GO-2024-3166 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, trivy, policy-controller-fips, cosign-fips, spire-server, rekor, aactl, zot, falcoctl, neuvector-sigstore-interface-fips, kubescape, wolfictl, melange, tkn, vexctl, slsa-verifier, tekton-chains, gitsign, falcoctl-fips, tkn-fips,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: skaffold, ko, policy-controller-fips, spire-server, aactl, zot, falcoctl, goreleaser, kubescape, wolfictl, melange, tkn, ko-fips, vexctl, slsa-verifier, tekton-chains, gitsign, falcoctl-fips, tkn-fips, neuvector-sigstore-interface, zarf, policy-controller,...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux, flux-source-controller...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-operator, pluto, flux-source-controller, kubescape, helm-push, kots, tw, chart-testing, cilium-cli, rancher-helm, cluster-api-helm-controller, flux, zot, flux-helm-controller, k9s, chartmuseum, cert-manager-cmctl, zarf, trivy, eksctl, k8ssandra-client, helm-docs...

GO-2026-5566 vulnerabilities

Vulnerabilities for packages: zarf, kots, flux, flux-source-controller, cilium-cli, rancher-fleet, kuma, helm-push, cert-manager-cmctl...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: helm-operator, k9s, up, zarf, kots, trivy, zot, flux-source-controller, eksctl, cilium-cli, flux-helm-controller, kubevela, k8sgpt, kubescape, chartmuseum, helm-push...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: helm-operator, k9s, up, zarf, kots, trivy, zot, flux-source-controller, eksctl, cilium-cli, flux-helm-controller, kubevela, k8sgpt, kubescape, chartmuseum, helm-push...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: grype, melange, flux-source-controller, kaniko, kubescape, helm-push, newrelic-infrastructure-agent, helm, up, ctop, kots, skaffold, cilium-cli, buildkitd, k3d, zot, fuse-overlayfs-snapshotter, flux-helm-controller, gitness, trivy, kubevela, k8sgpt, eksctl...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: docker, flux-source-controller, neuvector-sigstore-interface, trivy-operator, kubescape, teleport, sigstore-scaffolding, kyverno-notation-aws, witness, gitsign, skaffold, goreleaser, buildkitd, cosign, tflint, falcoctl, spire-server, zot, gh, tkn, ko,...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-operator, pluto, istio, flux-source-controller, helm-push, linkerd2, kots, tw, chart-testing, cilium-cli, cerbos, rancher-helm, cluster-api-helm-controller, zot, flux-helm-controller, envoy-gateway, k9s, chartmuseum, cert-manager-cmctl, zarf, kargo, trivy,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, grype, melange, apko, flux-source-controller, kaniko, wolfictl, kubescape, scorecard, crossplane, task, pulumi-language-java, pulumi-language-dotnet, kots, pulumi-language-yaml, gitsign, skaffold, chezmoi, goreleaser, guac, argo-events,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, grype, melange, apko, flux-source-controller, kaniko, wolfictl, kubescape, scorecard, crossplane, task, pulumi-language-java, pulumi-language-dotnet, kots, pulumi-language-yaml, gitsign, skaffold, chezmoi, goreleaser, guac, argo-events,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: argo-cd, trufflehog, grype, melange, apko, flux-source-controller, kaniko, trivy-operator, kubescape, external-secrets-operator, teleport, wolfictl, scorecard, crossplane, witness, pulumi-language-java, gomplate, gitaly, pulumi-language-dotnet, steampipe, kots,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, flux-kustomize-controller, step-ca, sops, harbor-registry, flux-source-controller, rclone, flyte, kubescape, fulcio, sigstore-scaffolding, airflow, restic, velero, up, opentelemetry-collector, chezmoi, goreleaser, grafana-agent-operator, guac,...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: policy-controller, spire-server, melange, slsa-verifier, apko, aactl, flux-source-controller, skaffold, tekton-chains, kubescape, tkn, ko, cosign...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, sops, flux-source-controller, kubescape, fulcio, dex, kots, slsa-verifier, gitsign, aactl, cosign, spire-server, argo-workflows, terragrunt, tkn, rekor, cloudflared, vexctl, oauth2-proxy, tekton-chains...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: skopeo, kyverno-notation-aws, falcoctl, witness, zarf, undock, ratify, kots, podman, gitsign, kyverno, flux-source-controller, slsa-verifier, tekton-chains, buildah, falco-no-driver, kubescape, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, src, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, docker, flux-source-controller, neuvector-sigstore-interface, scorecard, helm, step-issuer, steampipe, tw, crossplane-provider-aws-sns, cilium-cli, nfpm, argo-events, buildkitd,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: flux-source-controller, neuvector-sigstore-interface, kubescape, teleport, sigstore-scaffolding, kyverno-notation-aws, witness, gitsign, skaffold, goreleaser, aactl, cosign, tflint, falcoctl, spire-server, zot, docker-cli-buildx, gh, tkn, ko, policy-controller, zarf,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: docker, flux-source-controller, neuvector-sigstore-interface, trivy-operator, kubescape, teleport, sigstore-scaffolding, crossplane, kyverno-notation-aws, witness, slsa-verifier, gitsign, skaffold, goreleaser, buildkitd, cosign, aactl, tflint, falcoctl, spire-server,...