CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: tigera-operator, rancher-agent, falco-no-driver, kubescape-operator, rancher-helm, k8sgpt, gatekeeper, kaniko, manifest-tool, fuse-overlayfs-snapshotter, scorecard, zot, skaffold, kargo, trivy, kubevela, zarf, neuvector-scanner, docker-compose, syft, helm-set-status,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: helm-push, trivy, kubevela, chartmuseum, kots, k9s, kubescape, zarf, flux-source-controller, k8sgpt, zot, eksctl, flux-helm-controller, cilium-cli, up, helm-operator...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: helm-push, trivy, kubevela, chartmuseum, kots, k9s, kubescape, zarf, flux-source-controller, k8sgpt, zot, eksctl, flux-helm-controller, cilium-cli, up, helm-operator...

GO-2025-3601 vulnerabilities

Vulnerabilities for packages: consul-k8s, harbor-fips, k8ssandra-client, k9s, flux-fips, cert-manager-cmctl-fips, helm-docs, zarf, eksctl, cilium-cli, helm-push, flux, trivy-fips, kuma, cluster-api-helm-controller, consul-k8s-fips, flux-helm-controller, cert-manager-cmctl,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kaniko, buildkitd, newrelic-infrastructure-agent, k3d, eksctl, k8sgpt, cilium-cli, ctop, skaffold, grype, helm-push, melange, helm, fuse-overlayfs-snapshotter, flux-helm-controller, up, kubevela, gitness, flux-source-controller, trivy, kots, kubescape, zot...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: envoy-gateway, linkerd2, chaos-mesh, kubescape-server-fips, trivy-operator-fips, kyverno, vcluster-fips, cluster-api-helm-controller, zarf-fips, rancher-fleet, commercial-kyverno, kyverno-notation-aws-fips, kube-arangodb-fips, ratify, helm-operator-fips, gogatekeeper...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: k8sgpt, ollama, tempo, terraform-mcp-server, teleport, witness, minio, terragrunt, loki, goreleaser, cri-tools, maru, kubevela, mcp-grafana, grafana, prometheus, opentelemetry-collector-contrib, grafana-alloy, redpanda, nuclei, dgraph, dagger, weaviate, lazygit,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux-helm-controller, cilium-cli, flux, zot, chart-testing, trivy, zarf, cert-manager-cmctl, tw, helm-docs, pluto, kubescape, kots, flux-source-controller, helm-push, chartmuseum, helm-operator, cluster-api-helm-controller, k8ssandra-client, k9s, eksctl...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-push, trivy, k8sgpt, kubevela, zarf, chartmuseum, up, flux-helm-controller, cilium-cli, helm-operator, k9s, kubescape, zot, eksctl, kots...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-push, trivy, k8sgpt, kubevela, zarf, chartmuseum, up, flux-helm-controller, cilium-cli, helm-operator, k9s, kubescape, zot, eksctl, kots...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: k8sgpt, ctop, flux-helm-controller, cilium-cli, kaniko, melange, fuse-overlayfs-snapshotter, zot, skaffold, trivy, kubevela, gitness, newrelic-infrastructure-agent, up, buildkitd, kubescape, helm, kots, flux-source-controller, grype, helm-push, k3d, eksctl...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: envoy-gateway, rancher-helm, k8sgpt, flux-helm-controller, cilium-cli, zot, chart-testing, kargo, trivy, zarf, cerbos, cert-manager-cmctl, tw, istio, helm-docs, pluto, linkerd2, kots, flux-source-controller, rancher-fleet, helm-push, chartmuseum, helm-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, atlantis, crossplane-provider-aws-route53, buildah, cilium-cli, melange, gomplate, flux, terragrunt, crossplane-provider-azure-authorization, kubernetes-dashboard, splunk-otel-collector, mattermost, step-issuer, spire-server, podman,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, kubeflow-katib, cfssl, redka, runc, kube-bench, nri-mongodb, ctop, wave, bom, cilium-cli, manifest-tool, terraform-provider-time, redis-operator, vertical-pod-autoscaler, pgtimetable, volume-modifier-for-k8s, blobfuse2,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kube-bench, gcsfuse, bom, cilium-cli, flux, kubernetes-dashboard, cloud-sql-proxy, rabbitmq-cluster-operator, harbor-cli, aws-eks-pod-identity-agent, lazydocker, undock, cloud-provider-vsphere, kapp, nri-redis, spire-controller-manager, thanos-operato...

CVE-2026-48978 vulnerabilities

Vulnerabilities for packages: envoy-gateway, linkerd2, chaos-mesh, kubescape-server-fips, trivy-operator-fips, kyverno, vcluster-fips, cluster-api-helm-controller, zarf-fips, rancher-fleet, commercial-kyverno, kyverno-notation-aws-fips, kube-arangodb-fips, ratify, helm-operator-fips, gogatekeeper...

CVE-2026-50162 vulnerabilities

Vulnerabilities for packages: envoy-gateway, linkerd2, chaos-mesh, kubescape-server-fips, trivy-operator-fips, kyverno, vcluster-fips, cluster-api-helm-controller, zarf-fips, rancher-fleet, commercial-kyverno, kyverno-notation-aws-fips, kube-arangodb-fips, ratify, helm-operator-fips, gogatekeeper...

GHSA-VH4V-2XQ2-G5CG vulnerabilities

Vulnerabilities for packages: envoy-gateway, linkerd2, chaos-mesh, kubescape-server-fips, trivy-operator-fips, kyverno, vcluster-fips, cluster-api-helm-controller, zarf-fips, rancher-fleet, commercial-kyverno, kyverno-notation-aws-fips, kube-arangodb-fips, ratify, helm-operator-fips, gogatekeeper...

GHSA-8XWF-RJM4-XVHV vulnerabilities

Vulnerabilities for packages: envoy-gateway, linkerd2, chaos-mesh, kubescape-server-fips, trivy-operator-fips, kyverno, vcluster-fips, cluster-api-helm-controller, zarf-fips, rancher-fleet, commercial-kyverno, kyverno-notation-aws-fips, kube-arangodb-fips, ratify, helm-operator-fips, gogatekeeper...

GHSA-XF85-363P-868W vulnerabilities

Vulnerabilities for packages: envoy-gateway, linkerd2, chaos-mesh, kubescape-server-fips, trivy-operator-fips, kyverno, vcluster-fips, cluster-api-helm-controller, zarf-fips, rancher-fleet, commercial-kyverno, kyverno-notation-aws-fips, kube-arangodb-fips, ratify, helm-operator-fips, gogatekeeper...