GO-2026-6094 vulnerabilities

Vulnerabilities for packages: spqr, cluster-api-gcp-controller, gitlab-kas, cluster-api, rancher, telegraf, tetragon, cluster-api-helm-controller, kubernetes, azure-service-operator, kapp-controller, keda, crossplane, kubeflow-pipelines, cloud-provider-azure, datadog-agent, openbao,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, redis-operator, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips, longhorn-cli-fips, fluxcd-kustomize-mutating-webhook-fips,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: kots, flux-kustomize-controller, apko, go-licenses, gitsign, pulumi-language-java, gitness, zot, pulumi-language-dotnet, pulumi-kubernetes-operator, pulumi-language-yaml, nuclei, scorecard, src-fingerprint, bom, goreleaser, pulumi, gomplate, kubevela...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, flux-kustomize-controller, age-fips, grafana-fips, sops-fips, grafana, chezmoi, flux-kustomize-controller-fips, sops, age, litestream...

GO-2024-3321 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, prometheus-alertmanager-fips, kuma, sftpgo-plugin-eventstore, crossplane-provider-aws-firehose, cloudnative-pg, certificate-transparency-fips, cosign, kaniko, kafkaexporter, kubeflow-pipelines, kaniko-fips, oauth2-proxy, cert-exporter,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: k8sgpt, kargo, apko, argo-workflows, gitsign, osv-scanner, skaffold, trivy, task, syft, scorecard, zarf, crossplane, pulumi-language-yaml, grype, melange, snyk-cli, flux-image-automation-controller, zot, nuclei, chezmoi, flux-kustomize-controller,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: k8sgpt, kargo, apko, argo-workflows, gitsign, osv-scanner, skaffold, trivy, task, syft, scorecard, zarf, crossplane, pulumi-language-yaml, grype, melange, snyk-cli, flux-image-automation-controller, zot, nuclei, chezmoi, flux-kustomize-controller,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: falcoctl, py3-azure-identity, timestamp-authority, k8sgpt, argo-workflows, trivy, grafana-mimir, grafana-agent-operator, zarf, sops, airflow, sigstore-scaffolding, zot, nuclei, chezmoi, flux-kustomize-controller, rekor, py3-cassandra-medusa, restic, step-ca, buildkit...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: ksops, age, flux-kustomize-controller, chezmoi, sops, litestream...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: opentofu, kubo, cluster-api, kube-fluentd-operator, azure-workload-identity-webhook, cloud-sql-proxy, dask-gateway, chisel, amazon-k8s-cni, continuity, istio, crossplane-provider-aws-lambda, cluster-api-helm-controller, nfs-subdir-external-provisioner, grafana-mimir,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: cloudflared, oauth2-proxy, slsa-verifier, argo-workflows, gitsign, sops, flux-kustomize-controller, rekor, tekton-chains, flux-source-controller, aactl, kubescape, vexctl, fulcio, tkn, spire-server, dex, terragrunt, cosign, kots...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, cloudflared, apko, chisel, istio, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, pulumi-language-yaml, grype, crossplane-provider-aws-iam, docker-compose, snyk-cli, chezmoi, tflint, kubernetes-dashboard, kaf, guac,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, cluster-api-gcp-controller, kubo, opentofu, azure-workload-identity-webhook, dask-gateway, redka, chisel, osv-scanner, nfs-subdir-external-provisioner, crossplane-provider-aws-lambda, azure-service-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, timestamp-authority, kargo, slsa-verifier, gitsign, grafana-mimir, zarf, sops, glab, sigstore-scaffolding, rabbitmq-messaging-topology-operator, crossplane-provider-azure-managedidentity, flux-image-automation-controller, snyk-cli,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: falcoctl, opentofu, apko, chisel, istio, osv-scanner, pulumi-language-yaml, grype, docker-machine-driver-harvester, snyk-cli, chezmoi, tflint, kubernetes-dashboard, kaf, guac, gomplate, step, tekton-chains, buildah, pulumi-language-java, mods, prometheus-operator,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, livekit-server-fips, cosign, kaniko, prometheus-podman-exporter-fips, tempo-fips, kubeflow-pipelines, kaniko-fips, oauth2-proxy, gotrue-fips, sqlexporter-fips, tempo, elastic-agent-fips, jitsucom-bulker, flux-operator, grafana-alloy-fips,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: opentofu, cluster-api, apko, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, helm-push, pulumi-language-yaml, grype, crossplane-provider-aws-iam, snyk-cli, trufflehog, guac, gomplate, crossplane-provider-aws-ec2, cerbos, gitaly,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: opentofu, cluster-api, apko, osv-scanner, crossplane-provider-aws-lambda, crossplane-provider-aws-sns, helm-push, pulumi-language-yaml, grype, crossplane-provider-aws-iam, snyk-cli, trufflehog, guac, gomplate, crossplane-provider-aws-ec2, cerbos, gitaly,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: vault, crossplane-provider-aws-firehose, kyverno-policy-reporter-plugins-kyverno-fips, gitea, gitsign, trivy-fips, gomplate-fips, cluster-api, gitlab-operator-fips, gitness, sops, snyk-cli, docker, crossplane-provider-aws-dynamodb-fips, policy-controller-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, gobump, kuma, neuvector-scanner-fips, sftpgo-plugin-eventstore, influxd, cloudnative-pg, knative-serving, nri-memcached, certificate-transparency-fips, cosign, kaniko, prometheus-podman-exporter-fips, ytt, kafkaexporter,...