GO-2026-6609 vulnerabilities

Vulnerabilities for packages: zarf, aactl, k6, kyverno-policy-reporter, cert-manager, gitness, chartmuseum, mesosphere-vsphere-csi, kyverno-policy-reporter-ui, headlamp, openbao, loki, yunikorn-web, spire-server, karpenter, gitlab-pages, kube-arangodb, temporal-ui-server, flux, continuity, rclone...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: zarf, aactl, k6, kyverno-policy-reporter, cert-manager, gitness, chartmuseum, mesosphere-vsphere-csi, kyverno-policy-reporter-ui, headlamp, openbao, loki, yunikorn-web, spire-server, karpenter, gitlab-pages, kube-arangodb, temporal-ui-server, flux, continuity, rclone...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, flux, kyverno-notation-aws-fips, kyverno-notation-aws, flux-source-controller-fips...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, istio, trivy-operator-fips, flux-helm-controller, rancher-fleet-fips, linkerd2, helm-docs, flux-helm-controller-fips, flux-source-controller-fips, consul-k8s, helm-operator, harbor, cluster-api-helm-controller, rancher-fleet, eksctl, kargo, kuma, k9...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: helm-diff-fips, cert-manager-cmctl, zarf, gitlab-operator, rancher-fleet-fips, cilium-cli, rancher-fleet, flux-source-controller, helm-push, kots, gitlab-operator-fips, helm-diff, kuma, zarf-fips, flux, cert-manager-cmctl-fips, flux-fips, flux-source-controller-fips...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: helm-operator, kubevela, zarf, chartmuseum, flux-helm-controller, up, cilium-cli, zot, flux-source-controller, eksctl, helm-push, kots, kubescape, k9s, k8sgpt, trivy...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: helm-operator, kubevela, zarf, chartmuseum, flux-helm-controller, up, cilium-cli, zot, flux-source-controller, eksctl, helm-push, kots, kubescape, k9s, k8sgpt, trivy...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: terragrunt, grafana-operator-fips, victorialogs, aws-load-balancer-controller-fips, flux-helm-controller, flux-operator, flux-image-reflector-controller, grafana-fips, aws-ebs-csi-driver-fips, cluster-autoscaler-fips, cert-manager-fips, nova, polaris, victoriametrics...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: terragrunt, grafana-operator-fips, victorialogs, aws-load-balancer-controller-fips, flux-helm-controller, flux-operator, flux-image-reflector-controller, grafana-fips, aws-ebs-csi-driver-fips, cluster-autoscaler-fips, cert-manager-fips, nova, polaris, victoriametrics...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, newrelic-infrastructure-agent, helm-mapkubeapis, helm-fips, rancher, kube-arangodb-fips, newrelic-infrastructure-agent-fips, helm-diff-fips, beats-fips, opa-fips-envoy, headlamp, grype, kubevela, tekton-pipelines, google-osconfig-agent,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, newrelic-infrastructure-agent, helm-mapkubeapis, helm-fips, rancher, kube-arangodb-fips, newrelic-infrastructure-agent-fips, helm-diff-fips, beats-fips, opa-fips-envoy, headlamp, grype, kubevela, tekton-pipelines, google-osconfig-agent,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, spire-server, kyverno-policy-reporter, falcoctl, prometheus, spark-operator, nri-prometheus, syft-fips, dive, opa-fips-envoy, gh, cloud-sql-proxy, grafana-alloy, calico-fips, grype, mockery, spark-operator-fips, ko-fips,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: git-lfs, kubernetes-csi-livenessprobe-fips, prometheus-node-exporter-fips, newrelic-infrastructure-agent, vault-k8s, falcoctl, prometheus-pushgateway, flux-kustomize-controller, terraform, spark-operator, nri-prometheus, gobuster, dive, rqlite, kube-fluentd-operator,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: slsa-verifier, ko, aactl, apko, spire-server, tekton-chains, flux-source-controller, falcoctl-fips, tkn, kubescape, cosign, spire-server-fips, policy-controller, skaffold, melange...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: terragrunt, spire-server, dex-fips, gomplate-fips, falcoctl, flux-kustomize-controller, minio-fips, ko-fips, minio, kube-oidc-proxy, kube-rbac-proxy, oauth2-proxy, zot, tkn, vault-csi-provider, cosign, tekton-chains, argo-workflows-fips, rancher-agent, caddy,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: chainctl, tekton-chains-fips, falcoctl, ratify-fips, flux-source-controller-fips, tekton-chains, kubescape-server-fips, ratify, slsa-verifier, chainctl-fips, skopeo, podman, falco-no-driver, prometheus-podman-exporter, kyverno-fips, buildah, zarf, aactl, buildah-fips...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, spire-server, gitlab-workhorse-ce-fips, vault-fips, prometheus, minio-fips, terraform, rancher, kube-arangodb-fips, kubescape-server-fips, commercial-expanso-edge, calico-fips, gitlab-workhorse-ce, flux-image-automation-controller-fips,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: chainctl, ko, trivy-operator-fips, spire-server, tekton-chains-fips, image-factory, falcoctl, kyverno-policy-reporter-plugins-kyverno-fips, crossplane, tflint, trivy-operator, buildkitd-fips, cloudbeat, flux-source-controller-fips, ratify-fips, tekton-chains,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: chainctl, tekton-chains-fips, falcoctl, kyverno-notation-aws-fips, ratify-fips, cloudbeat, ratify, tkn-fips, kyverno-policy-reporter-plugins-kyverno, image-factory-fips, kyverno-fips, aactl, kyverno, zot, goreleaser, falcoctl-fips, tkn, witness, teleport,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: terragrunt, restic, spire-server, gomplate-fips, influxd, git-sync-fips, azcopy-fips, falcoctl, flux-kustomize-controller, prometheus, cluster-autoscaler-fips, minio-fips, step-kms-plugin-fips, terraform, rancher, buildkitd-fips, harbor-registry-fips, chezmoi,...