GO-2024-2493 vulnerabilities

Vulnerabilities for packages: conftest, skaffold, kaniko, guac, trivy, kubescape, zot, buildkitd, scorecard, docker...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: buildah, k3s, ctop, k8s-device-plugin, kubernetes, syft, runc, grype, neuvector-scanner, podman, grafana-alloy, cadvisor, opentelemetry-collector-contrib, docker...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: buildah, k3s, azure-ipam, rootlesskit, datadog-agent, flannel, istio, kuma, nerdctl, containerd, buildkitd, podman, multus-cni, calico, docker...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: buf, k3d, kaniko, melange, syft, dagger, wolfictl, grype, neuvector-scanner, harbor-scanner-trivy, helm-push, cri-tools, policy-controller, docker-compose...

GO-2025-4188 vulnerabilities

Vulnerabilities for packages: src-fingerprint, aws-flb-firehose, kubeflow, sonobuoy, gostatsd, docker-credential-gcr, go-discover, aws-flb-cloudwatch, hello-world-golang, kpt, newrelic-nri-statsd, php-fpmexporter, terraform-provider-google, neuvector-dbgen, kube-fluentd-operator, aws-flb-kinesis,...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: openfga, aws-otel-collector, dagger, falcoctl, nerdctl, opentelemetry-collector, splunk-otel-collector, opentelemetry-collector-contrib, trufflehog, zarf, osv-scanner, syft, trivy, wolfictl, grype, melange, docker-compose, buildah, buf, docker-cli-buildx, k9s, apko,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: bazelisk, kubecolor, aws-node-termination-handler, maru, kube-bench, cluster-api-gcp-controller, hivemind, mesosphere-vsphere-csi, nerdctl, cluster-api-helm-controller, ko, rancher-system-agent, cluster-api-provider-vsphere, speedtest-go, terraform-provider-random,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: bazelisk, kubecolor, aws-node-termination-handler, maru, kube-bench, cluster-api-gcp-controller, hivemind, mesosphere-vsphere-csi, nerdctl, cluster-api-helm-controller, ko, rancher-system-agent, cluster-api-provider-vsphere, speedtest-go, terraform-provider-random,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: bazelisk, kube-bench, kubewatch, nerdctl, newrelic-infrastructure-agent, speedtest-go, temporal, kubevela, nri-cassandra, newrelic-fluent-bit-output, kaf, volume-modifier-for-k8s, flux-helm-controller, ip-masq-agent, go-md2man, mockery, cue, oras, fq, slsa-verifier,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: libnvidia-container, step-ca, hcloud, crossplane-provider-aws-elasticache, aws-node-termination-handler, datadog-agent, crossplane-provider-aws-sns, kube-bench, kuma, cluster-api-helm-controller, kubescape, speedtest-go, temporal, kubevela,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: step-ca, kubewatch, nerdctl, ko, kubescape, temporal, kaf, frp, flux-helm-controller, cosign, fq, weaviate, slsa-verifier, crossplane-provider-family-azure, kubeflow-katib, temporal-ui-server, kots, nri-mssql, step, vexctl, melange, pulumi, mongo-tools,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: conftest, dagger, ko, kubescape, cilium-cli, tkn, syft, trivy, wolfictl, grype, aactl, melange, docker-compose, buf, kargo, zot, buildkitd, cadvisor, ctop, kaniko, crossplane, spire-server, up...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitea, hcloud, crossplane-provider-aws-elasticache, datadog-agent, crossplane-provider-aws-sns, nerdctl, ko, cilium, kubescape, opentelemetry-collector, kaf, crossplane-provider-aws-route53, flux-notification-controller, crossplane-provider-aws-rds, chezmoi, cosign,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, falcoctl, ko, kubescape, neuvector-sigstore-interface, tflint, teleport, cosign, gitsign, tkn, zarf, ratify, flux-source-controller, aactl, vexctl, docker-cli-buildx, skaffold, tekton-chains, sigstore-scaffolding, zot, gh, policy-controller,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, falcoctl, ko, kubescape, neuvector-sigstore-interface, tflint, teleport, cosign, gitsign, tkn, zarf, slsa-verifier, kyverno, trivy, ratify, flux-source-controller, aactl, vexctl, docker, docker-cli-buildx, skaffold, tekton-chains,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, maru, crossplane-provider-aws-sns, cluster-api-gcp-controller, kube-bench, kuma, mesosphere-vsphere-csi, nerdctl, postgres-operator, rancher-system-agent, redis-operator, clickhouse-operator, newrelic-fluent-bit-output, blobfuse2,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, falcoctl, ko, kubescape, rekor, neuvector-sigstore-interface, tflint, teleport, cosign, gitsign, tkn, zarf, slsa-verifier, trivy, ratify, flux-source-controller, aactl, vexctl, docker, skaffold, tekton-chains, sigstore-scaffolding, zot, buildkit...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: libnvidia-container, kubecolor, kube-bench, rancher-system-agent, cluster-api-helm-controller, ko, cluster-api-provider-vsphere, clickhouse-operator, ip-masq-agent, rancher-system-upgrade-controller, gptscript, ratify, gcsfuse, kubeflow-katib, wal-g, envconsul,...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, falcoctl, ko, kubescape, rekor, neuvector-sigstore-interface, tflint, teleport, cosign, gitsign, tkn, zarf, slsa-verifier, trivy, ratify, flux-source-controller, aactl, vexctl, docker, skaffold, tekton-chains, sigstore-scaffolding, zot, buildkit...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: libnvidia-container, step-ca, hcloud, kubecolor, kube-bench, kubewatch, ko, kubescape, newrelic-fluent-bit-output, kaf, frp, volume-modifier-for-k8s, flux-notification-controller, ip-masq-agent, go-md2man, mockery, cosign, cue, oras, timoni, spqr, dask-gateway, flyte...