GO-2026-6609 vulnerabilities

Vulnerabilities for packages: rclone, aactl, flux-source-controller, argo-workflows, atlantis, cert-manager, temporal-ui-server, argo-cd, gitlab-pages, hubble-ui, spire-server, zarf, grafana, kyverno-policy-reporter, cloudprober, step, openbao, prometheus-adapter, cert-manager-webhook-pdns,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: rclone, aactl, flux-source-controller, argo-workflows, atlantis, cert-manager, temporal-ui-server, argo-cd, gitlab-pages, hubble-ui, spire-server, zarf, grafana, kyverno-policy-reporter, cloudprober, step, openbao, prometheus-adapter, cert-manager-webhook-pdns,...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-source-controller-fips, flux, kyverno-notation-aws, kyverno-notation-aws-fips...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: k9s, trivy, cilium-cli, up, flux-source-controller, k8sgpt, zarf, eksctl, kubescape, kubevela, helm-push, chartmuseum, zot, kots, flux-helm-controller, helm-operator...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cerbos-fips, cerbos, consul-k8s-fips, rancher-fleet, cilium-cli, trivy, flux-source-controller, flux-fips, rancher-fleet-fips, consul-k8s, chart-testing-fips, chartmuseum-fips, k8sgpt, zarf, cert-manager-cmctl, rancher-helm, cert-manager-cmctl-fips, kargo,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: k9s, trivy, cilium-cli, up, flux-source-controller, k8sgpt, zarf, eksctl, kubescape, kubevela, helm-push, chartmuseum, zot, kots, flux-helm-controller, helm-operator...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kots, cilium-cli, rancher-fleet, flux-source-controller, flux-source-controller-fips, flux-fips, cert-manager-cmctl, zarf, gitlab-operator, gitlab-operator-fips, flux, helm-push, zarf-fips, kuma, cert-manager-cmctl-fips, rancher-fleet-fips, helm-diff-fips, helm-diff...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: victorialogs-fips, flux-operator, cert-manager-fips, flux-image-automation-controller, flux-notification-controller, flux-fips, flux-source-controller, gotenberg, grafana-operator, polaris, flux-source-watcher, victorialogs, victoriametrics-cluster, grafana-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, newrelic-infrastructure-agent-fips, zarf, k8sgpt, cert-manager-cmctl, k9s, beats, teleport, xeol-fips, google-osconfig-agent, cloudbeat-fips, k3s, amazon-ecs-agent-fips, falco-no-driver, nerdctl, spegel, ctop, opa, rancher-agent,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: victorialogs-fips, flux-operator, cert-manager-fips, flux-image-automation-controller, flux-notification-controller, flux-fips, flux-source-controller, gotenberg, grafana-operator, polaris, flux-source-watcher, victorialogs, victoriametrics-cluster, grafana-fips,...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, newrelic-infrastructure-agent-fips, zarf, k8sgpt, cert-manager-cmctl, k9s, beats, teleport, xeol-fips, google-osconfig-agent, cloudbeat-fips, k3s, amazon-ecs-agent-fips, falco-no-driver, nerdctl, spegel, ctop, opa, rancher-agent,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: agentbeat-fips, policy-controller-fips, aws-iam-authenticator-fips, neuvector-sigstore-interface, amazon-cloudwatch-agent-fips, grafana-fips, aws-otel-collector, crossplane, prometheus-fips, zarf, traefik, atlantis-fips, goreleaser, dataplaneapi,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: vault-k8s, wireguard-go, fuse-overlayfs-snapshotter, vault-csi-provider, memcached-exporter, prometheus-node-exporter-fips, prometheus-bind-exporter, k3d, metrics-server, minio, k8sgpt, gobuster, timoni, node-problem-detector, trust-manager, kubeflow-katib,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, vault-csi-provider, kubernetes-dashboard-fips, minio, dex-fips, zarf, goreleaser, vault, rekor-fips, ko-fips, weaviate, k3s, nerdctl, neuvector-fips, fulcio, cosign-fips, rancher-agent, sigstore-scaffolding, flux-source-controller, neuvector,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: skaffold, aactl, flux-source-controller, slsa-verifier, spire-server, tkn, kubescape, cosign, melange, tekton-chains, spire-server-fips, apko, falcoctl-fips, ko, policy-controller...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: chainctl-fips, kubescape-server-fips, aactl, flux-source-controller, ratify-fips, prometheus-podman-exporter-fips, skopeo-fips, gitsign, tekton-chains, kubescape, falcoctl-fips, kyverno, slsa-verifier, zarf, podman, tekton-chains-fips, prometheus-podman-exporter,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, flux-image-automation-controller-fips, external-secrets-operator-fips, backup-restore-operator, docker-machine-driver-harvester, tigera-operator, gitea-fips, grafana-fips, argo-cd, argocd-image-updater, prometheus-fips, minio, zarf, keda-fips,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: trivy, kyverno-policy-reporter-plugins-kyverno-fips, tflint-fips, image-factory, aactl, flux-source-controller, policy-controller-fips, ratify-fips, tkn, gitsign, neuvector-sigstore-interface, kubescape, tekton-chains, falcoctl-fips,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, aactl, flux-source-controller, ratify-fips, tkn, gitsign, kyverno-policy-reporter-plugins-kyverno, falcoctl-fips, kyverno, goreleaser, tekton-chains-fips, cloudbeat, chainctl, teleport, cloudbeat-fips, witness, zot, kyverno-notation-aws,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, trivy, policy-controller-fips, aactl, flux-source-controller, tkn, sigstore-scaffolding-fips, gitsign, neuvector-sigstore-interface, kubescape, apko, falcoctl-fips, tekton-chains, vexctl, slsa-verifier, spire-server, zarf, tekton-chains-fips,...