GHSA-6C5V-HQJR-5XXP vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, versitygw, dapr, keda-fips, opentelemetry-collector-contrib-fips, telegraf, trufflehog-fips, argo-events, nuclio-controller, falcosidekick, dapr-fips, trufflehog, versitygw-fips, minio-fips, falcosidekick-fips, guac, minio,...

GHSA-6C5V-HQJR-5XXP vulnerabilities

Vulnerabilities for packages: dapr, bento, opentelemetry-collector-contrib, telegraf, guac, minio, sftpgo-plugin-pubsub, keda, argo-events, falcosidekick, trufflehog...

GO-2026-6293 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, listmonk, temporal, kube-metrics-adapter, temporal-fips, temporal-ui-server, temporal-ui-server-fips, falcosidekick-ui, falcosidekick-ui-fips...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, listmonk, temporal, kube-metrics-adapter, temporal-fips, temporal-ui-server, temporal-ui-server-fips, falcosidekick-ui, falcosidekick-ui-fips...

GO-2024-2618 vulnerabilities

Vulnerabilities for packages: guac, falcosidekick, falcosidekick-fips...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: argo-cd, dapr, gitea-fips, oauth2-proxy, opentelemetry-collector-contrib-fips, kots, splunk-otel-collector, traefik-fips, loki, falcosidekick, argo-cd-fips, dapr-fips, atlantis, loki-fips, authservice, gitea, falcosidekick-fips, splunk-otel-collector-fips, juicefs,...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: step-ca, trillian-fips, src, spicedb, kube-bench, caddy-fips, trillian, kots, argo-workflows-fips, k3s, kine, kube-bench-fips, wavefront-collector-for-kubernetes, ferretdb, step, amass, argo-workflows, falcosidekick-fips, temporal-server-fips, caddy, temporal-server...

GO-2024-2618 vulnerabilities

Vulnerabilities for packages: falcosidekick, guac...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: vcluster, grafana-mimir, kube-rbac-proxy, kargo, step-ca, guac, tflint, step, terragrunt, fulcio, grpc-health-probe, kubernetes-csi-driver-hostpath, ferretdb, k3s, ksops, restic, temporal, dex, kaniko, grafana-agent-operator, cilium-cli, k8sgpt-operator, sops, kots,...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: gitea, fluent-bit-plugin-loki, falcosidekick, atlantis, oauth2-proxy, kots, splunk-otel-collector, authservice...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: minio, falcosidekick, bento...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, nri-haproxy, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt,...

GHSA-WF45-Q9CH-Q8GH vulnerabilities

Vulnerabilities for packages: nri-jmx-fips, dapr, milvus, elastic-agent, seaweedfs, beats-fips, grafana-alloy-fips, grafana, seaweedfs-fips, apm-server-fips, apm-server, jaeger-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-fips, seaweedfs-rocksdb-fips, telegraf, nri-kafka,...

CVE-2026-41602 vulnerabilities

Vulnerabilities for packages: nri-jmx-fips, dapr, milvus, elastic-agent, seaweedfs, beats-fips, grafana-alloy-fips, grafana, seaweedfs-fips, apm-server-fips, apm-server, jaeger-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-fips, seaweedfs-rocksdb-fips, telegraf, nri-kafka,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: teleport, keda-fips, seaweedfs, trillian-fips, openfga, step-issuer-fips, src, telegraf, openbao-fips, cloudprober, step-fips, temporal, harbor, argo-workflows-fips, splunk-otel-collector, gitlab-cng-fips, timescaledb-parallel-copy, rke2-cloud-provider, zitadel,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt, kubernetes-dashboard,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, hivemind, sriov-network-device-plugin, kubernetes-dashboard, kuberay-operator, terraform-mcp-server, kubernetes-dns-node-cache, sbomqs, spire-server, terraform-provider-pagerduty, hubble-ui, timescaledb-tune,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, opencost, hey, hivemind, sriov-network-device-plugin, kubernetes-dashboard, kuberay-operator, terraform-mcp-server, kubernetes-dns-node-cache, sbomqs, spire-server, terraform-provider-pagerduty, hubble-ui, timescaledb-tune,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, nri-haproxy, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt, kubernetes-dashboard,...