GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, cilium, cluster-api-aws-controller, gatekeeper, node-feature-discovery, kube-vip-cloud-provider, flux-kustomize-controller, k3s, cloud-provider-aws, cluster-autoscaler, helm-operator, kots, keda, vcluster, cloud-provider-azure,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: loki-fips, helm, cloud-provider-vsphere, longhorn-cli-fips, descheduler-fips, crossplane-provider-aws-cloudcontrol, openbao-fips, crossplane-provider-azure-relay, oauth2-proxy-fips, swagger, cluster-api-provider-vsphere-fips, crossplane-provider-aws-cloudtrail,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: bom, scorecard, gomplate, pulumi, gitness, pulumi-language-yaml, nuclei, kots, pulumi-language-dotnet, pulumi-language-java, zot, flux-kustomize-controller, apko, go-licenses, goreleaser, pulumi-kubernetes-operator, kubevela, src-fingerprint, gitsign...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops-fips, age, grafana-fips, sops, grafana, age-fips, litestream, flux-kustomize-controller, ksops, flux-kustomize-controller-fips, chezmoi...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: helm, tflint, secrets-store-csi-driver-fips, helm-docs, dynamic-localpv-provisioner, crossplane-provider-aws, bom, openbao-fips, crossplane, istio-pilot-discovery, swagger, temporal-ui-server, rqlite, neuvector-sigstore-interface, prometheus-podman-exporter,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: task, osv-scanner, flux-source-controller, guac, k8sgpt, src-fingerprint, kubescape, pulumi-kubernetes-operator, snyk-cli, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, flux-kustomize-controller, trivy, zot, melange, gitsig...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: task, osv-scanner, flux-source-controller, guac, k8sgpt, src-fingerprint, kubescape, pulumi-kubernetes-operator, snyk-cli, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, flux-kustomize-controller, trivy, zot, melange, gitsig...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: ksops, up, flux-source-controller, hugo, guac, timestamp-authority, rekor, k8sgpt, opentelemetry-collector-contrib, kubescape, py3-azure-identity, sops, flyte, py3-cassandra-medusa, policy-controller, rclone, spire-server, tkn, boring-registry, step-ca, thanos,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, chezmoi, age, flux-kustomize-controller, litestream, sops...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-source-controller, vexctl, kubescape, sops, cloudflared, tkn, aactl, dex, fulcio, flux-kustomize-controller, slsa-verifier, terragrunt, gitsign, kots, oauth2-proxy, tekton-chains, argo-workflows, cosign, rekor, spire-server...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, croc, nova, manifest-tool, haproxy-ingress, policy-controller, gogatekeeper, envconsul, steampipe, newrelic-nri-kube-events, terraform-provider-azurerm, flux, falco-no-driver, govulncheck, nri-couchbase, flux-kustomize-controller,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cilium, crossplane-provider-aws-sqs, flux-source-controller, docker, docker-compose, fscrypt, policy-controller, steampipe, terraform-provider-azurerm, flux, neuvector-sigstore-interface, falco-no-driver, flux-kustomize-controller, slsa-verifier, k3s,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: yace, local-static-provisioner, croc, crossplane-provider-sql, kubernetes-dashboard-metrics-scraper, nri-redis, secrets-store-csi-driver-provider-aws, manifest-tool, terraform-provider-pagerduty, gatekeeper, policy-controller, undock, gogatekeeper, steampipe, dex,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: ksops, crossplane-provider-azure-authorization, flux-source-controller, gh, guac, timestamp-authority, vexctl, rekor, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, src-fingerprint, actions-runner-controller, opentelemetry-collector-contrib...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: argo-events-fips, amazon-ssm-agent-fips, crossplane-provider-azure-securityinsights, cluster-api-azure-controller, crossplane-provider-azure-streamanalytics, helm, tflint, frankenphp-8.3, gitlab-runner-fips, consul, kine, fulcio-fips, crossplane-provider-azure-relay,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cilium, flux-source-controller, docker, fscrypt, policy-controller, steampipe, terraform-provider-azurerm, flux, age, neuvector-sigstore-interface, falco-no-driver, flux-kustomize-controller, slsa-verifier, k3s, cloud-provider-aws, step-kms-plugin, wal-g, act,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: loki-fips, tflint, openbao-fips, oauth2-proxy-fips, crossplane, neuvector-scanner, temporal-ui-server, neuvector-sigstore-interface, k9s-fips, falcosidekick, prometheus-podman-exporter, pulumi, opencost, grpcurl-fips, seaweedfs-rocksdb, tempo-fips, containerd-fips,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent-fips, external-dns-fips, cluster-api-azure-controller, crossplane-provider-aws-sqs, crossplane-provider-aws-backup, crossplane-provider-aws-cloudwatchlogs, descheduler-fips, gitlab-runner-fips, goose-fips, gpu-operator-fips, apko-fips, sops-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent-fips, external-dns-fips, cluster-api-azure-controller, crossplane-provider-aws-sqs, crossplane-provider-aws-backup, crossplane-provider-aws-cloudwatchlogs, descheduler-fips, gitlab-runner-fips, goose-fips, gpu-operator-fips, apko-fips, sops-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, flux-source-controller, docker, gitaly, terraform-provider-pagerduty, policy-controller, terraform-provider-azurerm, flux, flux-kustomize-controller, gitsign, tfsec, wal-g, atlantis, pulumi-language-java, crossplane-provider-keycloak,...