GO-2026-6094 vulnerabilities

Vulnerabilities for packages: helm-operator, metrics-server, tkn, kube-rbac-proxy, apisix-ingress-controller, rancher-system-agent, kyverno, k3s, kube-state-metrics, cloud-provider-azure, tetragon, rancher-agent, kubeflow-pipelines, cluster-api, kubescape, cluster-api-provider-vsphere,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, scuttle, cluster-api-helm-controller-fips, crossplane-provider-aws-secretsmanager, crossplane-provider-aws-medialive, haproxy-ingress-fips, jsonnet-bundler, spicedb-operator, karma, crossplane-provider-aws-ecr-fips, s5cmd,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: scorecard, kots, go-licenses, gitness, bom, nuclei, goreleaser, pulumi-language-java, pulumi-language-dotnet, src-fingerprint, gomplate, gitsign, apko, pulumi-kubernetes-operator, pulumi-language-yaml, flux-kustomize-controller, kubevela, zot, pulumi...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops-fips, grafana-fips, flux-kustomize-controller, age-fips, grafana, ksops, litestream, age, sops, chezmoi, flux-kustomize-controller-fips...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: external-secrets-fips, azure-aad-pod-identity-mic, kube-fluentd-operator, prometheus-mysqld-exporter, mc-fips, filebrowser, etcd, hugo, kserve, kubernetes-fips, beats, prometheus-elasticsearch-exporter-fips, trivy-fips, x509-certificate-exporter-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux-source-controller, gitea, gptscript, go-licenses, kargo, guac, kubevela, flux, goreleaser, argo-events, syft, kaniko, kubescape, pulumi-kubernetes-operator, gitsign, argo-workflows, src-fingerprint, nuclei, kots, flux-image-automation-controller, chezmoi, tfsec,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux-source-controller, gitea, gptscript, go-licenses, kargo, guac, kubevela, flux, goreleaser, argo-events, syft, kaniko, kubescape, pulumi-kubernetes-operator, gitsign, argo-workflows, src-fingerprint, nuclei, kots, flux-image-automation-controller, chezmoi, tfsec,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-source-controller, bank-vaults, tkn, fluent-bit-plugin-loki, grafana-mimir, flyte, step-ca, thanos, guac, step, flux, policy-controller, rekor, terragrunt, boring-registry, goreleaser, fulcio, argo-events, rook, ksops, restic, kubescape, argo-workflows, velero,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: age, sops, flux-kustomize-controller, chezmoi, litestream, ksops...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: slsa-verifier, knative-eventing, vcluster, flyte, migrate, jaeger-operator, controller-gen, nri-haproxy, nfs-subdir-external-provisioner, azure-workload-identity-webhook, rook, rancher-webhook, envconsul, cloud-provider-azure, kuberay-operator, cis-operator,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, tkn, rekor, terragrunt, fulcio, dex, kubescape, gitsign, oauth2-proxy, argo-workflows, sops, kots, spire-server, tekton-chains, cloudflared, vexctl, flux-kustomize-controller, aactl, cosign...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, nfpm, fulcio, splunk-otel-collector, syft, kubernetes-dashboard, terraform-provider-acme, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-azure-sql, crossplane-provider-aws-sqs,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kuberlr, extism, metacontroller, kubernetes-csi-external-resizer, ghaudit, opencost, hey, nri-haproxy, sriov-network-device-plugin, nfs-subdir-external-provisioner, azure-workload-identity-webhook, local-static-provisioner, lvm-driver, ytt,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, bank-vaults, skopeo, grafana-mimir, tkn, kargo, step-ca, guac, kubevela, flux, policy-controller, rekor, scorecard, terragrunt, fulcio, goreleaser, argo-events, crossplane-provider-azure-managedidentity, rook,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, nfpm, fulcio, splunk-otel-collector, syft, kubernetes-dashboard, docker-machine-driver-harvester, terraform-provider-azurerm, crossplane-provider-azure-storage, crossplane-provider-azure-sql, flux-image-automation-controller,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: clickhouse-backup, external-secrets-fips, syft-fips, gatus, kserve, beats, trivy-fips, witness, spire-controller-manager-fips, ratify-fips, velero-fips, external-secrets-operator-fips, crossplane-provider-gcp-fips, envconsul, vault-csi-provider, frankenphp-8.4,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: flux-source-controller, vcluster, extism, nfpm, syft, terraform-provider-azurerm, gitsign, crossplane-provider-azure-storage, crossplane-provider-azure-sql, terraform-provider-azuread, crossplane-provider-aws-sqs, flux-image-automation-controller,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: flux-source-controller, vcluster, extism, nfpm, syft, terraform-provider-azurerm, gitsign, crossplane-provider-azure-storage, crossplane-provider-azure-sql, terraform-provider-azuread, crossplane-provider-aws-sqs, flux-image-automation-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: grype-fips, tekton-pipelines, buildkitd-fips, terraform-provider-databricks, terraform-provider-pagerduty, crossplane-provider-aws-lambda, syft-fips, crossplane-provider-aws-kms-fips, databricks-cli-fips, crossplane-provider-aws-firehose,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-custom-runner, cluster-api-helm-controller-fips, supercronic, databricks-cli-fips, azure-aad-pod-identity-mic, kube-fluentd-operator, volume-modifier-for-k8s, gatus, prometheus-mysqld-exporter, karma, etcd, rancher-helm, s5cmd, amazon-k8s-cni,...