GO-2024-2899 vulnerabilities

Vulnerabilities for packages: pombump, melange...

GO-2023-2375 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2026-4630 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, k8sgateway...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux-source-controller, flux...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: gitleaks, dynamic-localpv-provisioner, hey, vt-cli, terraform-provider-sendgrid, k3d...

GO-2022-0390 vulnerabilities

Vulnerabilities for packages: ctop, rancher-machine, docker-machine-driver-harvester...

GO-2022-0452 vulnerabilities

Vulnerabilities for packages: podman, ctop...

GO-2026-5764 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, sftpgo, crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, aws-network-policy-agent, aws-nuke, kyverno-policy-reporter, guac, gitlab-runner, loki, grafana, pulumi, amazon-cloudwatch-agent, crossplane-provider-aws-elasticache, keda,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, pvc-autoresizer, rancher-telemetry, vendir, rancher-loglevel, go-md2man, distribution, dockerize, kaf, argo-rollouts, openbao-k8s, kubernetes-dashboard-web, terraform-provider-random, spiffe-helper, etcd, helm-mapkubeapis, ini-file,...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: ratify, tekton-chains, crossplane, kyverno-notation-aws, spire-server, kubescape, trivy-operator, policy-controller, kyverno, trivy, aactl, gitsign, tflint, zarf, neuvector-sigstore-interface, goreleaser, tkn, falcoctl...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: ratify, teleport, flux-source-controller, kyverno-notation-aws, witness, zot, policy-controller, aactl, gitsign, goreleaser, tkn, falcoctl...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, pvc-autoresizer, kube-logging-operator, nri-f5, kubernetes-release, ini-file, vault-benchmark, crossplane-provider-aws-rds, osv-scanner, aws-privateca-issuer, guac, calico, cloud-provider-vsphere, gatus, rabbitmq-cluster-operator,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: dataplaneapi, kube-logging-operator, distribution, argo-rollouts, nri-f5, kubernetes-release, spiffe-helper, ini-file, vault-benchmark, kiali, osv-scanner, gcsfuse, flux-helm-controller, aws-privateca-issuer, kserve-rest-proxy, kubernetes-ingress-defaultbackend,...

CLEANSTART-2026-IF32046 Security fixes in local-static-provisioner 2.6.0-r1

Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...

MiracleLinux 8 : go-toolset:rhel8 (AXSA:2026-1326:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1326:01 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golan...

SUSE SLES15 Security Update : terraform-provider-susepubliccloud (SUSE-SU-2026:3057-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3057-1 advisory. This update for terraform-provider-susepubliccloud fixes the following issues - CVE-2022-41723: go1.19,go1.20: net/http2: quadratic...

SUSE-SU-2026:3056-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) (RHSA-2026:39810)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39810 advisory. Security Fixes: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 golang: Denial of Service due to excessive...

AlmaLinux 9 : golang (ALSA-2026:37435)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37435 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 os: golang: Go os.Root:...