29 matches found
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: kapp-controller, keda, kube-rbac-proxy, k3s, argocd-image-updater, azure-service-operator, cluster-api-gcp-controller, rke2-cloud-provider, tekton-pipelines, descheduler, cert-manager-webhook-pdns, grafana, kube-state-metrics, rancher-agent, metallb,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ssoadmin, multicluster-controlplane-fips, kserve, influxd-fips, gotenberg, tekton-pipelines, kyverno-policy-reporter-plugins-trivy-fips, kubo, azurefile-csi-fips, crossplane-provider-aws-bedrockagent, extism, crossplane-provider-aws-backup-fip...
GO-2024-2466 vulnerabilities
Vulnerabilities for packages: apko, pulumi-language-dotnet, zot, gitsign, flux-kustomize-controller, goreleaser, gitness, kots, bom, go-licenses, pulumi-kubernetes-operator, kubevela, src-fingerprint, pulumi-language-yaml, pulumi-language-java, nuclei, pulumi, gomplate, scorecard...
GO-2024-3344 vulnerabilities
Vulnerabilities for packages: ksops, flux-kustomize-controller-fips, chezmoi, sops, sops-fips, age, litestream, grafana, flux-kustomize-controller, age-fips, grafana-fips...
GO-2024-3321 vulnerabilities
Vulnerabilities for packages: argo-cd, vault-benchmark, falcosidekick, kserve, cortex-fips, sigstore-scaffolding, gotenberg, splunk-otel-collector, dynamic-localpv-provisioner, cloud-sql-proxy-fips, gitea, crossplane-provider-aws-elasticache, kube-rbac-proxy-fips, flux-image-reflector-controller,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, osv-scanner, flux, chezmoi, src-fingerprint, argo-events, syft, trivy, snyk-cli, apko, flux-source-controller, zarf, go-licenses, argo-workflows, pulumi-language-yaml, k9s, task, grafana-alloy, k8sgpt, gitsign, dagger, kubescape, gptscript, zot,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, osv-scanner, flux, chezmoi, src-fingerprint, argo-events, syft, trivy, snyk-cli, apko, flux-source-controller, zarf, go-licenses, argo-workflows, pulumi-language-yaml, k9s, task, grafana-alloy, k8sgpt, gitsign, dagger, kubescape, gptscript, zot,...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: policy-controller, buildkitd, flyte, flux, chezmoi, timestamp-authority, py3-cassandra-medusa, argo-events, sops, trivy, rekor, cortex, spire-server, py3-azure-identity, flux-source-controller, trino, restic, fluent-bit-plugin-loki, zarf, druid, argo-workflows,...
GO-2024-3344 vulnerabilities
Vulnerabilities for packages: chezmoi, sops, litestream, ksops, age, flux-kustomize-controller...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: sops, rekor, spire-server, flux-source-controller, argo-workflows, fulcio, gitsign, kubescape, oauth2-proxy, slsa-verifier, dex, vexctl, tekton-chains, flux-kustomize-controller, tkn, cosign, aactl, terragrunt, kots, cloudflared...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, cis-operator, k3s, omnibump, sftpgo-plugin-pubsub, amazon-cloudwatch-agent-operator, aws-node-termination-handler, db-operator, kube-state-metrics, cortex, hcloud, nri-apache, grafana-mimir, kubeflow, containerd, govulncheck,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: tw, k3s, chezmoi, go-discover, apko, hcloud, containerd, cilium, dagger, ksops, minio, crossplane-provider-aws-kms, zot, crossplane-provider-aws-dynamodb, gitlab-runner, step, tekton-chains, step-issuer, rancher-machine, terraform-provider-azurerm,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: git-lfs, k3s, k8sgateway, sftpgo-plugin-pubsub, azure-service-operator, amazon-cloudwatch-agent-operator, timescaledb-parallel-copy, nats-top, db-operator, s5cmd, kubernetes-dashboard-api, cortex, fluxcd-kustomize-mutating-webhook, go-licenses, kubeflow, swagger,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: policy-controller, k3s, buildkitd, flux, rabbitmq-messaging-topology-operator, src-fingerprint, timestamp-authority, argo-events, sops, rekor, snyk-cli, crossplane-provider-azure-storage, spire-server, flux-source-controller, crossplane-provider-family-azure, zarf,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: argo-cd, vault-benchmark, step-ca-fips, kubevela-fips, kyverno-notation-aws-fips, kyverno-policy-reporter-plugins-kyverno-fips, clickhouse-backup-fips, flux-kustomize-controller, grafana-fips, splunk-otel-collector, trufflehog-fips, cg, terraform-provider-azurerm,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: k3s, chezmoi, go-discover, apko, hcloud, containerd, cilium, dagger, ksops, minio, zot, gitlab-runner, step, tekton-chains, step-issuer, rancher-machine, terraform-provider-azurerm, pulumi-language-java, act, argo-cd, aactl, cloud-provider-aws, falco-no-driver,...
CVE-2026-34986 vulnerabilities
Vulnerabilities for packages: argo-cd, vault-benchmark, falcosidekick, kserve, sigstore-scaffolding, splunk-otel-collector, trufflehog-fips, kubescape-operator-fips, vault-secrets-webhook, argo-workflows, tekton-pipelines, kubo, skopeo-fips, kyverno-policy-reporter-fips,...
GHSA-8FJ7-8H3W-XWFM vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, gitlab-pages-fips, buildkite-agent, crossplane-provider-aws-rolesanywhere-fips, fleet-server-fips, flux-kustomize-controller, seaweedfs-operator-fips, gotenberg, splunk-otel-collector, cg, opentelemetry-collector-contrib,...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, gitlab-pages-fips, buildkite-agent, crossplane-provider-aws-rolesanywhere-fips, fleet-server-fips, flux-kustomize-controller, seaweedfs-operator-fips, gotenberg, splunk-otel-collector, cg, opentelemetry-collector-contrib,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: apko, gitsign, terraform-provider-pagerduty, vcluster, dagger, ksops, q, crossplane-provider-aws-kms, zot, crossplane-provider-aws-dynamodb, gitlab-runner, kyverno-notation-aws, terraform-provider-azurerm, cluster-api, cerbos, pulumi-language-java, argo-cd, aactl,...