GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, rancher-helm, kyverno-notation-aws, cluster-api-helm-controller, helm-mapkubeapis, helm-set-status, xeol, kargo, helm-push, opentofu, k8sgpt, maru, tigera-operator, k9s, manifest-tool, kube-arangodb, flux-helm-controller, gitness...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, kyverno-notation-aws, kots, apisix-ingress-controller, kuma, rancher-system-agent, opentelemetry-operator, tetragon, cloud-provider-aws, cluster-api-ipam-provider-in-cluster, grafana, openfga, rancher, cluster-autoscaler,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: kubescape, eksctl, chartmuseum, cilium-cli, flux-source-controller, k8sgpt, k9s, kots, zot, helm-push, up, zarf, helm-operator, kubevela, trivy, flux-helm-controller...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, flux-source-controller, chartmuseum, helm-docs, k8sgpt, envoy-gateway, teleport, cluster-api-helm-controller, chart-testing-fips, flux-helm-controller-fips, zarf, cert-manager-cmctl, chart-testing, flux, rancher-helm, k8ssandra-client, k9s,...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: kubescape, eksctl, chartmuseum, cilium-cli, flux-source-controller, k8sgpt, k9s, kots, zot, helm-push, up, zarf, helm-operator, kubevela, trivy, flux-helm-controller...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: steampipe, victorialogs, flux-source-controller, podinfo, flux-operator, aws-ebs-csi-driver, dkron, amazon-k8s-cni-fips, victoriametrics-cluster-fips, nova-fips, flux-image-reflector-controller, temporal-fips, flux-image-automation-controller, flux-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: steampipe, victorialogs, flux-source-controller, podinfo, flux-operator, aws-ebs-csi-driver, dkron, amazon-k8s-cni-fips, victoriametrics-cluster-fips, nova-fips, flux-image-reflector-controller, temporal-fips, flux-image-automation-controller, flux-fips,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, eck-operator-fips, skopeo-fips, chartmuseum, ops-agent, etcd, teleport, spire-controller-manager, cinder-csi-plugin-fips, opencost-fips, flux-notification-controller, cloudflared, gatekeeper, amazon-ecs-agent,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: croc, secrets-store-csi-driver-provider-gcp, eck-operator-fips, docker-credential-acr-env, chartmuseum, helm-docs, kube-vip, skopeo-fips, etcd, wolfictl, flux-helm-controller-fips, rclone, fluent-bit-plugin-loki, flux-notification-controller, kafkaexporter, kargo,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, helm-operator, kubevela, zot, zarf, helm-push, cilium-cli, trivy, k8sgpt, chartmuseum, k9s, flux-helm-controller, eksctl, up, kubescape...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, cilium-cli, k9s, flux-helm-controller, k8ssandra-client, cert-manager-cmctl, chart-testing, helm-operator, tw, kubescape, flux, pluto, zarf, chartmuseum, zot, rancher-helm, cluster-api-helm-controller, helm-push, trivy, helm-docs, eksctl...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, helm-operator, kubevela, zot, zarf, helm-push, cilium-cli, trivy, k8sgpt, chartmuseum, k9s, flux-helm-controller, eksctl, up, kubescape...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, k3d, cilium-cli, k8sgpt, flux-helm-controller, newrelic-infrastructure-agent, helm, skaffold, grype, gitness, kubevela, kubescape, buildkitd, melange, ctop, kaniko, zot, fuse-overlayfs-snapshotter, helm-push, trivy, eksctl, up...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, osv-scanner, helm-mapkubeapis, kubescape-operator, kargo, cilium-cli, docker-compose, k8sgpt, falco-no-driver, envoy-gateway, k9s, manifest-tool, dagger, flux-helm-controller, spegel, k8ssandra-client, cert-manager-cmctl, helm-operator,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, kargo, cilium-cli, cerbos, k8sgpt, envoy-gateway, k9s, flux-helm-controller, k8ssandra-client, cert-manager-cmctl, chart-testing, helm-operator, tw, pluto, zarf, rancher-fleet, chartmuseum, istio, linkerd2, zot, rancher-helm,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: grafana-mimir, flux-source-controller, neuvector-sigstore-interface, k3d, skopeo, kargo, gh, spire-server, rook, crossplane-provider-azure-storage, flux-helm-controller, actions-runner-controller, goreleaser, kubernetes-event-exporter, tekton-chains, terraform,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-controller, envoy-ratelimit, osv-scanner, smarter-device-manager, omnibump, victoriametrics-cluster, stakater-reloader, gh, spire-server, nova, oras, flux-helm-controller, actions-runner-controller, goreleaser, nfs-subdir-external-provisioner, hubble,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kots, trufflehog, crossplane-provider-aws-cloudformation, grafana-alloy, grafana, k9s, dagger, flux-helm-controller, terraform-provider-azuread, crossplane-provider-family-azure, cluster-api, terraform-provider-pagerduty, lazygit, helm, skaffold...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kots, trufflehog, crossplane-provider-aws-cloudformation, grafana-alloy, grafana, k9s, dagger, flux-helm-controller, terraform-provider-azuread, crossplane-provider-family-azure, cluster-api, terraform-provider-pagerduty, lazygit, helm, skaffold...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, helm-mapkubeapis, kargo, cilium-cli, cerbos, k8sgpt, nova, envoy-gateway, k9s, flux-helm-controller, k8ssandra-client, cert-manager-cmctl, chart-testing, helm-operator, tw, kubescape, flux, headlamp, helm-set-status, pluto, zarf,...