GO-2026-6609 vulnerabilities

Vulnerabilities for packages: zarf, gitness, rclone, rancher-agent, kubernetes, gitlab-pages, headlamp, grafana, flux-source-controller, ingress-nginx-controller, chartmuseum, temporal-ui-server, cert-manager-webhook-pdns, karpenter, spire-server, argo-workflows, falco-no-driver, external-dns,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: zarf, gitness, rclone, rancher-agent, kubernetes, gitlab-pages, headlamp, grafana, flux-source-controller, ingress-nginx-controller, chartmuseum, temporal-ui-server, cert-manager-webhook-pdns, karpenter, spire-server, argo-workflows, falco-no-driver, external-dns,...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: flux, kyverno-notation-aws, kyverno, flux-source-controller-fips, flux-source-controller, kyverno-notation-aws-fips...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: flux, cert-manager-cmctl, gitlab-operator-fips, gitlab-operator, rancher-fleet-fips, zarf, helm-push, kuma, rancher-fleet, flux-source-controller-fips, cert-manager-cmctl-fips, flux-source-controller, flux-fips, cilium-cli, kots, helm-diff-fips, zarf-fips, helm-diff...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: trivy-fips, pluto, kuma, cerbos, harbor-fips, cert-manager-cmctl-fips, kots, helm-docs, flux-helm-controller-fips, kargo, linkerd2, trivy, rancher-fleet-fips, helm-operator, flux-helm-controller, zarf, consul-k8s, chart-testing-fips, envoy-gateway-fips, rancher-fleet...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: trivy, helm-operator, flux-helm-controller, zarf, kubevela, kubescape, kots, flux-source-controller, eksctl, cilium-cli, chartmuseum, k9s, helm-push, up, zot, k8sgpt...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: trivy, helm-operator, flux-helm-controller, zarf, kubevela, kubescape, kots, flux-source-controller, eksctl, cilium-cli, chartmuseum, k9s, helm-push, up, zot, k8sgpt...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: kubescape-operator, google-osconfig-agent, kots, nerdctl-fips, docker-cli-buildx, kargo, amazon-ecs-agent-fips, rancher-fleet, cloudbeat, eksctl, helm-operator-fips, wolfictl, k9s-fips, datadog-agent, opa-fips-envoy, cloudbeat-fips, flux-source-controller-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: kubescape-operator, google-osconfig-agent, kots, nerdctl-fips, docker-cli-buildx, kargo, amazon-ecs-agent-fips, rancher-fleet, cloudbeat, eksctl, helm-operator-fips, wolfictl, k9s-fips, datadog-agent, opa-fips-envoy, cloudbeat-fips, flux-source-controller-fips,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: flux-operator, pluto, flux-source-watcher, aws-load-balancer-controller-fips, loki-fips, stakater-reloader, podinfo, grafana-fips, cluster-autoscaler-fips, victorialogs, flux-helm-controller, flux-notification-controller, steampipe, nova, victoriametrics-cluster,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: flux-operator, pluto, flux-source-watcher, aws-load-balancer-controller-fips, loki-fips, stakater-reloader, podinfo, grafana-fips, cluster-autoscaler-fips, victorialogs, flux-helm-controller, flux-notification-controller, steampipe, nova, victoriametrics-cluster,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: nri-kubernetes, kube-state-metrics-fips, pluto, kyverno-policy-reporter-ui, witness, argo-workflows-fips, kots, timestamp-authority, boring-registry-fips, nerdctl-fips, docker-cli-buildx, calico, tekton-chains-fips, glow, seaweedfs, ko-fips, tkn,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: apko, skaffold, melange, cosign, kubescape, spire-server, ko, slsa-verifier, tekton-chains, flux-source-controller, aactl, spire-server-fips, policy-controller, falcoctl-fips, tkn...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, rekor, gomplate-fips, argo-workflows-fips, kots, timestamp-authority, minio, aactl, kargo, vault, caddy, sops, ko-fips, tkn, wolfictl, spire-server-fips, falcoctl, gomplate, nerdctl, neuvector, cosign-fips, policy-controller, rekor-fips,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, kube-state-metrics-fips, sigstore-scaffolding, aws-load-balancer-controller-fips, prometheus-statsd-exporter-fips, kots, prometheus-mongodb-exporter, minio, aactl, pulumi-kubernetes-operator, terraform-provider-sendgrid,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: falco-no-driver, chainctl, kubescape-server-fips, witness, kots, aactl, commercial-kyverno, kyverno-notation-aws-fips, tekton-chains-fips, kyverno-notation-aws, zarf, kyverno, flux-source-controller, kubescape-server, prometheus-podman-exporter-fips, buildah-fips,...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: cert-manager, vault-fips, argo-workflows-fips, kots, frankenphp-8.4, prometheus-mongodb-exporter, minio, aactl, knative-eventing-fips, vault, cloudbeat, kubescape-server, k9s-fips, istio, tigera-operator, cloudbeat-fips, flux-source-controller-fips, helm, coder,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: chainctl, witness, aactl, kyverno-notation-aws-fips, tkn-fips, tekton-chains-fips, kyverno-notation-aws, kyverno, cloudbeat, flux-source-controller, ratify-fips, zot, gitsign, tkn, policy-controller-fips, cloudbeat-fips, kyverno-policy-reporter-plugins-kyverno,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: trivy-fips, chainctl, spire-server, witness, aactl, tflint, gh, neuvector-sigstore-interface-fips, kyverno-notation-aws-fips, trivy, tkn-fips, tekton-chains-fips, trivy-operator, kyverno-notation-aws, kyverno-policy-reporter-plugins-kyverno-fips, zarf, crossplane,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, sigstore-scaffolding, cloud-provider-azure, rekor, azuredisk-csi, kubernetes-dashboard-auth-fips, gomplate-fips, kyverno-policy-reporter-ui, argo-workflows-fips, kots, timestamp-authority, minio, aactl, pulumi-kubernetes-operator,...