GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cluster-api-provider-vsphere, node-feature-discovery, cloud-provider-azure, kots, cilium, opentelemetry-operator, gitlab-kas, kube-state-metrics, cluster-api-gcp-controller, spicedb, cluster-api-ipam-provider-in-cluster, crossplane, metallb, tekton-pipelines, tetrago...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, helm-push, k9s, kubescape, zarf, trivy, up, chartmuseum, cilium-cli, k8sgpt, kots, zot, flux-source-controller, eksctl, kubevela, helm-operator...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: chart-testing, rancher-fleet-fips, helm-docs, flux-helm-controller-fips, flux-fips, zot, harbor, teleport, helm-operator, helm-push, harbor-fips, cluster-api-helm-controller, consul-k8s, cilium-cli, k8sgpt, rancher-fleet, rancher-helm, chartmuseum-fips,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, helm-push, k9s, kubescape, zarf, trivy, up, chartmuseum, cilium-cli, k8sgpt, kots, zot, flux-source-controller, eksctl, kubevela, helm-operator...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni-fips, victorialogs, go, pgwatch, victorialogs-fips, flux-image-reflector-controller, flux-notification-controller, grafana-operator, temporal-fips, nova-fips, aws-ebs-csi-driver, nova, victoriametrics-fips, loki-fips, grafana-fips, flux-source-watcher,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: amazon-k8s-cni-fips, victorialogs, go, pgwatch, victorialogs-fips, flux-image-reflector-controller, flux-notification-controller, grafana-operator, temporal-fips, nova-fips, aws-ebs-csi-driver, nova, victoriametrics-fips, loki-fips, grafana-fips, flux-source-watcher,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, kubernetes-csi-driver-hostpath, opentofu-fips, cephcsi-fips, flux-kustomize-controller-fips, cass-operator, step-issuer, crossplane-provider-aws-cloudfront-fips, xeol-fips, oauth2-proxy-fips, snyk-cli, ollama-fips, azurefile-csi-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, nri-mssql, step-issuer, terraform-provider-azurerm, snyk-cli, tkn-fips, rabbitmq-messaging-topology-operator, docker-compose, cosign-fips, local-static-provisioner, vault-k8s-fips, chartmuseum-fips, splunk-otel-collector,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, eksctl, kubevela, up, chartmuseum, helm-push, flux-helm-controller, k8sgpt, kubescape, trivy, zot, k9s, zarf, helm-operator, cilium-cli...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: rancher-helm, kots, eksctl, tw, flux, k9s, helm-docs, pluto, cilium-cli, zot, helm-operator, chartmuseum, helm-push, flux-helm-controller, k8ssandra-client, kubescape, flux-source-controller, cert-manager-cmctl, cluster-api-helm-controller, chart-testing, trivy, zarf...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, eksctl, kubevela, up, chartmuseum, helm-push, flux-helm-controller, k8sgpt, kubescape, trivy, zot, k9s, zarf, helm-operator, cilium-cli...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: gitness, eksctl, kots, kubevela, up, skaffold, cilium-cli, kaniko, zot, helm, k3d, helm-push, flux-helm-controller, k8sgpt, buildkitd, kubescape, ctop, melange, fuse-overlayfs-snapshotter, newrelic-infrastructure-agent, flux-source-controller, grype, trivy...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: rancher-helm, syft, kots, eksctl, tw, kubevela, helm-set-status, wolfictl, kargo, envoy-gateway, kubescape-operator, dagger, k9s, skaffold, helm-mapkubeapis, cilium-cli, headlamp, steampipe, kaniko, nerdctl, zot, helm-operator, helm, opa-envoy, neuvector-scanner,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: rancher-helm, kots, eksctl, tw, kargo, envoy-gateway, cerbos, k9s, istio, helm-docs, pluto, cilium-cli, linkerd2, zot, helm-operator, chartmuseum, helm-push, flux-helm-controller, k8sgpt, k8ssandra-client, rancher-fleet, flux-source-controller, cert-manager-cmctl,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, kubevela, opentelemetry-collector-contrib, guac, kargo, terraform-provider-azurerm, flux, cosign, gomplate, slsa-verifier, sops, aactl, neuvector-sigstore-interface, timestamp-authority, gh, pulumi-kubernetes-operator, argo-events, spire-server,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: apko, mountpoint-s3-csi-driver, fluxcd-kustomize-mutating-webhook, karpenter, temporal, secrets-store-csi-driver-provider-aws, flux, grafana-operator, smokescreen, local-path-provisioner, external-secrets-operator, kubewatch, dbmate, nfs-subdir-external-provisioner,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: syft, wolfictl, crossplane-provider-aws-sqs, boring-registry, argo-cd, crossplane-provider-aws-kms, aactl, q, ksops, extism, pulumi, crossplane-provider-azure-authorization, gitaly, goreleaser, crossplane-provider-aws-sns, terraform-provider-azuread, rancher-fleet,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: syft, wolfictl, crossplane-provider-aws-sqs, boring-registry, argo-cd, crossplane-provider-aws-kms, aactl, q, ksops, extism, pulumi, crossplane-provider-azure-authorization, gitaly, goreleaser, crossplane-provider-aws-sns, terraform-provider-azuread, rancher-fleet,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: kots, eksctl, tw, helm-set-status, kargo, envoy-gateway, cerbos, flux, k9s, istio, helm-docs, pluto, helm-mapkubeapis, cilium-cli, headlamp, linkerd2, zot, helm-operator, chartmuseum, helm-push, flux-helm-controller, k8sgpt, k8ssandra-client, kubescape, rancher-fleet...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: kots, eksctl, helm-set-status, kargo, envoy-gateway, cerbos, flux, k9s, istio, helm-docs, pluto, helm-mapkubeapis, cilium-cli, headlamp, linkerd2, zot, helm-operator, chartmuseum, helm-push, flux-helm-controller, k8sgpt, k8ssandra-client, kubescape, rancher-fleet,...