GO-2026-6094 vulnerabilities

Vulnerabilities for packages: spqr, cluster-api-gcp-controller, gitlab-kas, cluster-api, rancher, telegraf, tetragon, cluster-api-helm-controller, kubernetes, azure-service-operator, kapp-controller, keda, crossplane, kubeflow-pipelines, cloud-provider-azure, datadog-agent, openbao,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, redis-operator, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips, longhorn-cli-fips, fluxcd-kustomize-mutating-webhook-fips,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: kots, flux-kustomize-controller, apko, go-licenses, gitsign, pulumi-language-java, gitness, zot, pulumi-language-dotnet, pulumi-kubernetes-operator, pulumi-language-yaml, nuclei, scorecard, src-fingerprint, bom, goreleaser, pulumi, gomplate, kubevela...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, flux-kustomize-controller, age-fips, grafana-fips, sops-fips, grafana, chezmoi, flux-kustomize-controller-fips, sops, age, litestream...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, prometheus-alertmanager-fips, kuma, sftpgo-plugin-eventstore, crossplane-provider-aws-firehose, cloudnative-pg, certificate-transparency-fips, cosign, kaniko, kafkaexporter, kubeflow-pipelines, kaniko-fips, oauth2-proxy, cert-exporter,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: k8sgpt, kargo, apko, argo-workflows, gitsign, osv-scanner, skaffold, trivy, task, syft, scorecard, zarf, crossplane, pulumi-language-yaml, grype, melange, snyk-cli, flux-image-automation-controller, zot, nuclei, chezmoi, flux-kustomize-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: k8sgpt, kargo, apko, argo-workflows, gitsign, osv-scanner, skaffold, trivy, task, syft, scorecard, zarf, crossplane, pulumi-language-yaml, grype, melange, snyk-cli, flux-image-automation-controller, zot, nuclei, chezmoi, flux-kustomize-controller,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: falcoctl, py3-azure-identity, timestamp-authority, k8sgpt, argo-workflows, trivy, grafana-mimir, grafana-agent-operator, zarf, sops, airflow, sigstore-scaffolding, zot, nuclei, chezmoi, flux-kustomize-controller, rekor, py3-cassandra-medusa, restic, step-ca, buildkit...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, age, flux-kustomize-controller, chezmoi, sops, litestream...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opentofu, kubo, cluster-api, kube-fluentd-operator, azure-workload-identity-webhook, cloud-sql-proxy, dask-gateway, chisel, amazon-k8s-cni, continuity, istio, crossplane-provider-aws-lambda, cluster-api-helm-controller, nfs-subdir-external-provisioner, grafana-mimir,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cloudflared, oauth2-proxy, slsa-verifier, argo-workflows, gitsign, sops, flux-kustomize-controller, rekor, tekton-chains, flux-source-controller, aactl, kubescape, vexctl, fulcio, tkn, spire-server, dex, terragrunt, cosign, kots...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, cloudflared, apko, chisel, istio, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, pulumi-language-yaml, grype, crossplane-provider-aws-iam, docker-compose, snyk-cli, chezmoi, tflint, kubernetes-dashboard, kaf, guac,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, cluster-api-gcp-controller, kubo, opentofu, azure-workload-identity-webhook, dask-gateway, redka, chisel, osv-scanner, nfs-subdir-external-provisioner, crossplane-provider-aws-lambda, azure-service-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, timestamp-authority, kargo, slsa-verifier, gitsign, grafana-mimir, zarf, sops, glab, sigstore-scaffolding, rabbitmq-messaging-topology-operator, crossplane-provider-azure-managedidentity, flux-image-automation-controller, snyk-cli,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: apply-cve-bump, kuma, google-guest-agent-manager, rancher-machine, k8sgpt, gatus-fips, kyverno-policy-reporter-plugins-kyverno-fips, knative-serving, peerdb-flow, gatekeeper, gitea, cosign, crossplane-provider-azure-powerbidedicated, helmfile, hcloud,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, apko, chisel, istio, osv-scanner, pulumi-language-yaml, grype, docker-machine-driver-harvester, snyk-cli, chezmoi, tflint, kubernetes-dashboard, kaf, guac, gomplate, step, tekton-chains, buildah, pulumi-language-java, mods, prometheus-operator,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, livekit-server-fips, cosign, kaniko, prometheus-podman-exporter-fips, tempo-fips, kubeflow-pipelines, kaniko-fips, oauth2-proxy, gotrue-fips, sqlexporter-fips, tempo, elastic-agent-fips, jitsucom-bulker, flux-operator, grafana-alloy-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: ollama, gitlab-pages, contour, crossplane-provider-aws-firehose, peerdb-flow, syncthing-fips, livekit-server-fips, deck-fips, flux-operator-fips, tempo-fips, sops, terraform-provider-grafana, caddy-fips, opa-fips, kubo-fips, gpu-operator, azure-service-operator,...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: ollama, gitlab-pages, contour, crossplane-provider-aws-firehose, peerdb-flow, syncthing-fips, livekit-server-fips, deck-fips, flux-operator-fips, tempo-fips, sops, terraform-provider-grafana, caddy-fips, opa-fips, kubo-fips, gpu-operator, azure-service-operator,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: opentofu, cluster-api, apko, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, helm-push, pulumi-language-yaml, grype, crossplane-provider-aws-iam, snyk-cli, trufflehog, guac, gomplate, crossplane-provider-aws-ec2, cerbos, gitaly,...