GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5738 vulnerabilities

Vulnerabilities for packages: external-dns, k8sgateway...

GO-2026-5889 vulnerabilities

Vulnerabilities for packages: external-dns...

GO-2022-0646 vulnerabilities

Vulnerabilities for packages: mattermost, kots, external-secrets-operator, zot, loki, opentelemetry-collector, k3d...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: fulcio, zarf, k8sgpt, grpc-health-probe, spicedb, kots, terragrunt, kubernetes-csi-driver-hostpath, dbmate, ksops, melange, kaniko, opentelemetry-collector, falcosidekick, vcluster, gomplate, conftest, k3s, opentelemetry-collector-contrib, restic, kube-rbac-proxy,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: telegraf, gitaly, terragrunt, external-secrets-operator, kyverno, cerbos, scorecard, flux, argo-cd, syft, rancher-fleet, rclone, teleport...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: gitaly, terragrunt, external-secrets-operator, kyverno, cerbos, scorecard, argo-cd, syft, rancher-fleet, rclone, teleport...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: nfpm, crossplane, zarf, apko, k9s, kots, kyverno, melange, wolfictl, kaniko, trufflehog, argo-cd, rancher-fleet, teleport, gomplate, grafana-alloy, src-fingerprint, bom, pulumi-language-dotnet, chezmoi, flux-source-controller, gitsign, grype, external-secrets-operato...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: gosu, go-licenses, dataplaneapi, wazero, docker-cli, docker-credential-gcr, speedtest-go, temporal-ui-server, cri-tools, fq, oras, cfssl, php-fpmexporter, kube-logging-operator, flux-helm-controller, task, golangci-lint, grpcurl, gke-gcloud-auth-plugin, govulncheck,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, policy-controller, rancher-helm, azure-workload-identity-webhook, crossplane-provider-aws-cloudfront, gitlab-pages, polaris, neuvector-scanner, opentofu, terraform-provider-acme, cloud-provider-azure, dbmate, ksops, kaniko, speedtest-go,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: policy-controller, crossplane-provider-keycloak, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, temporal-ui-server, task, gitlab-kas, helm-push, azurefile-csi, multus-cni, flux, terraform-provider-random, k8s-device-plugin, containerd, dagdotdev,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: apko, sigstore-scaffolding, kube-logging-operator, flux-helm-controller, pulumi-language-dotnet, grpcurl, gke-gcloud-auth-plugin, kaf, zot, kubernetes-dashboard-metrics-scraper, kubernetes-dashboard, dynamic-localpv-provisioner, kubeflow-katib, flux, trust-manager,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: rancher-helm, gosu, ini-file, rancher-system-upgrade-controller, timestamp-authority, gitlab-pages, undock, apko, terraform-provider-acme, cloud-provider-azure, dbmate, kubernetes-csi-driver-nfs, speedtest-go, coredns, octo-sts, kubo, jitsucom-bulker,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: policy-controller, crossplane-provider-aws-cloudfront, gitlab-pages, apko, opentofu, terraform-provider-acme, melange, ksops, crossplane-provider-keycloak, crossplane-provider-azure-storage, crossplane-provider-family-aws, pulumi-language-dotnet, gitlab-kas,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: policy-controller, azure-workload-identity-webhook, docker-cli, crossplane-provider-keycloak, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, temporal-ui-server, oras, task, gitlab-kas, golangci-lint, postgres-operator, direnv, helm-push, multus-cni...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: hydra, policy-controller, rancher-helm, go-licenses, rancher-system-upgrade-controller, azure-workload-identity-webhook, crossplane-provider-aws-cloudfront, undock, whereabouts, opentofu, dbmate, ksops, kubernetes-csi-driver-nfs, docker-credential-gcr, octo-sts,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: ini-file, rancher-system-upgrade-controller, kubecolor, polaris, undock, opentofu, kubernetes-csi-driver-nfs, docker-cli, docker-credential-gcr, kubernetes-dashboard-auth, kyverno-notation-aws, kube-logging-operator, swagger, cni-plugins, gobump, zot,...

SUSE CVE-2026-73235

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader parses attacker-controlled Document.xml from a crafted .FCStd archive without disabling default external entity...

CVE-2026-34492: External Control of File Name or Path

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...