12291 matches found
GO-2025-3830 vulnerabilities
Vulnerabilities for packages: zarf, osv-scanner, k9s, wolfictl, opentelemetry-collector-contrib, falcoctl, spire-server, trufflehog, kargo, grype, syft, tw, opentelemetry-collector, aws-otel-collector, goreleaser, apko, dagger, buildkitd, melange, docker-compose, splunk-otel-collector, buildah,...
GO-2025-4008 vulnerabilities
Vulnerabilities for packages: kube-vip-cloud-provider, terraform-provider-azuread, protoc-gen-go-grpc, cluster-api-provider-vsphere, manifest-tool, mods, trillian, whereabouts, wire-go, jitsucom-bulker, kubernetes-csi-driver-hostpath, xcover, octo-sts, slsa-verifier, tfsec, fulcio, pgpool2exporte...
GO-2025-4013 vulnerabilities
Vulnerabilities for packages: kube-vip-cloud-provider, terraform-provider-azuread, protoc-gen-go-grpc, cluster-api-provider-vsphere, manifest-tool, mods, trillian, whereabouts, wire-go, jitsucom-bulker, kubernetes-csi-driver-hostpath, xcover, octo-sts, slsa-verifier, tfsec, fulcio, pgpool2exporte...
GO-2024-2598 vulnerabilities
Vulnerabilities for packages: nri-nagios, kubeflow-pipelines, gitness, protoc-gen-go-grpc, wire-go, aws-flb-kinesis, trillian, k8sgpt, yam, dataplaneapi, fuse-overlayfs-snapshotter, slsa-verifier, cri-tools, flux-image-reflector-controller, lazygit, k3d, temporal-ui-server, speedtest-go, nodetain...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: zarf, kubeflow-pipelines, cloudnative-pg, crossplane-provider-aws-ec2, terraform-provider-grafana, manifest-tool, aws-flb-kinesis, descheduler, jitsucom-bulker, octo-sts, fuse-overlayfs-snapshotter, kaniko, opa-envoy, slsa-verifier, grafana, pgpool2exporter, cri-tool...
GO-2024-2659 vulnerabilities
Vulnerabilities for packages: wolfictl, kaniko, ctop, conftest, spire-server, crossplane, kargo, grype, syft, dagger, buildkitd, melange, docker-compose, cilium-cli, tkn, cadvisor, kubescape, up, zot, trivy, buf, aactl, ko...
GO-2023-2402 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, gitness, trillian, k8sgpt, slsa-verifier, fulcio, flux-image-reflector-controller, k3d, temporal-ui-server, secrets-store-csi-driver-provider-azure, flux-image-automation-controller, step, actions-runner-controller, kubernetes-event-exporter, apko...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: zarf, crossplane-provider-aws-ec2, mods, k8sgpt, slsa-verifier, gitlab-kas, fulcio, act, flux-image-automation-controller, docker-machine-driver-linode, loki, podman, syft, step, nuclei, apko, chezmoi, tflint, ksops, buildah, crossplane-provider-aws-dynamodb, openbao...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: zarf, policy-controller, skaffold, flux-source-controller, vexctl, falcoctl, spire-server, tekton-chains, neuvector-sigstore-interface, kyverno-notation-aws, goreleaser, witness, gitsign, sigstore-scaffolding, gh, tflint, teleport, tkn, ratify, cosign, kubescape,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: kube-vip-cloud-provider, kubeflow-pipelines, gitness, blobfuse2, crossplane-provider-aws-ec2, manifest-tool, aws-flb-kinesis, mods, whereabouts, descheduler, octo-sts, fuse-overlayfs-snapshotter, slsa-verifier, langfuse, tfsec, pgpool2exporter, clickhouse-operator,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: zarf, policy-controller, kyverno, slsa-verifier, skaffold, flux-source-controller, vexctl, falcoctl, spire-server, docker, tekton-chains, crossplane, neuvector-sigstore-interface, kyverno-notation-aws, goreleaser, witness, buildkitd, gitsign, sigstore-scaffolding,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: wire-go, cluster-api-provider-vsphere, rclone, k8sgpt, kubernetes-csi-driver-hostpath, fulcio, clickhouse-operator, kubernetes-csi-external-health-monitor, k3d, kapp, nodetaint, portieris, ip-masq-agent, kpt, nova, nri-nginx, nuclei, chart-testing,...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: zarf, policy-controller, rekor, slsa-verifier, skaffold, flux-source-controller, vexctl, falcoctl, spire-server, docker, tekton-chains, neuvector-sigstore-interface, kyverno-notation-aws, goreleaser, witness, buildkitd, gitsign, sigstore-scaffolding, trivy-operator,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: zarf, policy-controller, rekor, slsa-verifier, skaffold, flux-source-controller, vexctl, falcoctl, spire-server, docker, tekton-chains, neuvector-sigstore-interface, kyverno-notation-aws, goreleaser, witness, buildkitd, gitsign, sigstore-scaffolding, trivy-operator,...
GO-2024-2825 vulnerabilities
Vulnerabilities for packages: gitness, wire-go, mods, rclone, trillian, k8sgpt, jitsucom-bulker, grafana-agent-operator, kubernetes-csi-driver-hostpath, fuse-overlayfs-snapshotter, tfsec, fulcio, cri-tools, flux-image-reflector-controller, lazygit, k3d, secrets-store-csi-driver-provider-azure,...
ReconTitan
A security-hardened platform for external reconnaissance, OSIN...
VulnCheck KEV: CVE-2026-45298
Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy the documented quickstart, no DOZZLEAUTHPROVIDER set, POST /api/notifications/test-webhook is reachable without authentication and forwards an attacker-controlled URL into a WebhookDispatcher that...
wp-forge
wp-forge wp-forge scans WordPress.org plugins for serious PHP...