GO-2026-6094 vulnerabilities

Vulnerabilities for packages: hubble, keda, kubernetes, crossplane, rancher, rke2-cloud-provider, gitlab-kas, yunikorn-k8shim, datadog-operator, openbao, tkn, datadog-agent, cluster-api-ipam-provider-in-cluster, tekton-pipelines, kwok, cluster-autoscaler, cluster-api-azure-controller,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: ops-agent, azurefile-csi, crossplane-provider-aws-cur-fips, seaweedfs, postgres-operator-fips, crossplane-provider-aws-redshift-fips, crossplane-provider-aws-cloudformation, chronyexporter, crossplane-provider-aws-macie2-fips, melange, nri-kubernetes,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: go-licenses, pulumi-kubernetes-operator, pulumi-language-java, nuclei, flux-kustomize-controller, pulumi-language-dotnet, src-fingerprint, gomplate, scorecard, pulumi, gitness, zot, goreleaser, bom, apko, kubevela, kots, pulumi-language-yaml, gitsign...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: grafana-fips, sops-fips, chezmoi, litestream, flux-kustomize-controller-fips, ksops, age, sops, grafana, age-fips, flux-kustomize-controller...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, distribution-fips, packer, timestamp-authority-fips, trivy-fips, cilium, local-static-provisioner, kargo, terraform-provider-tls-fips, crossplane-provider-keycloak, seaweedfs, postgres-operator-fips, kube-metrics-adapter,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: goreleaser, syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, grype, guac, pulumi-language-java, flux-source-controller, zarf, wolfictl, k9s, dagger, kubescape, k8sgpt, pulumi-language-yaml, argo-events, skaffold, argocd-image-updater, pulumi,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: goreleaser, syft, tfsec, nuclei, argo-workflows, crossplane, grafana-alloy, grype, guac, pulumi-language-java, flux-source-controller, zarf, wolfictl, k9s, dagger, kubescape, k8sgpt, pulumi-language-yaml, argo-events, skaffold, argocd-image-updater, pulumi,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: tekton-chains, goreleaser, nuclei, argo-workflows, timestamp-authority, ksops, policy-controller, harbor-registry, boring-registry, falcoctl, flux-image-reflector-controller, flux-source-controller, guac, py3-cassandra-medusa, druid, sigstore-scaffolding, terragrunt,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: age, flux-kustomize-controller, litestream, sops, ksops, chezmoi...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: tekton-chains, oauth2-proxy, argo-workflows, flux-source-controller, terragrunt, tkn, rekor, cloudflared, kubescape, dex, sops, flux-kustomize-controller, fulcio, aactl, gitsign, spire-server, vexctl, cosign, kots, slsa-verifier...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: hubble, libnvidia-container, vault-k8s, nova, kubernetes, litestream, crossplane, prometheus-adapter, steampipe, rancher, victoriametrics-cluster, newrelic-nri-kube-events, helm-push, sftpgo-plugin-pubsub, guac, sigstore-scaffolding, trino, aws-efs-csi-driver,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: syft, nuclei, kubernetes, steampipe, rancher, gitlab-kas, guac, openbao, tkn, datadog-agent, k9s, terraform-provider-azapi, k8sgpt, prometheus-operator, pulumi-language-yaml, tw, sealed-secrets, rancher-machine, cluster-api-azure-controller,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: hubble, pvc-autoresizer, cert-manager-cmctl, kustomize, tfsec, vault-k8s, litestream, steampipe, falcosidekick, metacontroller, dkron, sftpgo-plugin-pubsub, aws-eks-pod-identity-agent, yunikorn-k8shim, guac, docker-credential-ecr-login, ytt, minio-object-browser, kub...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: tekton-chains, k3d, goreleaser, crossplane-provider-azure-managedidentity, nuclei, timestamp-authority, ksops, policy-controller, kubernetes-event-exporter, crossplane-provider-azure-sql, falcoctl, guac, flux-image-reflector-controller, flux-source-controller,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: syft, nuclei, kubernetes, steampipe, rancher, gitlab-kas, guac, openbao, tkn, datadog-agent, k9s, k8sgpt, prometheus-operator, pulumi-language-yaml, rancher-machine, cluster-api-azure-controller, flux-notification-controller, docker-cli-buildx, caddy, podman, chisel,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: distribution-fips, packer, timestamp-authority-fips, trivy-fips, cilium, kargo, seaweedfs, gomplate, google-osconfig-agent, knative-eventing-fips, velero, melange, nginx-kubernetes-ingress-fips, amazon-ssm-agent-fips, splunk-otel-collector, gitaly-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, syft, tfsec, nuclei, crossplane, helm-push, guac, openbao, datadog-agent, k9s, hydra, pulumi-language-yaml, flux-notification-controller, docker-cli-buildx, argo-rollouts, pulumi-kubernetes-operator, gitaly, rclone, cluster-api, snyk-cli,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, syft, tfsec, nuclei, crossplane, helm-push, guac, openbao, datadog-agent, k9s, hydra, pulumi-language-yaml, flux-notification-controller, docker-cli-buildx, argo-rollouts, pulumi-kubernetes-operator, gitaly, rclone, cluster-api, snyk-cli,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-cd, terraform-provider-databricks, crossplane-provider-azure-managedidentity, packer, ratify-fips, crossplane-provider-aws-memorydb-fips, gptscript, vault-fips, trivy-fips, nuclei, crossplane-provider-aws-rds, crossplane-provider-keycloak, terragrunt-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: gatekeeper-fips, kube-logging-operator, logstash, packer, cluster-api-helm-controller, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, aws-sigv4-proxy, kubernetes-csi-external-provisioner-fips,...