GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, cert-manager, k3s, datadog-operator, cluster-autoscaler, gitlab-kas, rancher-agent, helm-operator, cluster-api-provider-vsphere, cluster-api-helm-controller, kyverno, spqr, caddy, calico, pulumi-kubernetes-operator,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: lvm-driver, crossplane-provider-aws-servicecatalog, grpcurl, prometheus-nats-exporter, newrelic-fluent-bit-output, newrelic-infra-operator, commercial-chainloop-cli, ocm-kubernetes-controller, crossplane-provider-aws-mediaconvert-fips, tkn, hey,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: scorecard, src-fingerprint, go-licenses, pulumi, pulumi-language-java, pulumi-language-yaml, goreleaser, kots, gitsign, zot, nuclei, flux-kustomize-controller, bom, pulumi-language-dotnet, gitness, gomplate, apko, pulumi-kubernetes-operator, kubevela...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller-fips, grafana, sops, sops-fips, ksops, chezmoi, litestream, age-fips, grafana-fips, flux-kustomize-controller, age...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, tkn-fips, prometheus-postgres-exporter-fips, nginx-prometheus-exporter-fips, prometheus-nats-exporter, goreleaser, argo-workflows-fips, tkn, trillian, kyverno-policy-reporter-fips, kapp-controller-fips, buildkitd,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: k8sgpt, gitsign, pulumi-kubernetes-operator, src-fingerprint, syft, pulumi-language-dotnet, kargo, flux-kustomize-controller, pulumi-language-java, pulumi-language-yaml, crossplane, gptscript, trivy, k9s, wolfictl, snyk-cli, argo-events, flux-source-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: k8sgpt, gitsign, pulumi-kubernetes-operator, src-fingerprint, syft, pulumi-language-dotnet, kargo, flux-kustomize-controller, pulumi-language-java, pulumi-language-yaml, crossplane, gptscript, trivy, k9s, wolfictl, snyk-cli, argo-events, flux-source-controller,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: k8sgpt, timestamp-authority, sqlpad, rclone, tekton-chains, opentelemetry-collector-contrib, py3-azure-identity, secrets-store-csi-driver-provider-azure, falcoctl, flux-kustomize-controller, tkn, boring-registry, buildkitd, opentelemetry-collector, trivy, rook, up,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, chezmoi, age, litestream, ksops, sops...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, kbld, k3s, pinact, cloud-sql-proxy, kyverno, kubernetes-csi-node-driver-registrar, calico, runc, docker-cli-buildx, octo-sts, crossplane-provider-aws-ec2, local-path-provisioner, cloud-provider-azure, jaeger-operator, tekton-pipelines,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: gitsign, oauth2-proxy, cloudflared, tekton-chains, flux-kustomize-controller, tkn, slsa-verifier, flux-source-controller, argo-workflows, sops, vexctl, terragrunt, cosign, dex, kubescape, fulcio, spire-server, rekor, aactl, kots...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tflint, k3s, gitlab-kas, kubernetes-dashboard, kyverno, caddy, docker-cli-buildx, podman, openbao, cluster-api-azure-controller, crossplane-provider-aws-ec2, rancher-machine, buildkitd, trivy, k9s, snyk-cli, kaf, nfpm, crossplane-provider-aws-rds, sealed-secrets,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, gitness, k3s, terraform-provider-time, kubernetes-dashboard, git-sync, opensearch-k8s-operator, calico, aws-privateca-issuer, runc, octo-sts, crossplane-provider-aws-ec2, ip-masq-agent, local-path-provisioner, minio-operator, rancher-machine,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, k3s, gitsign, neuvector-sigstore-interface, rabbitmq-messaging-topology-operator, tekton-chains, pulumi-kubernetes-operator, src-fingerprint, flux-helm-controller, opentelemetry-collector-contrib, kargo, falcoctl, flux-kustomize-controller,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, podman, coder, grype-fips, tkn-fips, crossplane-provider-azure-storagesync, cloudbeat-fips, kine, reports-server, chainctl-fips, act, step-issuer, gatus-fips, minio, trivy, flux-image-automation-controller-fips, clickhouse-backup-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: tflint, k3s, gitlab-kas, kubernetes-dashboard, kyverno, caddy, docker-cli-buildx, podman, openbao, cluster-api-azure-controller, rancher-machine, buildkitd, trivy, k9s, snyk-cli, kaf, nfpm, flux-notification-controller, glab, rancher, step, apko, guac, chezmoi,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: prometheus-mongodb-exporter, grype-fips, tkn-fips, grpcurl, clickhouse-backup-fips, knative-eventing-fips, commercial-chainloop-backend, goreleaser, argo-workflows-fips, ratify-fips, commercial-chainloop-cli, flux-operator, dkron-fips, tkn, trillian,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: omni-fips, crossplane-provider-aws-cloudformation-fips, gitlab-cng-fips, deck-fips, crossplane-provider-aws-firehose-fips, external-dns-fips, cloudbeat-fips, tempo-fips, terraform-provider-aws, terraform-provider-grafana-fips, trivy, ollama, vertical-pod-autoscaler,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: omni-fips, crossplane-provider-aws-cloudformation-fips, gitlab-cng-fips, deck-fips, crossplane-provider-aws-firehose-fips, external-dns-fips, cloudbeat-fips, tempo-fips, terraform-provider-aws, terraform-provider-grafana-fips, trivy, ollama, vertical-pod-autoscaler,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitness, kyverno, docker-cli-buildx, openbao, crossplane-provider-aws-ec2, buildkitd, xeol, grafana, trivy, k9s, snyk-cli, nfpm, crossplane-provider-aws-rds, terraform-provider-pagerduty, flux-notification-controller, crossplane-provider-aws-firehose, apko,...