GO-2026-6094 vulnerabilities

Vulnerabilities for packages: keda, kwok, hubble-ui, kube-rbac-proxy, cluster-autoscaler, cluster-api-provider-vsphere, flux-kustomize-controller, grafana, cluster-api-gcp-controller, pulumi-kubernetes-operator, cluster-api-helm-controller, apisix-ingress-controller, k3s, kube-metrics-adapter,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, deck-fips, clickhouse-operator-fips, grafana-operator, gcp-compute-persistent-disk-csi-driver-fips, harbor, crossplane-provider-aws-athena-fips, crossplane-provider-aws-lexmodels-fips, rancher-loglevel, longhorn-share-manager, xeol-fips,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, gitsign, pulumi, kots, goreleaser, pulumi-language-dotnet, go-licenses, pulumi-language-java, scorecard, kubevela, pulumi-language-yaml, gitness, zot, bom, flux-kustomize-controller, src-fingerprint, apko, nuclei, gomplate...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops, ksops, flux-kustomize-controller, age-fips, sops-fips, litestream, age, flux-kustomize-controller-fips, chezmoi, grafana, grafana-fips...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: grafana-mimir, crossplane-provider-keycloak, harbor, gcp-compute-persistent-disk-csi-driver-fips, kiam, grpc-health-probe-fips, kube-rbac-proxy, sqlexporter-fips, trivy, kine, docker-compose-fips, cloudnative-pg-fips, modelmesh-runtime-adapter, nri-kafka,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gptscript, syft, pulumi-kubernetes-operator, flux-kustomize-controller, skaffold, src-fingerprint, grafana-alloy, k8sgpt, kots, kubescape, kaniko, timoni, chezmoi, dagger, bom, task, wolfictl, pulumi, guac, pulumi-language-dotnet, scorecard, osv-scanner,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gptscript, syft, pulumi-kubernetes-operator, flux-kustomize-controller, skaffold, src-fingerprint, grafana-alloy, k8sgpt, kots, kubescape, kaniko, timoni, chezmoi, dagger, bom, task, wolfictl, pulumi, guac, pulumi-language-dotnet, scorecard, osv-scanner,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: wal-g, hugo-extended, cortex, opentelemetry-collector-contrib, flux-kustomize-controller, fulcio, py3-cassandra-medusa, velero, policy-controller, sqlpad, buildkitd, harbor-registry, k8sgpt, kubescape, boring-registry, rclone, restic, step-ca, chezmoi, terragrunt,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: age, flux-kustomize-controller, ksops, sops, chezmoi, litestream...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, fulcio, kubescape, terragrunt, kots, tkn, tekton-chains, spire-server, vexctl, cosign, rekor, gitsign, dex, sops, slsa-verifier, flux-source-controller, cloudflared, oauth2-proxy, argo-workflows, aactl...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: dapr, runc, migrate, kube-fluentd-operator, docker-machine-driver-harvester, addon-resizer, flux-kustomize-controller, knative-serving, kserve, cluster-api-helm-controller, policy-controller, rancher-helm, step-ca, paranoia, terragrunt, crossplane-provider-aws-kms,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gptscript, kubernetes-dashboard, flux-kustomize-controller, policy-controller, podman, terragrunt, crossplane-provider-aws-kms, gh, gitlab-runner, traefik, chisel, containerd, atlantis, scorecard, kine, osv-scanner, zot, falcoctl, crossplane-provider-aws-sqs,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, gptscript, runc, minio-object-browser, thanos-operator, cfssl, kubernetes-dashboard, postgres-operator, flux-kustomize-controller, opensearch-k8s-operator, policy-controller, rancher-helm, paranoia, swagger, chart-testing,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, opentelemetry-collector-contrib, terraform, crossplane-provider-azure-sql, gomplate, flux-kustomize-controller, fulcio, pulumi-kubernetes-operator, src-fingerprint, k3s, policy-controller, step-ca, buildkitd, kubescape,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gptscript, docker-machine-driver-harvester, kubernetes-dashboard, flux-kustomize-controller, policy-controller, podman, terragrunt, gh, gitlab-runner, chisel, containerd, atlantis, scorecard, kine, osv-scanner, zot, falcoctl, cilium-cli, pulumi-language-yaml,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: grafana-mimir, harbor, datadog-agent, grpc-health-probe-fips, sqlexporter-fips, apko-fips, xeol-fips, opencost, rook-fips, trivy, seaweedfs-rocksdb-fips, kyverno-notation-aws-fips, podman, spire-controller-manager-fips, thanos-fips, podman-fips, velero-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gptscript, flux-kustomize-controller, policy-controller, terragrunt, crossplane-provider-aws-kms, rclone, gitlab-runner, terraform-provider-azuread, atlantis, scorecard, osv-scanner, zot, crossplane-provider-aws-sqs, cilium-cli, cert-manager-cmctl,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gptscript, flux-kustomize-controller, policy-controller, terragrunt, crossplane-provider-aws-kms, rclone, gitlab-runner, terraform-provider-azuread, atlantis, scorecard, osv-scanner, zot, crossplane-provider-aws-sqs, cilium-cli, cert-manager-cmctl,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane, crossplane-provider-azure-managedidentity, crossplane-provider-keycloak, argocd-image-updater, witness, aactl, datadog-agent, grafana-alloy-fips, gitlab-runner-fips, crossplane-provider-aws-lambda, crossplane-provider-aws-lambda-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, terraform-provider-kubernetes-fips, harbor, gcp-compute-persistent-disk-csi-driver-fips, contour, kiam, logstash, kube-rbac-proxy, mattermost-fips, rancher-loglevel, knative-serving, sqlexporter-fips, apko-fips, xeol-fips, vt-cli, trivy, kine,...