GO-2026-4942 vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, portieris, argocd-image-updater, kots...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: gitlab-elasticsearch-indexer-fips, gitlab-elasticsearch-indexer, gitaly, teleport, vault-fips, vault, commercial-grafana, envoy-gateway-fips...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kine, k3s, envoy-gateway, commercial-expanso-edge, spire-server, kots, commercial-chainloop-backend, commercial-grafana, envoy-gateway-fips...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, argocd-image-updater, kots, portieris, portieris-fips, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater-fips, envoy-gateway-fips...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, argocd-image-updater, kots, portieris, portieris-fips, gitlab-rails-ce-fips, gitlab-rails-ce, argocd-image-updater-fips, envoy-gateway-fips...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kubescape-server, vcluster-fips, helm-operator, cilium-cli, kube-mgmt-fips, consul-k8s, helm-set-status, crossplane-fips, zarf-fips, headlamp, linkerd2-fips, helm-mapkubeapis, kube-arangodb-fips, k8ssandra-client, argocd-image-updater-fips, ratify,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: zot, rancher-fleet, steampipe, gptscript, gitness, terraform, kubescape-operator, podman, trufflehog, xeol, nsc, zarf, nuclei, trivy, envoy-gateway, opentofu, gitleaks, terragrunt, undock, tflint, guac, vcluster, filebrowser, trivy-operator, grafana-alloy, k9s...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: envoy-gateway, kine, spire-server, kots, k3s...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zot, rancher-fleet, k8sgpt, helm-docs, pluto, linkerd2, cilium-cli, cluster-api-helm-controller, flux-source-controller, zarf, cerbos, helm-push, chartmuseum, helm-operator, chart-testing, flux-helm-controller, trivy, envoy-gateway, cert-manager-cmctl,...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, portieris, argocd-image-updater, kots...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: zot, gitness, envoy-gateway, portieris, argocd-image-updater, kots...

GO-2026-6007 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway...

GO-2026-6011 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway...

GO-2026-6009 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway...

GO-2026-6005 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway...

GO-2026-6003 Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway...

GO-2026-6006 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway...

GO-2026-6008 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

Envoy Gateway: OCI layer extraction allocates makebyte, h.Size from untrusted tar header in github.com/envoyproxy/gateway...