GO-2026-6094 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, kubeflow-pipelines, cert-manager-istio-csr, emissary, datadog-agent, kube-vip-cloud-provider, cluster-api, kubernetes-csi-external-attacher, kubescape, rke2-cloud-provider, fluent-operator, azure-service-operator, gatekeeper,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, crossplane-provider-aws-elasticsearch, crossplane-provider-aws-macie2-fips, splunk-otel-collector, crossplane-provider-aws-bedrockagentcore, crossplane-provider-aws-guardduty, karma-fips, clickhouse-operator-fips, amazon-ecs-cni-plugins,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: kubevela, nuclei, scorecard, pulumi-language-java, gitness, pulumi-language-yaml, bom, flux-kustomize-controller, pulumi-language-dotnet, gomplate, pulumi-kubernetes-operator, gitsign, src-fingerprint, zot, kots, goreleaser, go-licenses, pulumi, apko...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops-fips, flux-kustomize-controller, ksops, grafana-fips, litestream, age-fips, chezmoi, sops, age, grafana, flux-kustomize-controller-fips...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, cilium, oauth2-proxy, swagger, openbao-k8s, nginx-prometheus-exporter-fips, splunk-otel-collector, kafka-proxy, grafana-alloy-fips, terraform-provider-sendgrid, tekton-chains, distribution, step, dbmate, actions-runner-controller-fips,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: grype, goreleaser, k8sgpt, syft, flux-source-controller, kubescape, bom, melange, chezmoi, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, flux-kustomize-controller, gitsign, nuclei, gitea, grafana-alloy, crossplane, pulumi-language-dotnet,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: grype, goreleaser, k8sgpt, syft, flux-source-controller, kubescape, bom, melange, chezmoi, tfsec, trivy, gptscript, wolfictl, scorecard, pulumi, flux, osv-scanner, flux-kustomize-controller, gitsign, nuclei, gitea, grafana-alloy, crossplane, pulumi-language-dotnet,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trino, goreleaser, k8sgpt, flux-source-controller, kubescape, prometheus-operator, ksops, step-ca, chezmoi, py3-azure-identity, trivy, wal-g, opentelemetry-collector-contrib, pulumi, fulcio, flux, rekor, restic, flux-kustomize-controller, up, nuclei, harbor-registry,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: litestream, age, ksops, chezmoi, sops, flux-kustomize-controller...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-source-controller, cloudflared, kubescape, fulcio, rekor, flux-kustomize-controller, gitsign, aactl, terragrunt, argo-workflows, tekton-chains, slsa-verifier, oauth2-proxy, vexctl, sops, spire-server, dex, cosign, kots, tkn...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: apache-exporter, kubescape, db-operator, crossplane-provider-aws-rds, nri-apache, net-kourier, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, rabbitmq-cluster-operator, spark-operator, xeol, crossplane-provider-aws-s3,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: grype, k8sgpt, kubescape, prometheus-operator, crossplane-provider-aws-rds, chezmoi, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, gh, pulumi, fulcio, crossplane-provider-aws-s3, gatus, crossplane-provider-aws-cloudfront,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kustomize, mongodb-kubernetes-operator, apache-exporter, blobfuse2, custom-pod-autoscaler, kubernetes-csi-external-attacher, nri-redis, db-operator, crossplane-provider-aws-rds, kubernetes-dashboard-api, aws-eks-pod-identity-agent, azure-service-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: goreleaser, flux-source-controller, crossplane-provider-family-azure, kubescape, crossplane-provider-azure-managedidentity, ksops, step-ca, gh, crossplane-provider-azure-sql, opentelemetry-collector-contrib, pulumi, fulcio, flux, kubernetes-event-exporter, rekor,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: grype, k8sgpt, kubescape, prometheus-operator, chezmoi, gh, pulumi, fulcio, docker-machine-driver-harvester, gatus, istio, witness, nfpm, kine, step, sops, buildkitd, k3s, gomplate, splunk-otel-collector, gitlab-kas, crossplane-provider-azure-storage, trivy-operator,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: conftest, cilium, oauth2-proxy, cluster-api-aws-controller, authentik, splunk-otel-collector, vitess, grafana-alloy-fips, crossplane-provider-gcp-fips, tekton-chains, distribution, step, envconsul-fips, envoy-gateway, harbor-registry, livekit-cli, steampipe,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: grype, kubescape, crossplane-provider-aws-rds, xeol, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, pulumi, crossplane-provider-aws-s3, kyverno-notation-aws, gitaly, boring-registry, crossplane-provider-aws-cloudfront,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: grype, kubescape, crossplane-provider-aws-rds, xeol, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, pulumi, crossplane-provider-aws-s3, kyverno-notation-aws, gitaly, boring-registry, crossplane-provider-aws-cloudfront,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-fips, kubevela, cert-manager-cmctl, k9s, crossplane-provider-aws-sqs-fips, flux-source-controller, rclone-fips, trivy-fips, crossplane-provider-aws-sns-fips, flux, crossplane-provider-aws-cloudwatchlogs-fips, melange, external-secrets-operator,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: conftest, kubeflow-katib, nats-fips, cargobump, cilium, cluster-api-aws-controller, container-object-storage-interface-fips, cluster-api-helm-controller, swagger, cert-manager-csi-driver-fips, redka, openbao-k8s, qemu-guesthelper, splunk-otel-collector, nri-redis,...