GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

PT-2026-80446

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, dgraph, docker-credential-acr-env-fips, docker-credential-acr-env...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: dgraph, docker-credential-acr-env, gitness...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nova, newrelic-nri-statsd, envconsul, timoni, neuvector-dbgen, nri-mssql, hcloud, external-secrets-operator, dynamic-localpv-provisioner, harbor, rancher-webhook, gostatsd, temporal-server, crossplane-provider-family-azure, vault-benchmark, multus-cni,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: up, trivy, boring-registry, ko, nri-mssql, fulcio, ferretdb, dynamic-localpv-provisioner, gitness, temporal-server, crossplane-provider-family-azure, flux-helm-controller, kubernetes-dashboard, bom, kubeflow, crossplane-provider-azure, sigstore-scaffolding,...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, trivy, go-md2man, boring-registry, newrelic-nri-statsd, ko, newrelic-prometheus-configurator, timoni, fulcio, ferretdb, dynamic-localpv-provisioner, gitness, gops, gostatsd, hcloud, multus-cni, kubernetes-dashboard, overmind,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, nova, kubernetes-dashboard-metrics-scraper, go-md2man, envconsul, boring-registry, newrelic-nri-statsd, ko, kuberlr, timoni, yunikorn-k8shim, cluster-api-provider-vsphere, neuvector-dbgen, fulcio, ferretdb, dynamic-localpv-provisioner, gops,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: prometheus-fips, kubernetes-csi-node-driver-registrar-fips, redka, kubernetes-csi-livenessprobe-fips, nfs-subdir-external-provisioner, git-credential-oauth, kuberlr, kustomize-fips, amass, aws-signer-notation-plugin-fips, kyverno-policy-reporter-plugins-trivy,...