GO-2026-4942 vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: k3s, kots, envoy-gateway-fips, commercial-expanso-edge, envoy-gateway, commercial-chainloop-backend, kine, commercial-grafana, spire-server...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, teleport, vault-fips, vault, gitaly, commercial-grafana...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: portieris, gitlab-rails-ce, gitlab-rails-ce-fips, argocd-image-updater-fips, kots, gitness, envoy-gateway-fips, zot, argocd-image-updater, portieris-fips, envoy-gateway...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: portieris, gitlab-rails-ce, gitlab-rails-ce-fips, argocd-image-updater-fips, kots, gitness, envoy-gateway-fips, zot, argocd-image-updater, portieris-fips, envoy-gateway...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: chaos-mesh, drone-fips, eksctl, helm-exporter, consul-k8s, zarf-fips, redpanda-operator, tigera-operator-fips, cloudbeat-fips, argocd-image-updater-fips, chaos-mesh-fips, kyverno, trivy, k9s-fips, trivy-fips, tigera-operator, jfrog-cli, steampipe, vcluster-fips,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: grafana-alloy, kubescape-operator, rancher-fleet, zarf, vcluster, tflint, filebrowser, undock, terragrunt, trivy, terraform, opentofu, steampipe, trivy-operator, k9s, zot, gitness, guac, xeol, trufflehog, nsc, podman, envoy-gateway, gitleaks, nuclei, gptscript...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kots, kine, envoy-gateway, spire-server, k3s...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-fleet, pluto, zarf, flux-helm-controller, helm-operator, helm-push, trivy, istio, chartmuseum, kots, helm-docs, k9s, flux-source-controller, zot, linkerd2, k8sgpt, tw, envoy-gateway, rancher-helm, cerbos, eksctl, cilium-cli, k8ssandra-client, kargo,...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: kots, portieris, envoy-gateway, zot, gitness, argocd-image-updater...

GO-2026-6009 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway...

GO-2026-6007 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway...

GO-2026-6011 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway...

GO-2026-6005 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway...

GO-2026-6003 Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway...

GO-2026-6008 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

Envoy Gateway: OCI layer extraction allocates makebyte, h.Size from untrusted tar header in github.com/envoyproxy/gateway...

GO-2026-6006 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway...