GO-2023-1795 vulnerabilities

Vulnerabilities for packages: skaffold, aactl...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: metacontroller, kiam, runc, dgraph, kube-oidc-proxy, nfs-subdir-external-provisioner-fips, dex, prometheus-elasticsearch-exporter, flux-source-controller, oauth2-proxy, prometheus-bind-exporter, sigstore-scaffolding, kube-state-metrics-fips, prometheus-alertmanager,...

GO-2023-2102 vulnerabilities

Vulnerabilities for packages: metacontroller, kiam, runc, dgraph, kube-oidc-proxy, nfs-subdir-external-provisioner-fips, kind, dex, prometheus-elasticsearch-exporter, flux-source-controller, oauth2-proxy, prometheus-bind-exporter, amass, sigstore-scaffolding, kube-state-metrics-fips,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: rekor, kots, spire-server, dex, aactl, tekton-chains, sops, oauth2-proxy, flux-source-controller, spire-server-fips, gitsign, slsa-verifier, fulcio, cloudflared, terragrunt, timestamp-authority-fips, tkn, flux-kustomize-controller, vexctl, falcoctl-fips, cosign-fips,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: syft, cadvisor, melange, spire-server, trivy, aactl, grype, kargo, spire-server-fips, docker-compose, conftest-fips, ctop, tkn, crossplane, cilium-cli, buildkitd, buf, prometheus, kaniko, cadvisor-fips, zot, wolfictl, conftest, loki, up, kubescape, dagger, ko...

GO-2026-5105 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, melange, upwind-agent, flux-source-controller, mapotf, zarf, kaniko-fips, trufflehog-fips, kubevela-fips, argo-events, jfrog-cli, kubevela, teleport, cloudbeat, flux-fips, trufflehog, commercial-chainloop-cli, pulumi-language-yaml,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, melange, upwind-agent, flux-source-controller, mapotf, zarf, kaniko-fips, trufflehog-fips, kubevela-fips, argo-events, jfrog-cli, kubevela, teleport, cloudbeat, flux-fips, trufflehog, pulumi-language-yaml, pulumi-language-java,...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: syft, gomplate, pulumi-kubernetes-operator, gitness, policy-controller, apko, crossplane-provider-aws-kms, crossplane-provider-aws-s3, melange, spire-server, crossplane-provider-aws, aactl, grype, boring-registry, crossplane-provider-aws-sns,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, xeol, melange, upwind-agent, mapotf, zarf, kaniko-fips, trufflehog-fips, kubevela-fips, argo-events, jfrog-cli, kubevela, teleport, cloudbeat, flux-fips, trufflehog, pulumi-language-yaml, pulumi-language-java, chainloop-cli, nemo,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: kots, kubescape-server-fips, kyverno-notation-aws, kyverno-fips, aactl, tekton-chains, zarf-fips, podman, flux-source-controller, gitsign, ratify, falcoctl, ratify-fips, tekton-chains-fips, witness, buildah-fips, zarf, podman-fips, slsa-verifier,...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: policy-controller, crossplane-fips, kubescape-server-fips, kyverno-notation-aws, spire-server, trivy, kyverno-fips, aactl, neuvector-sigstore-interface, tekton-chains, tflint, zarf-fips, spire-server-fips, gitsign, ratify, docker-fips, falcoctl, ratify-fips,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: crossplane-fips, kyverno-notation-aws, trivy, kyverno-fips, aactl, tekton-chains, kyverno-policy-reporter-plugins-kyverno, ratify, commercial-chainloop-backend, tekton-chains-fips, skaffold, slsa-verifier, kyverno-policy-reporter-plugins-kyverno-fips, cloudbeat-fips,...

GO-2026-5158 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-solutions, k8sgateway, aws-node-termination-handler-fips, drone, eks-node-monitoring-agent, xeol, kube-oidc-proxy, tflint, kubernetes-csi-driver-nfs, cert-manager-webhook-pdns, kube-state-metrics-fips, etcd-fips, zarf, spegel-fips, seaweedfs...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-amp, k8sgateway, kube-oidc-proxy, tflint, kubernetes-csi-driver-nfs, amass, redis-operator-fips, spegel-fips, databricks-cli, crossplane-provider-aws-ecr, terraform-provider-random-fips, grpcurl-fips, spiffe-helper,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm, crossplane-provider-azure-solutions, drone, upwind-agent, tflint, crossplane-provider-aws-chime, mapotf, etcd-fips, zarf, databricks-cli, prometheus-operator, kueue, opentelemetry-collector, kubevela-fips, crossplane-provider-aws-ecr,...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, crossplane-provider-azure-servicebus, crossplane-provider-azure-solutions, kuma, terraform-provider-tls, drone, step-kms-plugin-fips, crossplane-provider-azure-portal, gitlab-workhorse-ce-fips, melange, upwind-agent,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, crossplane-provider-azure-servicebus, crossplane-provider-azure-solutions, kuma, terraform-provider-tls, drone, step-kms-plugin-fips, crossplane-provider-azure-portal, gitlab-workhorse-ce-fips, melange, upwind-agent,...

GO-2026-5033 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, kuma, gitlab-workhorse-ce-fips, upwind-agent, prometheus-elasticsearch-exporter, knative-kafka-broker-fips, etcd-fips, knative-serving, buildah-fips, cert-manager, prometheus-operator, opentelemetry-collector, vitess, knative-eventing-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: helm-push, crossplane-provider-aws-ssm, crossplane-provider-azure-solutions, drone, xeol, kube-oidc-proxy, upwind-agent, nats-top-fips, spqr, kubescape-http-request-fips, crossplane-provider-aws-chime, cert-manager-webhook-pdns, langfuse, sftpgo-plugin-pubsub,...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm, crossplane-provider-azure-solutions, k8sgateway, aws-node-termination-handler-fips, xeol, kube-oidc-proxy, tflint, crossplane-provider-aws-chime, cert-manager-webhook-pdns, openfga, kube-state-metrics-fips, sftpgo-plugin-pubsub, etcd-fips...