GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubescape-operator, keda, kapp-controller, kubernetes-csi-external-resizer, datadog-agent, tetragon, hubble, cluster-api-azure-controller, cloud-provider-azure, flux-helm-controller, kubernetes-csi-external-provisioner, cilium, cluster-api-helm-controller, vcluster,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-trivy-fips, vault-k8s-fips, cilium-certgen, crossplane-function-go-templating-fips, crossplane-provider-aws-connect-fips, crossplane-provider-aws-cloudwatch, verticadb-operator, k3d, deck, prometheus-elasticsearch-exporter,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, kubevela, pulumi-language-yaml, pulumi, go-licenses, pulumi-language-java, src-fingerprint, goreleaser, gitsign, pulumi-language-dotnet, bom, zot, gitness, gomplate, nuclei, kots, pulumi-kubernetes-operator, scorecard, apko...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: grafana, flux-kustomize-controller, flux-kustomize-controller-fips, age-fips, grafana-fips, ksops, litestream, sops, sops-fips, chezmoi, age...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: vault-k8s-fips, authservice-fips, crossplane-provider-aws, k3d, dockerize-fips, prometheus-elasticsearch-exporter, vcluster, conftest, skopeo-fips, temporal-server, docker-credential-acr-env, weaviate, step-fips, dex-k8s-authenticator, secrets-store-csi-driver,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux, kargo, goreleaser, kaniko, flux-image-automation-controller, nuclei, pulumi-language-yaml, kubescape, pulumi, src-fingerprint, gitea, kots, skaffold, kubevela, zot, chezmoi, crossplane, argocd-image-updater, timoni, pulumi-language-java, flux-source-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux, kargo, goreleaser, kaniko, flux-image-automation-controller, nuclei, pulumi-language-yaml, kubescape, pulumi, src-fingerprint, gitea, kots, skaffold, kubevela, zot, chezmoi, crossplane, argocd-image-updater, timoni, pulumi-language-java, flux-source-controller,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux, prometheus-operator, timestamp-authority, step-ca, sigstore-scaffolding, rclone, goreleaser, cosign, grafana-mimir, restic, grafana-agent-operator, flux-image-reflector-controller, nuclei, hugo-extended, py3-azure-identity, hugo, kubescape, pulumi, druid,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: litestream, sops, ksops, chezmoi, age, flux-kustomize-controller...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: flux, kubescape-operator, kubernetes-csi-livenessprobe, continuity, fuse-overlayfs-snapshotter, sigstore-scaffolding, helm-push, kapp-controller, amazon-cloudwatch-agent-operator, kyverno, opa, litefs, tofu-controller, datadog-agent, tetragon, nri-haproxy, flannel,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cloudflared, cosign, vexctl, aactl, kubescape, kots, tekton-chains, dex, fulcio, slsa-verifier, terragrunt, sops, flux-source-controller, tkn, gitsign, flux-kustomize-controller, argo-workflows, spire-server, oauth2-proxy, rekor...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux, crossplane-provider-aws-eks, kyverno, cosign, datadog-agent, cilium-cli, act, cluster-api-azure-controller, gitea, docker-cli-buildx, go-discover, crossplane-provider-aws-cloudfront, trivy-operator, tflint, argo-cd, crossplane-provider-aws-elasticache,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kubescape-operator, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, pguser, amass, kapp-controller, amazon-cloudwatch-agent-operator, hey, cosign, git-lfs, clickhouse-operator, kubernetes-csi-external-resizer, blobfuse2, litefs, restic,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux, kargo, timestamp-authority, step-ca, sigstore-scaffolding, kubernetes-event-exporter, goreleaser, cosign, glab, flux-image-automation-controller, grafana-mimir, vexctl, flux-image-reflector-controller, nuclei, actions-runner-controller, aactl, kubescape, pulumi...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux, cosign, age, datadog-agent, cilium-cli, act, cluster-api-azure-controller, gitea, docker-cli-buildx, go-discover, trivy-operator, tflint, argo-cd, cilium, crossplane-provider-family-azure, slsa-verifier, buildah, pulumi-language-java, buildkitd, atlantis,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: vitess, cluster-api-aws-controller, terraform-provider-google-fips, cert-manager-istio-csr-fips, juicefs, seaweedfs-rocksdb-fips, k3d, trufflehog-fips, vcluster, conftest, skopeo-fips, google-osconfig-agent, temporal-server, weaviate, step-fips, gitsign,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: flux, crossplane-provider-aws-eks, helm-push, rclone, datadog-agent, cilium-cli, gitea, docker-cli-buildx, trufflehog, flux-helm-controller, crossplane-provider-aws-cloudfront, extism, trivy-operator, argo-cd, crossplane-provider-aws-elasticache,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: flux, crossplane-provider-aws-eks, helm-push, rclone, datadog-agent, cilium-cli, gitea, docker-cli-buildx, trufflehog, flux-helm-controller, crossplane-provider-aws-cloudfront, extism, trivy-operator, argo-cd, crossplane-provider-aws-elasticache,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: helm-diff, nfpm, grafana-alloy-fips, k9s, kubevela-fips, reports-server, crossplane-provider-aws-ec2, gitlab-operator, databricks-cli, trufflehog-fips, terraform-provider-databricks, vcluster, external-secrets-operator, crossplane-provider-aws-s3-fips, zarf, xeol-fip...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, helm-set-status, cilium-certgen, cluster-api-aws-controller, juicefs, influx, verticadb-operator, k3d, prometheus-elasticsearch-exporter, pombump, s5cmd, trufflehog-fips, conftest, kind, cilium-envoy, azure-service-operator-fips,...