GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: dgraph, gitness, docker-credential-acr-env-fips, docker-credential-acr-env...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: docker-credential-acr-env, gitness, dgraph...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, gosu, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, thanos-operator, cargobump,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, gosu, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, thanos-operator, cargobump,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: continuity, temporal-ui-server, nri-kubernetes, snyk-cli, neuvector-dbgen, podinfo, flannel, envconsul, pulumi-kubernetes-operator, rancher-webhook, percona-server-mongodb-operator, speedtest-go, libnvidia-container, gomplate, terragrunt, rancher-fleet,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: kubewatch, oauth2-proxy, temporal-ui-server, kube-rbac-proxy, gomplate, terragrunt, temporal-server, spire-server, crossplane-provider-azure-managedidentity, tkn, cfssl, conftest, secrets-store-csi-driver, certificate-transparency, rqlite, git-lfs, grype,...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, go-md2man, kubewatch, mage, metacontroller, oauth2-proxy, snyk-cli, oras, gosu, flannel, pulumi-kubernetes-operator, dive, newrelic-fluent-bit-output, tempo, mc, libnvidia-container, grafana-agent-operator, configmap-reload, gomplate, shfmt,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, gosu, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, thanos-operator, cargobump,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, thanos-operator, cargobump, iptables-wrappers...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, gosu, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, cargobump, iptables-wrappers,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, gosu, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, thanos-operator, cargobump,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, gosu, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, thanos-operator, cargobump,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: go-md2man, oauth2-proxy, metacontroller, fscrypt, mage, terraform-provider-azuread, oras, gosu, neuvector-dbgen, podinfo, envconsul, cluster-api-provider-vsphere, pulumi-kubernetes-operator, rancher-webhook, dive, speedtest-go, thanos-operator, cargobump,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, scanner-test-golang-vulnerability-fixed, knative-eventing, container-object-storage-interface, gobuster, spark-operator-fips, sigstore-scaffolding, external-secrets-operator-fips, jaeger, lazydocker, cilium-certgen, terraform-provider-tls,...