GO-2026-4942 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argocd-image-updater, zot, gitness, kots, portieris...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: vault, teleport, envoy-gateway-fips, commercial-grafana, vault-fips, gitaly...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: k3s, kine, spire-server, envoy-gateway-fips, commercial-grafana, envoy-gateway, commercial-expanso-edge, kots, commercial-chainloop-backend...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: helm-push, oras-fips, kubescape-operator, cloudbeat, falcoctl, gitlab-operator, gogatekeeper, consul-k8s-fips, kyverno-notation-aws, ocm-cli-fips, ocm-kubernetes-controller, oras, kyverno-fips, kyverno-notation-aws-fips, argocd-image-updater, jfrog-cli,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: portieris, gitness, argocd-image-updater-fips, gitlab-rails-ce-fips, argocd-image-updater, portieris-fips, gitlab-rails-ce, envoy-gateway-fips, envoy-gateway, kots, zot...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: portieris, gitness, argocd-image-updater-fips, gitlab-rails-ce-fips, argocd-image-updater, portieris-fips, gitlab-rails-ce, envoy-gateway-fips, envoy-gateway, kots, zot...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: gptscript, k9s, trufflehog, filebrowser, rancher-fleet, nuclei, kubescape-operator, zarf, gitleaks, envoy-gateway, xeol, grafana-alloy, opentofu, terraform, trivy, zot, gitness, vcluster, guac, undock, trivy-operator, nsc, podman, steampipe, terragrunt, tflint...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: envoy-gateway, spire-server, kine, kots, k3s...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k9s, rancher-fleet, kargo, helm-push, chart-testing, zarf, pluto, envoy-gateway, k8ssandra-client, cluster-api-helm-controller, helm-docs, cert-manager-cmctl, cerbos, k8sgpt, trivy, zot, cilium-cli, eksctl, flux-helm-controller, helm-operator, linkerd2, kots, tw,...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argocd-image-updater, zot, gitness, kots, portieris...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: envoy-gateway, argocd-image-updater, zot, gitness, kots, portieris...

GO-2026-6011 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway...

GO-2026-6009 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway...

GO-2026-6007 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway...

GO-2026-6005 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway...

GO-2026-6008 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

Envoy Gateway: OCI layer extraction allocates makebyte, h.Size from untrusted tar header in github.com/envoyproxy/gateway...

GO-2026-6003 Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway...

GO-2026-6006 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway...