GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubescape-operator, gitlab-kas, gatekeeper, cert-manager-istio-csr, spicedb-operator, helm-operator, kubernetes, spqr, azure-service-operator, k3s, cluster-api-azure-controller, zot, crossplane, apisix-ingress-controller, cluster-api-aws-controller,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kots, eksctl, k9s, kubescape, kubevela, zot, cilium-cli, flux-source-controller, k8sgpt, zarf, chartmuseum, trivy, up, helm-operator, helm-push, flux-helm-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: envoy-gateway, cert-manager-cmctl-fips, linkerd2, eksctl, rancher-helm, trivy-fips, cerbos, kargo, k8sgpt, rancher-fleet, chartmuseum, flux-helm-controller-fips, chart-testing-fips, cert-manager-cmctl, helm-operator, tw, envoy-gateway-fips, harbor, helm-docs,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kots, eksctl, k9s, kubescape, kubevela, zot, cilium-cli, flux-source-controller, k8sgpt, zarf, chartmuseum, trivy, up, helm-operator, helm-push, flux-helm-controller...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: librechat, grafana-rollout-operator, metacontroller, aws-ebs-csi-driver, victoriametrics-cluster-fips, victoriametrics-fips, aws-ebs-csi-driver-fips, victorialogs, localstack, podinfo, cluster-autoscaler-fips, flux-notification-controller, polaris,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: librechat, grafana-rollout-operator, metacontroller, aws-ebs-csi-driver, victoriametrics-cluster-fips, victoriametrics-fips, aws-ebs-csi-driver-fips, victorialogs, localstack, podinfo, cluster-autoscaler-fips, flux-notification-controller, polaris,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter-fips, etcd-fips, longhorn-share-manager, k6-fips, snyk-cli, gitlab-runner-fips, cue-fips, crossplane-provider-aws-efs-fips, dex-k8s-authenticator, terraform-provider-kubernetes, kube-metrics-adapter-fips, cilium-envoy-fips, temporal-serve...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: containerd-fips, openbao-k8s, prometheus-blackbox-exporter-fips, etcd-fips, snyk-cli, kargo, jitsucom-bulker, scorecard, dex-k8s-authenticator, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, temporal-server, kube-bench, zot,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: eksctl, helm-push, rancher-helm, flux, flux-source-controller, cluster-api-helm-controller, helm-docs, chartmuseum, helm-operator, kubescape, zarf, flux-helm-controller, k9s, cert-manager-cmctl, k8ssandra-client, cilium-cli, pluto, trivy, zot, chart-testing, tw, kots...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: zot, chartmuseum, up, kubevela, helm-operator, kubescape, zarf, eksctl, flux-helm-controller, helm-push, k9s, cilium-cli, kots, flux-source-controller, k8sgpt, trivy...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: zot, chartmuseum, up, kubevela, helm-operator, kubescape, zarf, eksctl, flux-helm-controller, helm-push, k9s, cilium-cli, kots, flux-source-controller, k8sgpt, trivy...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kubescape-operator, gogatekeeper, kubevela, melange, opa-envoy, eksctl, helm-push, rancher-helm, helm, flux-source-controller, cluster-api-helm-controller, k8sgpt, chartmuseum, docker, docker-compose, kaniko, fuse-overlayfs-snapshotter, helm-operator, helm-mapkubeapi...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kubevela, melange, eksctl, helm-push, helm, flux-source-controller, k8sgpt, kaniko, fuse-overlayfs-snapshotter, skaffold, kubescape, flux-helm-controller, ctop, cilium-cli, grype, gitness, trivy, zot, up, newrelic-infrastructure-agent, buildkitd, k3d, kots...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: istio, eksctl, helm-push, rancher-helm, flux-source-controller, k8sgpt, cluster-api-helm-controller, helm-docs, chartmuseum, helm-operator, zarf, kargo, flux-helm-controller, k9s, cert-manager-cmctl, k8ssandra-client, cilium-cli, pluto, linkerd2, trivy, zot, cerbos,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: src-fingerprint, flux-image-reflector-controller, falcoctl, kubevela, crossplane-provider-azure-storage, spire-server, step-ca, flux-kustomize-controller, crossplane-provider-azure-managedidentity, gomplate, ksops, skopeo, flux, flux-source-controller, grafana-mimir,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, flux-image-reflector-controller, mariadb-operator, smarter-device-manager, kubewatch, spire-server, volume-modifier-for-k8s, grafana-rollout-operator, oras, flux, aws-privateca-issuer, flux-source-controller, aws-load-balancer-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: src-fingerprint, kubevela, crossplane-provider-aws-iam, crossplane-provider-azure-managedidentity, argo-rollouts, gomplate, helm-push, pulumi-language-dotnet, helm, boring-registry, zarf, extism, nfpm, syft, gitness, zot, dagger, flux-image-automation-controller,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: src-fingerprint, kubevela, crossplane-provider-aws-iam, crossplane-provider-azure-managedidentity, argo-rollouts, gomplate, helm-push, pulumi-language-dotnet, helm, boring-registry, zarf, extism, nfpm, syft, gitness, zot, dagger, flux-image-automation-controller,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: istio, eksctl, helm-push, flux, flux-source-controller, k8sgpt, cluster-api-helm-controller, helm-docs, chartmuseum, helm-operator, helm-mapkubeapis, kubescape, zarf, kargo, flux-helm-controller, k9s, cert-manager-cmctl, k8ssandra-client, helm-set-status, cilium-cli,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: istio, eksctl, helm-push, flux, flux-source-controller, k8sgpt, cluster-api-helm-controller, helm-docs, chartmuseum, helm-operator, helm-mapkubeapis, kubescape, zarf, kargo, flux-helm-controller, k9s, cert-manager-cmctl, k8ssandra-client, helm-set-status, cilium-cli,...