GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux-source-controller, flux...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: trivy, chartmuseum, eksctl, flux-source-controller, k9s, kots, helm-operator, kubescape, kubevela, flux-helm-controller, cilium-cli, up, zarf, helm-push, k8sgpt, zot...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-docs, cluster-api-helm-controller, k9s, cert-manager-cmctl, flux-helm-controller, rancher-helm, k8ssandra-client, pluto, flux, chartmuseum, eksctl, helm-push, zarf, trivy, flux-source-controller, chart-testing, helm-operator, tw, cilium-cli, kots, kubescape, zot...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: kuma, flux-source-controller, kots, cert-manager-cmctl, cilium-cli, rancher-fleet, zarf, helm-push, flux...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: trivy, chartmuseum, eksctl, flux-source-controller, k9s, kots, helm-operator, kubescape, kubevela, flux-helm-controller, cilium-cli, up, zarf, helm-push, k8sgpt, zot...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, flux-helm-controller, gitness, eksctl, ctop, k3d, helm-push, melange, k8sgpt, grype, trivy, newrelic-infrastructure-agent, flux-source-controller, helm, cilium-cli, buildkitd, kaniko, fuse-overlayfs-snapshotter, kots, kubescape, up, zot...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: falcoctl, skaffold, sigstore-scaffolding, policy-controller, ko, crossplane, gh, gitsign, trivy-operator, zarf, trivy, cosign, flux-source-controller, docker, goreleaser, buildkitd, tkn, kyverno, neuvector-sigstore-interface, kyverno-notation-aws, vexctl, witness,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-docs, cluster-api-helm-controller, k9s, cert-manager-cmctl, flux-helm-controller, k8ssandra-client, rancher-helm, pluto, chartmuseum, eksctl, cerbos, kargo, helm-push, k8sgpt, zarf, trivy, flux-source-controller, chart-testing, helm-operator, tw, envoy-gateway,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, skaffold, snyk-cli, k9s, gptscript, kubevela, dagger, grafana-alloy, flux, osv-scanner, tfsec, task, syft, chezmoi, crossplane, pulumi-language-dotnet, gitsign, go-licenses, kargo, apko, timoni, k8sgpt, grype, melange, trivy, bom, zarf,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, skaffold, snyk-cli, k9s, gptscript, kubevela, dagger, grafana-alloy, flux, osv-scanner, tfsec, task, syft, chezmoi, crossplane, pulumi-language-dotnet, gitsign, go-licenses, kargo, apko, timoni, k8sgpt, grype, melange, trivy, bom, zarf,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, skaffold, nfpm, snyk-cli, k9s, gptscript, kubevela, steampipe, dagger, grafana-alloy, flux, argo-cd, gitaly, xeol, osv-scanner, tfsec, syft, chezmoi, crossplane, pulumi-language-dotnet, cerbos, external-secrets-operator, gitsign, kargo,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: boring-registry, py3-azure-identity, falcoctl, step-ca, velero, bank-vaults, py3-cassandra-medusa, sigstore-scaffolding, policy-controller, airflow, sops, secrets-store-csi-driver-provider-azure, rekor, wal-g, flux, grafana-agent-operator, restic, hugo, chezmoi,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, sops, rekor, dex, fulcio, gitsign, slsa-verifier, cosign, flux-source-controller, aactl, argo-workflows, terragrunt, flux-kustomize-controller, vexctl, kots, kubescape, spire-server, cloudflared, tekton-chains, tkn...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, falcoctl, ratify, slsa-verifier, skopeo, flux-source-controller, podman, kots, witness, kubescape, gitsign, aactl, undock, kyverno, tekton-chains, zarf, buildah...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: skaffold, slsa-verifier, flux-source-controller, cosign, kubescape, policy-controller, aactl, spire-server, apko, tekton-chains, ko, tkn, melange...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, cloud-provider-aws, policy-controller, steampipe, traefik, crossplane-provider-aws-memorydb, ko, flux, crossplane-provider-aws-route53, cluster-api-azure-controller, trivy-operator, buildah, glab,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: falcoctl, skaffold, sigstore-scaffolding, policy-controller, ko, ratify, crossplane, gh, gitsign, zarf, cosign, flux-source-controller, goreleaser, aactl, tkn, kyverno, docker-cli-buildx, neuvector-sigstore-interface, kyverno-notation-aws, vexctl, witness, kubescape,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, falcoctl, ratify, flux-source-controller, witness, goreleaser, gitsign, aactl, policy-controller, teleport, kyverno, tkn, zot...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: falcoctl, skaffold, sigstore-scaffolding, policy-controller, ko, ratify, crossplane, gh, gitsign, trivy-operator, zarf, trivy, slsa-verifier, cosign, flux-source-controller, docker, goreleaser, aactl, buildkitd, tkn, kyverno, docker-cli-buildx,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: falcoctl, skaffold, sigstore-scaffolding, policy-controller, rekor, ko, ratify, crossplane, gh, gitsign, trivy-operator, zarf, trivy, slsa-verifier, cosign, flux-source-controller, docker, goreleaser, aactl, buildkitd, tkn, kyverno, neuvector-sigstore-interface,...