GO-2024-2618 vulnerabilities

Vulnerabilities for packages: falcosidekick-fips, falcosidekick, guac...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, atlantis, authservice, loki-fips, traefik-fips, dapr, keda, argo-cd, splunk-otel-collector-fips, kots, dapr-fips, fluent-bit-plugin-loki, gitea, oauth2-proxy, splunk-otel-collector, falcosidekick, gitea-fips, loki, mattermost-fip...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: kube-bench-fips, trillian-fips, kine, argo-workflows, ferretdb, caddy, argo-workflows-fips, step-ca, kots, trillian, step, caddy-fips, wavefront-collector-for-kubernetes, temporal-server-fips, src, spicedb, falcosidekick-fips, k3s, temporal-server, amass, kube-bench...

GO-2024-2618 vulnerabilities

Vulnerabilities for packages: falcosidekick, guac...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dex, ferretdb, terraform-provider-google, kargo, hubble-ui, spire-server, cloudnative-pg, spicedb, cilium-cli, temporal, kots, opentelemetry-collector, certificate-transparency, cert-manager-cmctl, guac, opa, smarter-device-manager, spegel, vcluster, k8sgpt, tflint,...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: falcosidekick, minio, bento...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: authservice, oauth2-proxy, fluent-bit-plugin-loki, gitea, falcosidekick, atlantis, splunk-otel-collector, kots...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, whereabouts, postgres-operator,...

CVE-2026-41602 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, seaweedfs-rocksdb, opentelemetry-collector-contrib-fips, peerdb-flow, beats, datadog-agent-fips, apm-server, commercial-expanso-edge, jitsucom-bulker, aws-otel-collector, telegraf, amazon-cloudwatch-agent-fips, aws-otel-collector-fips,...

GHSA-WF45-Q9CH-Q8GH vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb-fips, seaweedfs-rocksdb, opentelemetry-collector-contrib-fips, peerdb-flow, beats, datadog-agent-fips, apm-server, commercial-expanso-edge, jitsucom-bulker, aws-otel-collector, telegraf, amazon-cloudwatch-agent-fips, aws-otel-collector-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: kuma, goose, spire-server-fips, gitlab-kas, gitaly, vault-fips, argo-workflows, dapr, caddy, teleport, step-ca, chainloop-control-plane-fips, gitness, kots, grafana-alloy-fips, goose-fips, flyte, pgtimetable, commercial-chainloop-backend, openbao, src, temporal-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, sbom-convert, whereabouts,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: authservice, cortex, sbom-convert, postgres-operator, age, container-object-storage-interface, cluster-autoscaler, steampipe, timoni, kube-logging-operator, kuma, nri-haproxy, cargobump, kyverno-policy-reporter-kyverno-plugin, sbom-scorecard, aws-flb-kinesis,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: authservice, cortex, sbom-convert, postgres-operator, age, container-object-storage-interface, cluster-autoscaler, steampipe, timoni, kube-logging-operator, kuma, nri-haproxy, cargobump, kyverno-policy-reporter-kyverno-plugin, sbom-scorecard, aws-flb-kinesis,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, whereabouts, postgres-operator,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, aws-privateca-issuer, policy-controller, swagger, cortex, kubelet-csr-approver, juicefs, spire-server, kserve-modelmesh-serving, spire-controller-manager, crossplane-provider-sql, sbom-convert, whereabouts,...

CLEANSTART-2026-SB25660 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

Multiple security vulnerabilities affect the falcosidekick-fips package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. See references for individual vulnerability details...

GHSA-32FW-GQ77-F2F2 vulnerabilities

Vulnerabilities for packages: falcosidekick, minio, bento...

CVE-2025-10543 vulnerabilities

Vulnerabilities for packages: falcosidekick, minio, bento...

GHSA-32FW-GQ77-F2F2 vulnerabilities

Vulnerabilities for packages: beats-fips, influxd, minio, zabbix-agent2, beats, dapr-fips, falcosidekick-fips, elastic-agent, agentbeat, dapr, minio-fips, telegraf, falcosidekick, agentbeat-fips, elastic-agent-fips, zabbix-agent2-fips, bento...