GO-2026-6499 vulnerabilities

Vulnerabilities for packages: gitness, kyverno-notation-aws, xeol, helm-mapkubeapis, tigera-operator, kargo, kube-arangodb, manifest-tool, flux-helm-controller, k8sgpt, maru, k9s, helm-push, helm-set-status, rancher-helm, cert-manager-cmctl, opentofu, cluster-api-helm-controller...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: gitness, kyverno-notation-aws, xeol, helm-mapkubeapis, tigera-operator, kargo, kube-arangodb, manifest-tool, flux-helm-controller, k8sgpt, maru, k9s, helm-push, helm-set-status, rancher-helm, cert-manager-cmctl, opentofu, cluster-api-helm-controller...

GHSA-M37J-52J7-PJW7 vulnerabilities

Vulnerabilities for packages: gitness, kyverno-notation-aws, xeol, helm-mapkubeapis, tigera-operator, kargo, kube-arangodb, manifest-tool, flux-helm-controller, k8sgpt, maru, k9s, helm-push, helm-set-status, rancher-helm, cert-manager-cmctl, opentofu, cluster-api-helm-controller...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: helm-operator, flux-kustomize-controller, apisix-ingress-controller, kubernetes-csi-external-health-monitor, cass-operator, spicedb, calico, kubernetes-csi-external-snapshotter, cluster-api-provider-vsphere, cloud-provider-azure, kubescape, caddy,...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: zarf, up, eksctl, cilium-cli, zot, flux-source-controller, helm-push, k9s, trivy, kubevela, chartmuseum, kubescape, flux-helm-controller, kots, k8sgpt, helm-operator...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: zarf, up, eksctl, cilium-cli, zot, flux-source-controller, helm-push, k9s, trivy, kubevela, chartmuseum, kubescape, flux-helm-controller, kots, k8sgpt, helm-operator...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, cert-manager-cmctl-fips, istio, cluster-api-helm-controller, flux-helm-controller-fips, rancher-helm, flux-fips, trivy, teleport, helm-docs, chart-testing-fips, envoy-gateway, cerbos-fips, helm-operator, rancher-fleet, rancher-fleet-fips,...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: victoriametrics, aws-ebs-csi-driver, flux-image-reflector-controller, grafana-rollout-operator, cert-manager-fips, grafana-fips, flux-fips, flux-operator-fips, victoriametrics-cluster, grafana-operator, victorialogs-fips, terragrunt, steampipe, librechat,...

GO-2026-4599 vulnerabilities

Vulnerabilities for packages: victoriametrics, aws-ebs-csi-driver, flux-image-reflector-controller, grafana-rollout-operator, cert-manager-fips, grafana-fips, flux-fips, flux-operator-fips, victoriametrics-cluster, grafana-operator, victorialogs-fips, terragrunt, steampipe, librechat,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, livekit-cli, mattermost-fips, prometheus-operator, kube-conformance, beats-fips, dapr, cluster-autoscaler-fips, gcp-compute-persistent-disk-csi-driver, envoy-gateway-fips,...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: spegel, prometheus-operator, kyverno-notation-aws, gcsfuse, beats-fips, src-fingerprint, cluster-autoscaler-fips, grafana-alloy, gcp-compute-persistent-disk-csi-driver, eksctl, kube-rbac-proxy-fips, ollama, kots, chartmuseum-fips, grafana, docker-compose-fips,...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-operator, pluto, flux-source-controller, kubescape, helm-push, kots, tw, chart-testing, cilium-cli, rancher-helm, cluster-api-helm-controller, flux, zot, flux-helm-controller, k9s, chartmuseum, cert-manager-cmctl, zarf, trivy, eksctl, k8ssandra-client, helm-docs...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: helm-operator, k9s, up, zarf, kots, trivy, zot, flux-source-controller, eksctl, cilium-cli, flux-helm-controller, kubevela, k8sgpt, kubescape, chartmuseum, helm-push...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: helm-operator, k9s, up, zarf, kots, trivy, zot, flux-source-controller, eksctl, cilium-cli, flux-helm-controller, kubevela, k8sgpt, kubescape, chartmuseum, helm-push...

GO-2025-4100 vulnerabilities

Vulnerabilities for packages: helm-operator, grype, melange, flux-source-controller, kaniko, trivy-operator, kubescape, wolfictl, k3s, helm-push, manifest-tool, newrelic-infrastructure-agent, helm, k8ssandra-client, helm-mapkubeapis, ctop, steampipe, kots, tw, skaffold, neuvector-scanner,...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: grype, melange, flux-source-controller, kaniko, kubescape, helm-push, newrelic-infrastructure-agent, helm, up, ctop, kots, skaffold, cilium-cli, buildkitd, k3d, zot, fuse-overlayfs-snapshotter, flux-helm-controller, gitness, trivy, kubevela, k8sgpt, eksctl...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-operator, pluto, istio, flux-source-controller, helm-push, linkerd2, kots, tw, chart-testing, cilium-cli, cerbos, rancher-helm, cluster-api-helm-controller, zot, flux-helm-controller, envoy-gateway, k9s, chartmuseum, cert-manager-cmctl, zarf, kargo, trivy,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, step-ca, sops, crossplane-provider-azure-sql, rabbitmq-messaging-topology-operator, flux-source-controller, neuvector-sigstore-interface, kubescape, fulcio, k3s, actions-runner-controller, sigstore-scaffolding, scorecard, glab, skopeo,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: karpenter, pluto, rabbitmq-messaging-topology-operator, grafana-operator, apko, flux-source-controller, envoy-ratelimit, kubewatch, mariadb-operator, victoriametrics-cluster, external-secrets-operator, stakater-reloader, actions-runner-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, vcluster, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, docker, flux-source-controller, rclone, scorecard, helm, kyverno-notation-aws, hydra, crossplane-provider-aws-sns, cilium-cli, goreleaser, nfpm, argo-events,...