux, crossplane-provider-aws, src,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: apache-exporter, azure-workload-identity-webhook, cloud-provider-azure, buildah, kubevela, skopeo, gomplate, cluster-api, docker-machine-driver-linode, aws-efs-csi-driver, nova, redka, cloud-sql-proxy, argo-events, kapp-controller, crossplane-provider-aws-sns,...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, mkcert, cue, skopeo, zot, docker-compose, gomplate, dive, aws-efs-csi-driver, kubernetes-dns-node-cache, redka, regclient, wait-for-port, buildkitd, boring-registry, paranoia, configmap-reload, mongo-tools, vertical-pod-autoscaler,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: ini-file, cue, iptables-wrappers, skopeo, docker-machine-driver-linode, nova, spire-controller-manager, fq, boring-registry, octo-sts, configmap-reload, mongo-tools, kubebuilder, container-object-storage-interface, kubernetes-csi-external-health-monitor,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port, custom-pod-autoscaler,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...