GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, cluster-api-helm-controller, cilium, kube-state-metrics, kubernetes-csi-external-provisioner, kube-metrics-adapter, helm-operator, azure-service-operator, cluster-api-ipam-provider-in-cluster, metrics-server, rancher-system-agent,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm, terraform-provider-databricks, packer-fips, weaviate, envconsul-fips, cluster-autoscaler, crossplane-provider-aws-emr-fips, amazon-ecs-cni-plugins, crossplane-provider-aws-kinesisanalyticsv2-fips, k6, crossplane-provider-aws-chime-fips,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: gitsign, apko, go-licenses, nuclei, kots, gitness, kubevela, flux-kustomize-controller, pulumi-kubernetes-operator, pulumi-language-dotnet, pulumi-language-yaml, goreleaser, scorecard, gomplate, bom, pulumi, zot, pulumi-language-java, src-fingerprint...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: litestream, flux-kustomize-controller-fips, age, sops-fips, grafana-fips, age-fips, grafana, ksops, flux-kustomize-controller, chezmoi, sops...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: authservice, openbao-fips, cortex, kargo, argo-events-fips, cloud-sql-proxy-fips, cloudflared, packer-fips, postgres-operator, weaviate, age, cloud-provider-azure-fips, cluster-autoscaler, tigera-operator, hugo-extended, x509-certificate-exporter-fips, k6, helm-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: trivy, dagger, crossplane, gptscript, go-licenses, pulumi-kubernetes-operator, pulumi-language-java, nuclei, kargo, argocd-image-updater, flux-kustomize-controller, wolfictl, argo-workflows, chezmoi, skaffold, task, pulumi-language-dotnet, src-fingerprint, scorecard,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: trivy, dagger, crossplane, gptscript, go-licenses, pulumi-kubernetes-operator, pulumi-language-java, nuclei, kargo, argocd-image-updater, flux-kustomize-controller, wolfictl, argo-workflows, chezmoi, skaffold, task, pulumi-language-dotnet, src-fingerprint, scorecard,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trivy, spire-server, rclone, policy-controller, opentelemetry-collector-contrib, ksops, up, nuclei, restic, falcoctl, fulcio, flyte, flux-kustomize-controller, airflow, timestamp-authority, argo-workflows, chezmoi, step-ca, prometheus-operator, hugo-extended,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, litestream, ksops, age, sops, flux-kustomize-controller...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, kube-logging-operator, crossplane-provider-azure-managedidentity, cluster-api-helm-controller, chisel, fuse-overlayfs-snapshotter, karpenter, terraform-provider-acme, cilium, grafana-operator, kube-state-metrics, node-problem-detector,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, spire-server, fulcio, flux-kustomize-controller, argo-workflows, terragrunt, flux-source-controller, rekor, kubescape, cloudflared, dex, cosign, vexctl, tkn, aactl, kots, gitsign, tekton-chains, slsa-verifier, sops...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, terraform-provider-acme, cilium, nuclei, kargo, crossplane-provider-aws-rds, crossplane-provider-keycloak, fulcio, skaffold, crossplane-provider-aws-cloudformation, gomplate,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, kube-logging-operator, helm-set-status, cloud-provider-vsphere, kubernetes-dashboard, chisel, gptscript, fuse-overlayfs-snapshotter, kuberlr, grafana-operator, aws-sigv4-proxy, local-static-provisioner, crossplane-provider-aws-rds, redka,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane-provider-azure-sql, glab, policy-controller, crossplane-provider-azure-managedidentity, opentelemetry-collector-contrib, crossplane-provider-azure-storage, pulumi-kubernetes-operator, ksops, nuclei, kargo, falcoctl, fulcio,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: policy-controller, calico-fips, kaf, kargo, frankenphp-8.5, kube-state-metrics, omnictl-multiarch, argo-events-fips, juicefs, spire-server, docker-machine-driver-harvester, skaffold-fips, trufflehog-fips, upwind-agent, trivy-operator, argo-cd-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, cilium, nuclei, kargo, fulcio, skaffold, gomplate, scorecard, vault-benchmark, buildkitd, melange, cilium-cli, step-issuer, atlantis, guac, age, flux, splunk-otel-collector,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: openbao-fips, chainloop-control-plane-fips, kargo, frankenphp-8.5, vault-csi-provider-fips, cloudflared, packer-fips, weaviate, envconsul-fips, chainctl-fips, image-factory, ratify-fips, tekton-chains-fips, cilium, datadog-agent-fips, prometheus-podman-exporter-fips,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-ssm, crossplane-provider-aws-wafv2, fleet-server-fips, crossplane-provider-aws-sqs-fips, cloud-sql-proxy-fips, apm-server-fips, syncthing-fips, trivy-operator, opa-envoy, crossplane-provider-aws-ec2-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-ssm, crossplane-provider-aws-wafv2, fleet-server-fips, crossplane-provider-aws-sqs-fips, cloud-sql-proxy-fips, apm-server-fips, syncthing-fips, trivy-operator, opa-envoy, crossplane-provider-aws-ec2-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, gptscript, nuclei, crossplane-provider-aws-rds, crossplane-provider-keycloak, skaffold, src-fingerprint, crossplane-provider-aws-cloudformation, gomplate, scorecard, buildkitd, crossplane-provider-aws-dynamodb, hydr...