GO-2026-4514 vulnerabilities

Vulnerabilities for packages: kubevela, terragrunt, cri-tools, terraform-mcp-server, witness, rclone, vcluster, datadog-agent, grafana, k8sgpt, lazygit, malcontent, eksctl, nfpm, dgraph, goreleaser, prometheus, grafana-alloy, gitlab-runner, mcp-grafana, redpanda, maru, weaviate, nuclei, dagger,...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: nfpm, goreleaser, gobuster, grafana, splunk-otel-collector, external-secrets-operator, crossplane-provider-azure-sql, cert-manager, crossplane-provider-azure-storage, crossplane-provider-azure-authorization, crossplane-provider-azure-managedidentity,...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gitsign, gh, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, sigstore-scaffolding, tekton-chains, zarf, trivy-operator, docker,...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: atlantis, kubewatch, argo-rollouts, goreleaser, argo-events, kubernetes-event-exporter, kyverno-policy-reporter, argo-cd, bento...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: kaniko, kubevela, argocd-image-updater, k9s, kots, pulumi, src-fingerprint, grype, argo-events, gitsign, pulumi-kubernetes-operator, kargo, gitea, flux-image-automation-controller, pulumi-language-java, task, zot, argo-workflows, k8sgpt, timoni, guac,...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: k9s, grype, nerdctl, splunk-otel-collector, trufflehog, docker-cli-buildx, kargo, cadvisor, zot, tw, falcoctl, trivy, spire-server, apko, buf, aws-otel-collector, buildah, goreleaser, syft, melange, wolfictl, zarf, dagger, openfga, opentelemetry-collector, osv-scanne...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: kaniko, kubevela, argocd-image-updater, k9s, kots, pulumi, src-fingerprint, grype, argo-events, gitsign, pulumi-kubernetes-operator, kargo, gitea, flux-image-automation-controller, pulumi-language-java, task, zot, argo-workflows, k8sgpt, timoni, guac,...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: kubevela, kots, src-fingerprint, pulumi, gitsign, pulumi-kubernetes-operator, pulumi-language-java, zot, gomplate, gitness, apko, flux-kustomize-controller, bom, goreleaser, pulumi-language-yaml, nuclei, go-licenses, scorecard, pulumi-language-dotnet...

GO-2026-4559 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, tekton-pipelines, crossplane-provider-aws-cloudwatchlogs, contour, sops, crossplane-provider-aws-kms, dex, external-dns, crossplane-provider-aws-cloudfront, caddy, goreleaser, melange, pulumi-language-yaml, kube-rbac-proxy,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: step, fluent-bit-plugin-loki, rook, step-ca, pulumi, terragrunt, boring-registry, argo-events, restic, bank-vaults, ksops, timestamp-authority, tkn, up, zot, druid, rclone, flyte, argo-workflows, fulcio, k8sgpt, py3-cassandra-medusa, wal-g, sops, guac, falcoctl, flux...

GO-2026-4866 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, stakater-reloader, dbmate, nodetaint, omnibump, oras, rabbitmq-messaging-topology-operator, envoy-ratelimit, gh, pluto, flux-image-automation-controller, dkron, ingress-nginx-controller, temporal, smarter-device-manager, tailscale,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, temporal-server, chisel, terragrunt, spqr, runc, container-object-storage-interface, argo-events, azcopy, jitsucom-bulker, addon-resizer, crossplane-provider-aws-firehose, dapr, kubeflow, lazydocker, neuvector-dbgen, q, tekton-pipelines,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gitsign, aactl, slsa-verifier, tkn, neuvector-sigstore-interface, falcoctl, tflint, kubescape, spire-server, goreleaser, kyverno, tekton-chains, crossplane, zarf, trivy-operator, teleport, ko, ratify, policy-controller...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, docker-cli-buildx, gitsign, aactl, gh, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, sigstore-scaffolding, tekton-chains, zarf, teleport,...

GO-2026-4358 vulnerabilities

Vulnerabilities for packages: kots, undock, kyverno-notation-aws, gitsign, aactl, gh, slsa-verifier, timestamp-authority, tkn, podman, witness, xeol, zot, fulcio, neuvector-sigstore-interface, guac, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: step, chisel, spqr, kubernetes-csi-driver-nfs, runc, container-object-storage-interface, azcopy, postgres-operator, rabbitmq-default-user-credential-updater, kubeflow, crossplane-provider-aws-firehose, restic, mc, gogatekeeper, kserve-modelmesh-serving, grpcurl,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gitsign, aactl, gh, slsa-verifier, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, tekton-chains, zarf, trivy-operator, teleport, ko...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, docker-cli-buildx, gitsign, gh, aactl, slsa-verifier, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, kyverno, sigstore-scaffolding,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: zot, teleport, goreleaser, tkn, kyverno-notation-aws, falcoctl, gitsign, aactl, policy-controller, flux-source-controller, ratify, witness...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, gitsign, gh, aactl, slsa-verifier, tkn, witness, zot, neuvector-sigstore-interface, falcoctl, tflint, skaffold, trivy, kubescape, flux-source-controller, vexctl, spire-server, cosign, goreleaser, sigstore-scaffolding, tekton-chains, zarf,...